
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: 3xpMC0T2oKdxUYt66FXDxI4VN/6P3dOnXAHwJmOb8hM=
Subject key identifier: 0C:AB:94:A2:01:27:8C:1F:57:12:0C:BD:9D:36:9A:EC:6E:D1:90:C4
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0BD3
Signing time: Fri 12 Jun 2026 19:15:02 +0000
Manifest this update: Fri 12 Jun 2026 19:15:02 +0000
Manifest next update: Fri 19 Jun 2026 19:15:02 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: mJ6uvijwT8RZkKqqTKqqkHX94s7STQtozv8ly+zngjA=)
2: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
3: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
4: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
5: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
7: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
8: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Jun 12 19:15:02 2026 GMT
Not After : Jun 19 19:15:02 2026 GMT
Subject: CN=6a2c5ab6-285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:77:20:a6:5c:50:5a:9e:0e:c1:dd:ed:00:
ee:13:ec:f5:be:65:f6:c3:d0:fe:37:d7:e9:68:6d:
3c:91:a8:d8:77:04:3a:1f:f8:ba:d6:c3:24:15:67:
36:8d:85:57:80:ac:de:c0:07:fe:67:bd:ef:30:06:
35:5e:14:6a:34:47:11:dd:e8:28:84:b8:d1:68:b2:
cf:f8:b3:ab:32:69:65:f0:99:f0:11:c9:65:e9:f6:
18:15:8f:ee:4f:36:7e:2c:48:c0:e3:87:f6:eb:e2:
a3:4a:80:8a:7d:99:ed:b7:7b:31:0e:89:ba:99:1e:
d7:e6:62:20:6f:ee:d5:80:32:6c:5e:1c:19:ac:34:
ab:48:e2:65:dc:37:9d:98:00:20:13:81:4b:7d:8d:
68:2d:d9:89:bb:ba:32:19:9d:e6:26:4c:d9:21:5d:
62:a7:71:58:7f:18:f9:bb:6c:db:5d:4b:cb:9e:f8:
2a:9b:38:a2:85:73:5a:d7:fb:b7:fa:3a:75:36:cc:
e1:34:a7:9f:3b:a4:dd:24:ba:f0:43:a1:68:fe:03:
14:99:b4:d6:95:98:af:2c:e5:5c:7d:d8:62:4f:fe:
fc:91:0d:5b:28:13:e5:88:80:33:1f:79:b5:b4:95:
f7:8b:20:71:1b:57:98:81:4d:fc:74:dc:2c:64:ea:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:94:A2:01:27:8C:1F:57:12:0C:BD:9D:36:9A:EC:6E:D1:90:C4
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:10:ce:e7:14:4e:3c:8e:dc:01:b9:49:f6:72:a0:70:da:
d6:c7:ae:1d:7d:66:0c:10:7b:fa:6b:0e:99:6b:4e:d0:90:91:
9c:e3:6c:59:be:23:fa:e6:a7:65:d1:ae:5d:e1:bf:e0:d8:b8:
62:9f:1c:27:10:fe:75:89:3b:c9:82:23:b8:47:bd:22:e1:4f:
de:9b:e9:b5:3a:35:35:17:eb:24:a6:05:11:9a:63:26:79:89:
e8:57:5b:fa:f6:ca:b2:33:0d:a7:f1:fd:f5:34:bf:9e:50:39:
9d:e5:c0:f4:bc:d3:be:af:75:eb:ce:e1:8d:07:47:05:35:64:
57:8e:38:43:fb:46:5c:95:0b:fb:12:f3:e8:18:84:d6:7f:e4:
e6:44:bc:22:2a:2f:d6:af:9f:76:3d:1f:a1:94:66:d2:fc:9d:
ea:c7:39:4d:93:b6:0e:4f:3b:2e:54:0b:f8:3c:8c:cd:f8:18:
b3:3c:6e:d3:3b:3b:13:c8:e3:35:13:f0:b9:fe:c5:f4:df:b5:
48:b5:b2:52:36:fb:97:f7:1e:18:ce:f6:03:c3:b5:c8:9c:2d:
83:07:0b:9c:6e:dc:f5:de:f3:7b:17:03:02:77:4c:31:d0:a1:
ba:98:79:01:8a:52:e2:4b:26:7d:4d:db:3c:7c:ff:a6:c1:8a:
54:f6:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:51 2026 by rpki-client