
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: m0E/GMWFaNU64HfqARN4QolVbVdx6eoLombO20T2NAI=
Subject key identifier: 75:A4:9E:F8:C3:AC:27:C4:18:A3:B4:64:4F:E5:2D:5F:5F:AC:E7:0C
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BEA
Signing time: Tue 28 Jul 2026 19:27:25 +0000
Manifest this update: Tue 28 Jul 2026 19:27:24 +0000
Manifest next update: Tue 04 Aug 2026 19:27:24 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: w/7Ch6X6bYDWupOGPKTW8qOqjflOS95ykMoFvxz1jEI=)
2: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
4: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
5: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
7: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
8: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Jul 28 19:27:24 2026 GMT
Not After : Aug 4 19:27:24 2026 GMT
Subject: CN=6a69029d-286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:dc:ce:02:af:76:83:72:fc:e9:7c:e5:f6:
cb:ff:9f:49:93:0f:bf:5e:27:87:84:fe:8d:09:c4:
32:a3:d3:f6:2e:20:29:80:16:4d:88:47:59:03:22:
14:93:1f:c9:04:4c:62:eb:2a:29:66:91:6d:98:c3:
5d:c7:9a:e8:d4:72:3d:56:fc:5c:92:6b:38:91:7f:
55:02:17:09:c5:3c:ab:78:e1:da:30:58:a2:55:2b:
97:59:74:10:b5:80:7b:ec:50:79:a0:62:d7:27:42:
ce:1c:0b:90:7a:86:cd:29:d7:8e:24:c6:48:5c:74:
46:03:6e:b9:8c:3d:ab:17:e9:5f:b4:98:27:29:ec:
4d:bc:ab:8c:e7:18:ff:88:de:cb:c7:4a:e0:0e:bf:
7a:29:86:f2:58:a2:cc:82:06:d3:df:0d:aa:27:f4:
61:72:ba:e9:57:78:2a:6a:5d:ae:d3:ce:2c:d8:ce:
ea:49:10:8a:4a:c9:bd:9d:e6:41:e3:2b:b7:84:e1:
b8:06:e8:fd:9f:bb:ac:8e:31:57:16:8d:78:13:78:
72:21:e1:68:d1:37:92:9e:d0:1b:1a:89:75:4a:4d:
03:57:ee:91:f3:e7:a8:b0:28:16:20:06:4d:6a:58:
97:ad:cf:2f:64:2e:e5:2d:9f:f0:1e:6f:a8:48:e2:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:9E:F8:C3:AC:27:C4:18:A3:B4:64:4F:E5:2D:5F:5F:AC:E7:0C
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:6e:6e:30:4e:e6:87:b4:90:c2:75:17:78:e8:57:e4:d9:
16:1a:a8:3d:db:c4:41:47:36:29:ee:26:ba:26:05:de:91:75:
fd:61:b3:69:29:05:47:d1:df:88:5c:ef:cc:07:e7:7a:f6:20:
03:11:9d:b7:f5:14:0d:02:1c:03:f6:c5:7c:a4:78:de:09:4a:
22:e9:31:a9:d4:77:0b:b7:a9:30:e5:72:01:22:96:40:54:52:
e9:f3:c5:cd:91:58:b5:76:c3:d6:7d:03:33:ef:37:49:7d:b5:
be:31:20:1b:95:0e:e8:2c:21:8b:1c:7e:f8:da:5d:ae:ba:f2:
8d:1a:e4:ab:6d:39:c3:51:23:dc:16:56:56:6c:14:62:5c:d8:
f4:26:d9:aa:ac:23:47:b3:e9:13:8e:09:71:c3:98:4f:38:07:
39:14:d4:86:5a:cc:b4:2d:59:4e:ff:77:f7:94:ab:11:17:d8:
a0:95:78:a6:2c:f5:94:f0:70:74:96:1f:c4:c0:cb:5d:74:68:
e0:4d:98:3a:3f:eb:c9:0a:17:8f:89:59:b2:6a:20:36:18:64:
f1:3c:21:f8:84:33:9c:50:7f:f2:e1:f9:8b:f0:e6:85:8d:ff:
02:19:ad:f3:03:cf:13:95:9f:fc:59:f0:09:1d:8c:c0:2d:5d:
55:0a:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:44 2026 by rpki-client