
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: ruHV6XxB1UxnRfL3Ta22h+5XjhfbnVzVacd429Coyhk=
Subject key identifier: C6:3A:BD:B3:54:AE:14:A5:C3:D6:AF:A6:C1:10:FD:35:DC:D6:91:91
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BC3
Signing time: Tue 12 May 2026 19:18:09 +0000
Manifest this update: Tue 12 May 2026 19:18:09 +0000
Manifest next update: Tue 19 May 2026 19:18:09 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: vD2Vu3p0JAKgALTok5tPFKMw327T4e3MvUht44Cbu8A=)
2: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
3: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
5: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
6: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
7: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: May 12 19:18:09 2026 GMT
Not After : May 19 19:18:09 2026 GMT
Subject: CN=6a037cf1-b8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:db:d9:3a:2c:3e:01:3f:72:7d:00:41:1f:
57:05:66:98:dd:65:b6:a1:cb:5d:5b:a8:1d:d2:a0:
26:ad:b4:2e:f3:e7:1f:3e:7d:10:6c:eb:74:50:c2:
6c:d2:8a:62:44:2a:3f:dd:e2:af:a5:b1:23:1c:fe:
99:24:ae:28:32:fa:85:57:a4:4a:d8:7d:3b:53:7d:
a8:cb:63:75:0c:8c:61:d1:45:f6:e3:c4:41:b2:27:
a2:d1:a7:86:89:f2:a8:bc:25:cf:ea:d6:f6:c0:6a:
25:5b:79:f4:d1:5a:b2:6a:3c:c0:0d:1e:76:f9:df:
ed:fb:0e:9d:36:5a:46:ca:a6:74:dc:d7:9d:a6:b2:
37:6c:54:e8:94:62:15:c7:74:c3:e8:c8:36:9a:69:
da:24:51:21:23:a7:5b:f3:90:84:fc:7f:e5:52:2e:
0b:54:c6:61:7f:35:8c:7b:68:8f:b1:18:1b:f1:fe:
a8:ad:3e:6e:e0:cb:ca:1f:f5:01:09:2e:6d:02:44:
f2:38:42:12:9b:be:0a:d0:2a:a7:ed:07:b6:d4:51:
3f:fc:85:18:76:8a:a3:7d:61:d6:11:72:15:99:74:
f4:04:0d:bc:1f:51:02:a1:f6:56:4f:9a:8d:6a:4c:
47:bc:f5:d1:53:be:5b:f0:d6:8d:60:b2:3e:3c:81:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:BD:B3:54:AE:14:A5:C3:D6:AF:A6:C1:10:FD:35:DC:D6:91:91
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:a4:fc:16:e2:a3:a8:d7:72:64:ad:15:1e:6e:dc:a2:57:
32:5c:9c:6f:ae:af:85:f9:34:d4:39:e3:3b:64:7e:16:ad:53:
eb:eb:de:2b:b6:30:f7:22:7e:58:97:9a:19:6b:33:6c:f0:ed:
38:89:16:5e:d5:0c:d5:e7:27:26:1d:17:a5:01:43:2b:59:c3:
bc:91:76:c0:93:5b:a9:f8:db:62:9e:1a:3c:6f:58:c6:b7:19:
f2:9c:0c:ea:6c:76:44:30:7d:c3:75:58:15:eb:89:1c:fe:12:
96:aa:7e:32:23:f3:c3:ff:02:22:a5:4b:a4:57:3b:47:8c:15:
b5:15:9c:91:40:eb:a0:e3:ce:56:12:50:5d:ac:3b:48:d8:80:
38:66:09:ff:ce:d8:62:06:6a:d8:ee:1f:b7:e8:0f:c1:64:b4:
25:0c:99:f0:52:25:aa:ca:ff:21:94:a8:a7:3a:a4:0f:10:e5:
61:e2:de:3e:0d:c1:d6:72:c9:9e:42:9c:83:59:4e:ee:ea:82:
aa:14:88:0f:e4:21:e0:cf:f4:ce:f4:37:f8:f2:2d:4f:9e:15:
25:1a:63:fb:0a:59:e4:52:6f:60:45:a7:dd:a7:31:88:1d:1d:
c4:9c:24:31:6d:94:57:04:cd:5d:2f:43:ce:0a:d0:2f:fe:53:
d3:a8:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:27 2026 by rpki-client