$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: XhEdYLW4kbqH1UM9NKODEMXuzRWh/bMrQAGsyYfvzD4= Subject key identifier: 3D:C3:5F:03:30:21:55:22:84:A8:6E:4A:08:A1:C7:EA:C7:D8:E1:02 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 46 Signing time: Wed 25 Mar 2026 07:31:47 +0000 Manifest this update: Wed 25 Mar 2026 07:31:46 +0000 Manifest next update: Wed 01 Apr 2026 07:31:46 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: 3PnSA/m/QHQTx8NqCvMSKTc8/k6QimwAwr0w8sTUM80=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Mar 25 07:31:46 2026 GMT Not After : Apr 1 07:31:46 2026 GMT Subject: CN=69c38f63-0bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:74:74:fd:fa:b4:6e:6a:e9:ea:a0:b1:6e: cf:52:f3:7f:3d:d5:61:66:72:4f:fb:94:ac:a9:1d: d5:9e:28:65:af:58:ca:12:08:b4:39:c9:7c:50:45: 1d:52:ac:57:55:24:af:5a:81:57:f2:33:60:25:42: f8:a9:4d:b8:c4:1f:2d:cd:40:62:3c:da:1d:0f:f6: a8:04:c2:bb:1d:0e:2d:ae:1d:29:8e:91:6b:6d:f9: ab:52:e8:af:5c:a3:3f:0c:da:e5:23:70:0f:5e:90: c6:d7:77:f7:34:56:02:a0:eb:a0:b1:ff:00:94:4b: a0:76:9f:c0:af:54:24:04:7d:b2:88:1a:d6:9a:46: 75:da:af:9b:d4:bf:2f:c5:62:2b:da:f5:f6:ad:11: 3e:e3:7b:22:51:fc:58:4a:e8:40:96:25:78:ab:07: c3:50:0a:1e:6e:7b:da:69:5b:d6:ef:32:e5:5c:95: 57:da:58:44:5f:c3:1d:e2:f7:0a:3d:e5:d1:7d:5e: b0:10:fd:b8:28:1c:4e:82:83:d4:02:1b:a1:2a:41: b4:96:d9:55:ac:91:c9:e3:5b:99:f0:56:80:e9:47: 3e:82:08:5c:85:4d:59:ad:4a:2d:01:d0:57:26:1b: 20:a6:3e:0a:bd:d8:49:e9:6e:44:33:d4:d8:2d:11: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C3:5F:03:30:21:55:22:84:A8:6E:4A:08:A1:C7:EA:C7:D8:E1:02 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fb:06:5c:0f:37:4d:7d:7a:a9:76:89:15:f2:0c:eb:9c:6f: f4:19:32:b9:ba:ac:6e:3c:d2:e2:67:44:10:f8:58:3d:e5:cf: 24:0a:12:fc:13:86:b3:35:9f:3b:d6:30:90:a6:3d:ad:d6:5b: 73:d6:a6:c3:54:69:95:56:c6:6c:14:37:e0:c8:d4:e2:cc:6b: db:aa:8f:4c:6c:51:0c:a2:73:07:6c:59:5a:27:c5:44:85:f3: 95:17:41:9c:93:d5:74:ed:49:12:ed:7a:5f:85:3e:08:5a:db: 8f:54:98:70:6d:ab:a3:9e:88:38:2d:a3:52:ec:92:bc:62:36: db:83:7b:fb:c5:30:97:cf:7e:87:a7:c2:4a:b5:11:a1:f5:a3: e9:fb:60:d6:52:4b:f9:a0:95:28:77:28:74:01:db:74:6d:5d: 05:68:26:e8:fa:8a:2e:5a:65:70:41:f1:c8:50:33:3d:42:71: c1:c0:26:9b:fc:21:b6:5e:3c:cb:af:1c:71:61:e8:5b:fe:80: 96:e1:a1:7e:e0:5c:19:4c:06:58:53:c6:21:04:ca:28:7f:14: b6:9b:ee:fa:2e:ac:5b:49:a2:67:8d:b4:fa:4b:0c:a6:c4:50: 40:08:d3:25:d2:ad:7e:e3:1b:0a:7e:0e:e9:03:8c:6b:84:76: b5:71:88:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjAzMjUwNzMxNDZaFw0yNjA0MDEwNzMxNDZaMBgxFjAUBgNV BAMTDTY5YzM4ZjYzLTBiYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC88XR0/fq0bmrp6qCxbs9S83891WFmck/7lKypHdWeKGWvWMoSCLQ5yXxQRR1S rFdVJK9agVfyM2AlQvipTbjEHy3NQGI82h0P9qgEwrsdDi2uHSmOkWtt+atS6K9c oz8M2uUjcA9ekMbXd/c0VgKg66Cx/wCUS6B2n8CvVCQEfbKIGtaaRnXar5vUvy/F Yiva9fatET7jeyJR/FhK6ECWJXirB8NQCh5ue9ppW9bvMuVclVfaWERfwx3i9wo9 5dF9XrAQ/bgoHE6Cg9QCG6EqQbSW2VWskcnjW5nwVoDpRz6CCFyFTVmtSi0B0Fcm GyCmPgq92EnpbkQz1NgtEa/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPcNfAzAh VSKEqG5KCKHH6sfY4QIwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw+wZcDzdNfXqpdokV8gzrnG/0GTK5uqxuPNLiZ0QQ+Fg95c8kChL8E4azNZ87 1jCQpj2t1ltz1qbDVGmVVsZsFDfgyNTizGvbqo9MbFEMonMHbFlaJ8VEhfOVF0Gc k9V07UkS7XpfhT4IWtuPVJhwbaujnog4LaNS7JK8Yjbbg3v7xTCXz36Hp8JKtRGh 9aPp+2DWUkv5oJUodyh0Adt0bV0FaCbo+oouWmVwQfHIUDM9QnHBwCab/CG2XjzL rxxxYehb/oCW4aF+4FwZTAZYU8YhBMoofxS2m+76LqxbSaJnjbT6SwymxFBACNMl 0q1+4xsKfg7pA4xrhHa1cYiY -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:17 2026 by rpki-client