This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: 2U9b6B8XV76M9sErpr6dZBKaeus9qc4wVFEPhqQl05M=
Subject key identifier: 9B:E1:B3:7C:35:73:8F:D7:F7:30:D9:A1:7C:2E:72:93:6E:36:90:07
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0BC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0B5C
Signing time: Thu 04 Dec 2025 18:43:29 +0000
Manifest this update: Thu 04 Dec 2025 18:43:29 +0000
Manifest next update: Thu 11 Dec 2025 18:43:29 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: ch3X3s3bfelce/6G9zYWC2L9Xf0Ourhse4PsQPobVjo=)
2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=)
3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=)
4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=)
5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Dec 4 18:43:29 2025 GMT
Not After : Dec 11 18:43:29 2025 GMT
Subject: CN=6931d651-ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:f1:5c:5a:4c:0a:11:f2:c9:84:00:a0:7f:
12:d5:0d:11:61:c1:d1:b6:ee:94:b5:01:c0:0b:49:
aa:d6:84:32:3c:7a:08:d2:19:fd:9f:72:fd:68:47:
ac:3d:ee:2a:03:5f:ce:34:9c:36:9e:c2:e9:32:3c:
4f:9e:c6:d2:51:15:2d:a1:be:31:98:40:2e:e5:b6:
1b:cf:ef:b0:d8:e6:a6:56:0b:3b:0b:1b:7b:e6:c6:
7d:de:db:5a:58:47:36:cf:71:e3:5b:26:66:c1:62:
24:c5:7f:50:8f:3d:9b:a3:13:b2:d2:c6:88:89:bf:
76:ba:6e:8f:8a:de:e9:13:b7:72:31:85:92:9c:42:
a5:ad:28:23:b4:51:0f:77:2c:4d:01:1e:58:ad:e5:
ac:3b:96:14:d9:ba:ab:1e:45:bd:ae:de:55:c8:82:
8c:82:a3:77:89:5b:91:56:42:55:12:dc:02:fa:92:
86:76:5c:ba:5a:e4:b8:05:4a:b1:56:1f:8e:cc:c5:
a1:64:75:ce:bc:7a:1d:e8:71:3a:51:37:8b:a7:bf:
5e:48:86:01:d0:fe:5c:cf:2d:39:ff:2e:9d:8a:07:
f0:9d:4a:80:fd:34:5e:74:4f:17:4e:60:33:45:9c:
4e:19:8d:e5:eb:56:79:03:3f:39:6e:b4:2d:e2:5d:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:B3:7C:35:73:8F:D7:F7:30:D9:A1:7C:2E:72:93:6E:36:90:07
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1a:a1:fa:e8:cf:0e:05:d2:c3:3d:d8:ab:57:cc:af:ea:42:
9b:2d:dc:ce:41:e1:3e:7f:2a:b4:71:e9:d4:4b:45:95:b3:ba:
47:a8:3b:11:02:08:97:9f:39:60:48:11:0e:e7:3c:ff:b2:4c:
73:f5:cc:57:40:73:f0:36:7a:28:ed:77:a3:02:00:91:55:91:
58:90:68:f4:66:4a:2b:92:28:61:4f:73:b5:6b:4e:32:b0:bb:
ba:c3:3b:62:60:fb:ef:39:de:5b:48:94:12:a2:2e:2d:3e:bb:
28:b5:6f:33:75:81:46:88:19:8e:3f:c6:09:9b:c9:62:4c:0c:
80:5a:29:30:76:12:4f:f1:ba:40:b0:65:8b:cc:58:51:c0:8e:
62:f6:8d:4a:06:0b:8f:46:b2:34:4e:00:4c:e5:df:b5:90:db:
35:bb:dd:83:57:1c:ad:60:fa:b1:c3:2f:2d:f3:5b:2a:7d:4f:
af:33:32:31:59:94:3d:e9:d1:c4:05:03:e2:c0:de:d3:35:85:
51:70:b6:a0:0f:04:36:c7:4b:28:f5:a4:9a:18:e0:54:e8:a8:
69:59:7b:4d:c1:9e:1d:3c:06:ae:64:2c:f4:20:8a:d8:94:81:
ef:69:2f:f1:16:e5:05:45:95:9d:01:8a:1c:79:e2:09:8f:86:
ba:16:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:58:14 2025 by rpki-client