$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: yIvN6/sINuB0crY4zVcDsatmvljBXGdv4sxD3kiCerY= Subject key identifier: 3D:BC:DB:72:C6:61:97:63:2C:C2:BE:A5:21:54:76:56:A6:7F:3A:0E Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: A3 Signing time: Fri 25 Sep 2026 07:18:28 +0000 Manifest this update: Fri 25 Sep 2026 07:18:27 +0000 Manifest next update: Fri 02 Oct 2026 07:18:27 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: lRdCX05yZwu+LXP55xw/fJB3ymTz4r4JqBM0yXsngb0=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Sep 25 07:18:27 2026 GMT Not After : Oct 2 07:18:27 2026 GMT Subject: CN=6ab62043-365f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:2d:19:94:d9:54:50:7d:a0:14:c5:31:2d: 43:c9:cc:16:9c:ad:12:37:66:61:4e:ab:36:b1:21: 66:45:8d:46:2f:d8:93:ce:66:f4:64:98:97:ba:0d: 3f:70:4e:94:35:5e:dc:db:79:b8:ac:30:0e:53:7f: ae:cb:b9:af:41:dc:bd:ae:be:ef:d0:7b:58:68:54: 91:aa:26:2d:81:94:ce:f6:6f:b0:30:2d:60:03:29: e6:36:ad:5b:e6:59:fb:a6:f4:3e:2b:3d:07:86:4b: 2c:05:12:6c:2f:b6:50:64:59:06:7c:9e:d0:2c:d0: 92:67:12:a1:60:9e:40:9d:8a:12:42:2c:51:7c:d6: 50:b1:41:ae:86:71:74:d2:2c:b9:62:98:f3:22:21: 9f:9b:24:bd:c6:0b:8d:52:b7:35:d1:2c:83:5f:75: a3:fd:62:3b:46:1b:7c:88:2a:88:95:2f:93:40:c9: 67:8c:c8:81:5a:7f:b4:0f:04:d9:54:8f:e2:0c:7d: ad:38:05:e0:b7:a1:16:d0:08:c0:bd:97:b5:80:20: 7a:27:19:3a:6f:71:ed:1b:f5:e0:dc:7f:b4:24:8a: 07:fa:46:fd:48:1f:91:d8:ac:d8:43:55:63:11:04: a5:cd:69:64:dc:5a:b1:8f:78:07:32:30:d5:fa:5a: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:DB:72:C6:61:97:63:2C:C2:BE:A5:21:54:76:56:A6:7F:3A:0E X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:81:2e:f9:11:28:31:4b:de:54:27:f3:65:60:3d:a0:14:f1: 9c:75:ae:61:55:d2:d5:38:84:14:18:cc:c9:67:9b:ea:3a:10: 1f:d9:cc:28:54:d3:bd:cd:8b:0d:cb:8b:da:e5:b1:5e:03:cb: de:fd:d6:b8:e6:9d:97:f8:34:28:1e:92:86:82:9f:a3:9f:8d: b3:6b:22:61:4e:87:c2:6e:73:f6:0f:f8:0f:de:99:1d:2a:c2: c9:09:8d:69:31:6c:70:50:99:9e:d0:62:c9:cd:d9:c1:a2:0e: c4:c8:0f:9f:45:0f:1c:83:aa:c3:74:ab:83:13:c2:a9:ad:9e: 55:65:9c:fe:1f:40:e6:b4:01:46:b5:03:69:70:0d:1b:d0:ec: fb:69:72:89:3e:93:4c:34:70:f1:89:27:65:68:ec:93:bc:9d: 6f:b3:30:aa:4d:a9:e0:ea:69:1b:20:ef:b4:21:8c:56:ee:a9: 9e:c1:07:26:a5:04:69:f2:b1:19:68:c0:2a:c5:f7:5a:d8:fb: cb:87:b0:88:0c:93:75:12:b8:2b:5e:9e:d2:6a:e0:c5:6b:da: 33:cc:27:ba:0c:e0:d4:66:3f:09:31:67:33:05:2b:95:02:38: ec:b8:8a:49:2b:c2:16:61:26:41:0f:a8:ca:0d:e7:66:c9:09: f6:52:4c:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlBNDQxMTAvBgNVBAUTKDkyOERGOTVDRTk5QUZDNUI5REU2MDFFNkU4NjQwM0Mw RDg5MTUyOUYwHhcNMjYwOTI1MDcxODI3WhcNMjYxMDAyMDcxODI3WjAYMRYwFAYD VQQDEw02YWI2MjA0My0zNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qYtGZTZVFB9oBTFMS1DycwWnK0SN2ZhTqs2sSFmRY1GL9iTzmb0ZJiXug0/ cE6UNV7c23m4rDAOU3+uy7mvQdy9rr7v0HtYaFSRqiYtgZTO9m+wMC1gAynmNq1b 5ln7pvQ+Kz0HhkssBRJsL7ZQZFkGfJ7QLNCSZxKhYJ5AnYoSQixRfNZQsUGuhnF0 0iy5YpjzIiGfmyS9xguNUrc10SyDX3Wj/WI7Rht8iCqIlS+TQMlnjMiBWn+0DwTZ VI/iDH2tOAXgt6EW0AjAvZe1gCB6Jxk6b3HtG/Xg3H+0JIoH+kb9SB+R2KzYQ1Vj EQSlzWlk3Fqxj3gHMjDV+lpWOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2823LG YZdjLMK+pSFUdlamfzoOMB8GA1UdIwQYMBaAFJKN+VzpmvxbneYB5uhkA8DYkVKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUE0NC9ENjkyRTFDQUMw ODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9GdWQ1Z0htNkdRRHdOaVJV cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9G dWQ1Z0htNkdRRHdOaVJVcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ4Eu+REoMUveVCfzZWA9oBTxnHWuYVXS1TiEFBjMyWeb6joQH9nMKFTTvc2L DcuL2uWxXgPL3v3WuOadl/g0KB6ShoKfo5+Ns2siYU6Hwm5z9g/4D96ZHSrCyQmN aTFscFCZntBiyc3ZwaIOxMgPn0UPHIOqw3SrgxPCqa2eVWWc/h9A5rQBRrUDaXAN G9Ds+2lyiT6TTDRw8YknZWjsk7ydb7Mwqk2p4OppGyDvtCGMVu6pnsEHJqUEafKx GWjAKsX3Wtj7y4ewiAyTdRK4K16e0mrgxWvaM8wnugzg1GY/CTFnMwUrlQI47LiK SSvCFmEmQQ+oyg3nZskJ9lJM4Q== -----END CERTIFICATE-----Generated at Sun Sep 27 07:58:45 2026 by rpki-client