$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: iwjytzAyjRHtT3+scjaYJvx4f0hfWJIDyH9UKvY8DBQ= Subject key identifier: 4C:27:79:A7:D1:AE:4A:99:89:7D:22:79:2E:8B:AE:D9:79:60:75:5E Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0B27 Signing time: Fri 22 Aug 2025 19:38:16 +0000 Manifest this update: Fri 22 Aug 2025 19:38:15 +0000 Manifest next update: Fri 29 Aug 2025 19:38:15 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: sDK/qVdtPuGefUjFKozOeU3RB3MikjmCP3xnOQ38C5k=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=) 4: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: uU9R+G2quDutiuaDSqaRQis0/8oF8eouaABisexnp3Y=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Aug 22 19:38:15 2025 GMT Not After : Aug 29 19:38:15 2025 GMT Subject: CN=68a8c728-7350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:ec:09:10:1c:c4:a8:80:65:7c:91:b1:a3: ca:27:a3:f5:b7:c9:98:f6:41:50:90:8f:59:f2:b9: 2d:06:ec:46:e9:e4:76:b8:86:fe:86:c4:bb:47:ff: de:88:c4:e0:4e:93:9e:55:b5:ca:f2:d3:fc:21:cb: 20:41:c4:95:54:1f:6b:ab:54:d2:fa:99:c7:b6:e4: 90:bd:82:a8:40:2a:cc:43:9d:b8:bb:79:a6:9e:ca: b6:48:bb:75:a2:12:e9:99:5f:38:df:33:91:89:eb: 92:2b:c3:2b:10:eb:0f:8a:32:23:4d:21:43:58:92: 74:52:47:05:0a:99:17:6e:de:ea:0f:86:98:e4:fe: 06:8a:ab:8e:81:a1:d5:df:61:88:26:c3:2d:62:ad: 31:5e:64:16:c4:60:bf:77:10:d3:ef:7f:ef:1d:63: 2c:ba:52:11:3c:ec:cb:80:c9:15:8f:c0:bd:6d:bc: a2:88:af:59:8b:1e:b0:fe:a0:9c:b0:80:82:32:b7: fb:7a:76:16:15:42:c2:a9:33:3d:37:b8:e8:93:f7: 3a:c9:a7:2c:cc:13:0d:16:76:00:17:03:a4:99:a3: 60:3e:69:c7:bb:a6:53:40:e6:e8:51:a1:51:9a:3b: e8:b6:a4:c1:d6:9b:84:a9:f1:05:ad:99:0a:c1:82: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:27:79:A7:D1:AE:4A:99:89:7D:22:79:2E:8B:AE:D9:79:60:75:5E X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2a:3d:ab:b4:50:4c:20:49:39:b2:b8:f2:ec:64:25:b5:d1: 43:50:ee:9e:99:fe:89:92:01:47:ab:49:8d:ab:2b:d2:27:40: 09:00:74:d9:a4:4f:70:1b:f4:4e:ed:66:7a:53:26:8f:15:12: 23:b6:90:3f:19:97:a1:1b:6c:a1:20:84:9b:c8:de:02:fe:19: 40:d1:33:ea:f6:02:5b:fb:8b:2e:c9:1d:93:7f:52:9c:5e:00: 36:1a:6a:b1:25:09:4f:a3:43:28:d7:14:16:67:fc:43:13:37: 8a:ec:57:b9:4b:f4:43:43:a8:c7:4e:eb:3d:93:78:15:ab:aa: 69:4c:0f:f3:2d:84:43:c7:4b:2c:a0:cd:97:be:6c:93:58:75: d4:f6:85:92:08:90:0b:36:35:a3:fd:55:0e:6b:d9:2d:7c:36: 31:f8:74:de:92:a9:8a:4c:9e:af:66:75:cb:a5:8d:17:f4:e6: b7:4d:8d:27:e4:23:74:df:9a:70:d7:17:c4:70:06:5a:0e:08: 1b:3d:ee:f5:b2:42:7c:75:28:5b:26:94:f1:77:d4:7b:02:89: 8a:fb:60:27:77:d6:22:54:79:ab:32:fd:75:54:88:0d:b9:d4: fb:9f:7e:26:62:77:2b:fa:17:39:53:fc:6e:27:d0:9a:7a:b9: 54:43:f9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjUwODIyMTkzODE1WhcNMjUwODI5MTkzODE1WjAYMRYwFAYD VQQDEw02OGE4YzcyOC03MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhzsCRAcxKiAZXyRsaPKJ6P1t8mY9kFQkI9Z8rktBuxG6eR2uIb+hsS7R//e iMTgTpOeVbXK8tP8IcsgQcSVVB9rq1TS+pnHtuSQvYKoQCrMQ524u3mmnsq2SLt1 ohLpmV843zORieuSK8MrEOsPijIjTSFDWJJ0UkcFCpkXbt7qD4aY5P4GiquOgaHV 32GIJsMtYq0xXmQWxGC/dxDT73/vHWMsulIRPOzLgMkVj8C9bbyiiK9Zix6w/qCc sICCMrf7enYWFULCqTM9N7jok/c6yacszBMNFnYAFwOkmaNgPmnHu6ZTQOboUaFR mjvotqTB1puEqfEFrZkKwYKnuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwneafR rkqZiX0ieS6Lrtl5YHVeMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Kj2rtFBMIEk5srjy7GQltdFDUO6emf6JkgFHq0mNqyvSJ0AJAHTZ pE9wG/RO7WZ6UyaPFRIjtpA/GZehG2yhIISbyN4C/hlA0TPq9gJb+4suyR2Tf1Kc XgA2GmqxJQlPo0Mo1xQWZ/xDEzeK7Fe5S/RDQ6jHTus9k3gVq6ppTA/zLYRDx0ss oM2XvmyTWHXU9oWSCJALNjWj/VUOa9ktfDYx+HTekqmKTJ6vZnXLpY0X9Oa3TY0n 5CN035pw1xfEcAZaDggbPe71skJ8dShbJpTxd9R7AomK+2And9YiVHmrMv11VIgN udT7n34mYncr+hc5U/xuJ9CaerlUQ/kK -----END CERTIFICATE-----Generated at Sat Aug 23 17:56:02 2025 by rpki-client