$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: 2JgIxzFqjiIqOtGLCsoz18c8HG+b0Ljd7tDTaDh4H6U= Subject key identifier: C2:3B:81:BE:6F:56:D5:C5:58:FD:68:71:1B:66:3A:5E:1D:EC:BD:27 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0B2E Signing time: Thu 04 Sep 2025 19:42:16 +0000 Manifest this update: Thu 04 Sep 2025 19:42:16 +0000 Manifest next update: Thu 11 Sep 2025 19:42:16 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: efoi9yNiG9H5MZHin6oV81yfkNkYSUW3585cT9J6e0o=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Sep 4 19:42:16 2025 GMT Not After : Sep 11 19:42:16 2025 GMT Subject: CN=68b9eb98-d5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:a8:0b:3f:54:3c:29:ce:e6:44:14:96:39: 66:a1:f9:30:fb:bf:8f:3e:d1:ce:5a:28:20:5a:07: e5:f0:8f:98:63:37:18:ce:60:24:3b:79:a1:26:e4: 37:48:e5:a2:4d:76:77:d1:19:7e:07:62:c8:ed:f1: ef:ec:c4:46:7d:3a:9d:0e:70:77:5c:18:31:bd:e0: 56:53:e3:34:42:e3:b3:9f:81:fc:03:1c:ad:59:7d: 9d:6b:d5:35:52:b6:7b:06:e6:2c:35:f5:a6:b3:b4: 96:35:05:81:f6:42:12:c8:ac:47:77:2d:ca:a5:bc: 21:cf:d0:33:da:af:4b:e1:01:88:79:00:ff:c7:9e: 97:9b:e8:b6:1c:16:19:1b:7a:6d:a2:22:41:10:22: ed:20:21:b0:f6:b6:ea:43:aa:e1:45:de:1b:5e:df: 77:93:3b:90:87:d7:63:32:15:c8:d9:33:4e:39:4a: 21:06:a1:37:3c:6f:49:a2:d4:e8:31:7e:89:4a:b5: e8:3e:41:85:dc:0e:3c:6a:7b:47:a7:85:6a:af:7e: 1f:d7:ef:e7:62:cf:4b:10:86:2a:74:da:62:ab:2c: aa:2c:4a:99:7b:de:fb:d8:eb:69:c7:2d:3d:35:97: a7:b3:ed:e9:7b:03:f9:b2:8d:3b:18:d7:23:0e:89: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:81:BE:6F:56:D5:C5:58:FD:68:71:1B:66:3A:5E:1D:EC:BD:27 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:53:ff:83:46:d1:f0:de:b6:dc:9b:10:08:93:4e:ed:22:39: c6:e0:95:39:2e:83:0f:59:68:88:1e:b6:ea:0f:33:ef:18:ac: 6d:94:52:35:fb:ae:d3:9f:6b:32:30:67:33:29:e3:dc:71:96: f0:85:4e:c1:67:0e:c9:f3:32:9c:86:03:2f:2c:09:54:fb:4c: ef:14:e3:eb:66:a7:bb:f5:3a:fe:4b:6d:ce:d6:e9:4e:01:8f: 9d:7e:ff:9f:04:ff:b3:e8:b8:12:bc:b1:d1:ed:62:ce:dc:2a: f9:0b:32:17:e0:dd:e9:69:ed:56:71:2a:30:40:27:6a:5d:e3: e6:7d:02:55:20:bf:08:7e:61:e1:6b:d3:27:2a:59:34:a9:df: 95:48:13:32:91:ff:1e:1e:65:00:27:ca:bb:8f:fe:5f:2f:84: 13:a6:20:b9:a7:07:b5:8b:a0:ba:f8:14:84:1a:c3:d8:a4:64: 87:93:40:ce:91:26:04:81:bc:74:9d:a6:bd:85:2a:28:8c:ae: 91:6c:5d:37:29:13:fa:43:07:64:5f:31:97:40:3f:0d:98:98: 3f:d6:93:15:04:8c:63:59:2f:8f:2d:40:c4:91:3f:2d:84:27: c2:29:79:90:b3:e8:19:4b:f6:56:6c:cf:85:59:4e:e1:06:db: d3:1f:80:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwOTA0MTk0MjE2WhcNMjUwOTExMTk0MjE2WjAYMRYwFAYD VQQDEw02OGI5ZWI5OC1kNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6eoCz9UPCnO5kQUljlmofkw+7+PPtHOWiggWgfl8I+YYzcYzmAkO3mhJuQ3 SOWiTXZ30Rl+B2LI7fHv7MRGfTqdDnB3XBgxveBWU+M0QuOzn4H8AxytWX2da9U1 UrZ7BuYsNfWms7SWNQWB9kISyKxHdy3Kpbwhz9Az2q9L4QGIeQD/x56Xm+i2HBYZ G3ptoiJBECLtICGw9rbqQ6rhRd4bXt93kzuQh9djMhXI2TNOOUohBqE3PG9JotTo MX6JSrXoPkGF3A48antHp4Vqr34f1+/nYs9LEIYqdNpiqyyqLEqZe9772Otpxy09 NZens+3pewP5so07GNcjDokUSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI7gb5v VtXFWP1ocRtmOl4d7L0nMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0U/+DRtHw3rbcmxAIk07tIjnG4JU5LoMPWWiIHrbqDzPvGKxtlFI1 +67Tn2syMGczKePccZbwhU7BZw7J8zKchgMvLAlU+0zvFOPrZqe79Tr+S23O1ulO AY+dfv+fBP+z6LgSvLHR7WLO3Cr5CzIX4N3pae1WcSowQCdqXePmfQJVIL8IfmHh a9MnKlk0qd+VSBMykf8eHmUAJ8q7j/5fL4QTpiC5pwe1i6C6+BSEGsPYpGSHk0DO kSYEgbx0naa9hSoojK6RbF03KRP6QwdkXzGXQD8NmJg/1pMVBIxjWS+PLUDEkT8t hCfCKXmQs+gZS/ZWbM+FWU7hBtvTH4Bh -----END CERTIFICATE-----Generated at Sat Sep 6 16:00:33 2025 by rpki-client