$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: L/5C01X7YuI+G09O7NQxtr0p4knp4P6b0xyFZD80OzQ= Subject key identifier: 3C:F1:8E:FA:A4:01:2C:71:CF:50:2D:76:0A:D9:4B:BA:74:5D:D4:F6 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0C09 Signing time: Sat 26 Sep 2026 19:13:13 +0000 Manifest this update: Sat 26 Sep 2026 19:13:13 +0000 Manifest next update: Sat 03 Oct 2026 19:13:13 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: hsK5tDSxhq6pu2n7dNej1+yZKVTYEsFtp10I/AnuVLk=) 2: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=) 3: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=) 4: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=) 5: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=) 6: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=) 7: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=) 8: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Sep 26 19:13:13 2026 GMT Not After : Oct 3 19:13:13 2026 GMT Subject: CN=6ab81949-020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:ec:be:bc:73:b4:41:05:9b:df:44:01:66: b9:1e:83:ca:f8:46:9d:8e:4e:0a:f0:9e:0e:7c:5c: c3:66:49:2b:c8:f5:f9:2f:bd:e9:7b:6b:74:b0:5b: 02:dd:fa:5e:bc:cc:78:06:3c:b9:49:12:89:d5:29: 9c:1d:37:0a:0d:8c:3a:7b:e7:1a:16:00:c3:8a:42: ec:ce:9f:75:68:41:13:6c:5a:58:ad:54:38:bd:d3: 5c:4a:8b:4b:46:73:f1:0f:9d:ec:83:3b:13:7e:ba: d6:6f:30:3d:91:98:ba:46:f9:85:10:e5:28:2d:be: 8f:ce:2d:30:59:eb:63:f0:44:21:58:1a:5c:0d:08: b8:de:f9:68:67:23:f1:bb:cd:60:46:2c:00:75:2a: 42:59:a2:82:29:e6:1b:b7:15:70:f9:b5:46:c0:40: 6e:d6:d3:e3:07:4d:78:f9:55:52:d3:e1:0c:95:b2: 29:ab:8a:12:2b:cb:1e:54:df:dc:41:2e:7c:09:96: 66:96:0a:ac:b4:c1:f5:25:db:13:77:9e:ce:25:5f: a3:65:db:87:01:ca:01:fa:d1:a8:c6:42:1a:56:28: 78:e2:bc:8e:cf:39:79:77:05:c0:53:8f:e8:07:f1: ef:1d:b9:80:7e:0f:a8:eb:76:a0:57:2f:2b:5a:0f: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F1:8E:FA:A4:01:2C:71:CF:50:2D:76:0A:D9:4B:BA:74:5D:D4:F6 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7e:0d:93:d2:38:96:96:fd:56:22:61:98:be:5a:db:e6:90: 3a:0c:f3:d0:e3:49:dc:0b:68:70:a4:dc:75:de:97:4e:11:26: 43:9d:38:d9:98:29:f5:27:b9:cc:2a:21:45:20:8d:04:87:5b: 26:8c:2c:f9:3d:27:ec:75:f9:ed:34:90:fa:22:77:b7:04:1f: 94:f7:ce:e4:4f:04:15:c5:4c:c4:c3:f1:f9:a4:37:4d:c7:12: a9:4a:09:aa:5d:53:97:82:ea:19:a1:0c:f9:38:1b:09:de:30: cb:e0:52:10:83:0d:4c:a2:84:3c:78:3e:a6:d2:d2:51:f4:ab: b1:a5:3c:95:41:14:92:76:16:32:c4:6a:4d:5c:b5:0d:1d:a0: 26:31:f1:53:7c:8a:83:95:b1:22:55:b9:5a:54:50:83:6e:55: 05:2f:7c:3d:d1:12:bf:64:d0:74:c8:bc:1b:fe:53:1c:cc:33: a1:04:1d:78:69:b8:7b:f5:23:ff:fe:dd:d8:11:55:80:72:c7: c0:47:1e:44:b1:10:17:d8:be:75:55:99:07:36:5d:e7:0a:c0: 12:59:c5:a7:70:cf:6f:c6:c6:f4:5b:e7:27:7a:43:3f:c4:f3: dd:9e:de:b4:9d:7b:62:70:0a:64:3c:c3:fa:65:ca:3d:4a:b8: a7:7a:b5:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjYwOTI2MTkxMzEzWhcNMjYxMDAzMTkxMzEzWjAYMRYwFAYD VQQDEw02YWI4MTk0OS0wMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxrsvrxztEEFm99EAWa5HoPK+Eadjk4K8J4OfFzDZkkryPX5L73pe2t0sFsC 3fpevMx4Bjy5SRKJ1SmcHTcKDYw6e+caFgDDikLszp91aEETbFpYrVQ4vdNcSotL RnPxD53sgzsTfrrWbzA9kZi6RvmFEOUoLb6Pzi0wWetj8EQhWBpcDQi43vloZyPx u81gRiwAdSpCWaKCKeYbtxVw+bVGwEBu1tPjB014+VVS0+EMlbIpq4oSK8seVN/c QS58CZZmlgqstMH1JdsTd57OJV+jZduHAcoB+tGoxkIaVih44ryOzzl5dwXAU4/o B/HvHbmAfg+o63agVy8rWg/4WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzxjvqk ASxxz1AtdgrZS7p0XdT2MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApn4Nk9I4lpb9ViJhmL5a2+aQOgzz0ONJ3AtocKTcdd6XThEmQ5042Zgp9Se5 zCohRSCNBIdbJows+T0n7HX57TSQ+iJ3twQflPfO5E8EFcVMxMPx+aQ3TccSqUoJ ql1Tl4LqGaEM+TgbCd4wy+BSEIMNTKKEPHg+ptLSUfSrsaU8lUEUknYWMsRqTVy1 DR2gJjHxU3yKg5WxIlW5WlRQg25VBS98PdESv2TQdMi8G/5THMwzoQQdeGm4e/Uj //7d2BFVgHLHwEceRLEQF9i+dVWZBzZd5wrAElnFp3DPb8bG9FvnJ3pDP8Tz3Z7e tJ17YnAKZDzD+mXKPUq4p3q1oQ== -----END CERTIFICATE-----Generated at Sun Sep 27 02:57:08 2026 by rpki-client