$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: PKeoLjQDF/1uF0TY2O5XRNbugFRlKYRPNQttHvOJNyM= Subject key identifier: 72:62:E7:31:3F:C1:AD:04:84:4C:8A:4B:C2:77:E4:ED:7F:62:6B:47 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0BAA Signing time: Tue 24 Mar 2026 19:05:47 +0000 Manifest this update: Tue 24 Mar 2026 19:05:46 +0000 Manifest next update: Tue 31 Mar 2026 19:05:46 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: +BC0iTAEDcg1XrjLAal/bsjo8yxXl6OpSH8WdDs3dOQ=) 2: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=) 3: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=) 4: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=) 5: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=) 6: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=) 8: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Mar 24 19:05:46 2026 GMT Not After : Mar 31 19:05:46 2026 GMT Subject: CN=69c2e08b-7719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:d1:96:c8:74:e9:87:67:51:d9:6c:05:43: 2a:4e:06:65:97:3c:11:50:f1:36:a6:e5:c5:76:96: 8a:9b:96:fa:83:b6:f5:5f:c8:d5:4a:22:36:66:99: 99:74:4b:5c:47:ec:a5:4e:3f:5c:95:66:bd:73:14: e7:cb:3f:2c:aa:f4:ab:04:d0:0b:16:50:8a:a8:c3: 6f:a5:1c:64:fe:09:55:77:54:a2:c8:ec:cc:07:cb: c4:c4:10:d8:b7:cf:da:6a:c7:28:ce:b8:a6:84:17: 55:00:04:24:e1:d8:24:a9:c4:e7:b1:01:82:24:3c: 86:7a:6b:83:b3:5e:93:15:eb:08:8f:7c:5a:5f:39: 5f:d7:b0:79:7a:08:18:11:8f:3f:40:19:77:39:3e: ee:51:fd:0f:e0:a7:ea:78:b4:8f:1e:58:ac:f3:3f: 05:8f:5d:a9:97:d9:9d:e3:0a:b1:e6:70:d3:e5:5e: ac:81:0a:f9:2c:8f:59:41:61:f7:27:41:9e:96:91: c4:71:46:a5:57:36:97:14:87:71:af:9f:e5:2f:c3: d8:ec:74:a5:3f:e5:2e:1b:23:a5:7c:e9:cb:71:05: 99:f9:f4:95:ed:6d:ad:4b:1a:c7:36:39:cd:fe:5d: 5c:4a:53:7e:ba:88:b2:2f:f4:b2:f8:4b:25:01:a1: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:E7:31:3F:C1:AD:04:84:4C:8A:4B:C2:77:E4:ED:7F:62:6B:47 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:40:d5:e5:b0:74:6f:d6:c9:51:12:d1:0d:b7:7c:54:2c:76: 83:ba:fe:ca:a9:4e:61:d3:81:e4:dd:f0:6b:74:e7:24:ea:aa: 1a:17:46:f0:ad:1b:ac:8c:6e:02:72:c0:69:6d:79:92:83:68: 8a:39:5d:c3:fc:82:5d:1c:33:30:99:b5:b8:bd:7b:a7:49:c7: e0:99:1a:16:0d:8a:9a:77:4b:1f:cf:e4:2c:35:50:33:08:81: 60:f5:71:d8:fc:d2:2a:9c:53:30:e9:48:15:51:dc:1c:3a:b7: 0d:55:d9:d3:1d:1b:a5:63:83:44:f6:6f:f5:ba:8b:f5:52:3c: 67:a9:03:f6:9f:be:d5:55:57:ef:b9:28:e1:2f:45:dc:53:2c: 1f:38:18:d7:be:ba:26:95:52:ea:5a:92:31:3d:b2:23:1b:62: 40:5d:f9:97:1f:33:41:96:ae:12:4f:6b:48:1a:f7:ab:87:ef: 9d:16:64:bb:3f:5b:24:38:bd:dd:01:33:3a:f3:7f:6d:41:07: 2d:2d:96:a8:8a:c1:35:00:aa:fd:39:09:ce:89:78:3d:fa:57: 7c:0c:26:46:f6:a3:54:4b:d8:b7:e4:9a:14:bf:f4:95:bb:2c: dc:67:38:91:3c:62:1e:8d:dd:70:ac:ed:e6:56:06:d9:04:cf: 8c:e4:7e:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjYwMzI0MTkwNTQ2WhcNMjYwMzMxMTkwNTQ2WjAYMRYwFAYD VQQDEw02OWMyZTA4Yi03NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjT7Rlsh06YdnUdlsBUMqTgZllzwRUPE2puXFdpaKm5b6g7b1X8jVSiI2ZpmZ dEtcR+ylTj9clWa9cxTnyz8sqvSrBNALFlCKqMNvpRxk/glVd1SiyOzMB8vExBDY t8/aascozrimhBdVAAQk4dgkqcTnsQGCJDyGemuDs16TFesIj3xaXzlf17B5eggY EY8/QBl3OT7uUf0P4KfqeLSPHlis8z8Fj12pl9md4wqx5nDT5V6sgQr5LI9ZQWH3 J0GelpHEcUalVzaXFIdxr5/lL8PY7HSlP+UuGyOlfOnLcQWZ+fSV7W2tSxrHNjnN /l1cSlN+uoiyL/Sy+EslAaEWEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJi5zE/ wa0EhEyKS8J35O1/YmtHMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUDV5bB0b9bJURLRDbd8VCx2g7r+yqlOYdOB5N3wa3TnJOqqGhdG8K0brIxu AnLAaW15koNoijldw/yCXRwzMJm1uL17p0nH4JkaFg2KmndLH8/kLDVQMwiBYPVx 2PzSKpxTMOlIFVHcHDq3DVXZ0x0bpWODRPZv9bqL9VI8Z6kD9p++1VVX77ko4S9F 3FMsHzgY1766JpVS6lqSMT2yIxtiQF35lx8zQZauEk9rSBr3q4fvnRZkuz9bJDi9 3QEzOvN/bUEHLS2WqIrBNQCq/TkJzol4PfpXfAwmRvajVEvYt+SaFL/0lbss3Gc4 kTxiHo3dcKzt5lYG2QTPjOR+MQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:48:14 2026 by rpki-client