
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json)
Hash identifier: 6qN3dsrmxjOgkKaHMynEUphRpFsy6VUyxQ9VpU7fIl0=
Subject key identifier: 9F:EF:BA:16:0F:FB:FE:7A:83:B7:EA:F7:56:D8:FC:09:DE:08:A0:BD
Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
Manifest number: 82
Signing time: Thu 23 Jul 2026 09:30:53 +0000
Manifest this update: Thu 23 Jul 2026 09:30:52 +0000
Manifest next update: Thu 30 Jul 2026 09:30:52 +0000
Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: LWLGjlKaaV92f1Ki9hIHWPEtr/XeWT12gyCMsNTo+N0=)
2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Validity
Not Before: Jul 23 09:30:52 2026 GMT
Not After : Jul 30 09:30:52 2026 GMT
Subject: CN=6a61df4d-1c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:be:fc:31:ea:15:8a:98:b4:08:09:33:84:
96:f9:91:43:ba:30:37:1f:20:73:1e:1b:b3:5c:fc:
79:6c:9a:c3:ea:e8:e2:34:66:56:32:69:4e:ef:d2:
04:19:72:aa:a4:a9:80:ad:3c:2b:3f:68:e7:18:a3:
ab:e2:8c:ea:74:60:30:2f:ec:4e:a5:c8:e2:53:eb:
f7:b6:d9:84:fc:22:1f:22:80:d7:d0:84:2c:7a:65:
d9:0c:2b:23:3e:a8:7a:9b:26:0a:8d:ec:f1:ee:47:
ee:5c:79:89:ae:b1:7c:3b:a9:41:49:4a:30:71:ab:
42:84:56:35:62:77:98:60:5b:b3:3d:a6:68:cf:ed:
aa:92:6e:54:66:e8:da:43:19:ac:8b:1e:b7:0b:e8:
c5:33:16:38:17:e0:f7:60:44:e4:6d:2d:c9:f3:16:
47:4e:7d:b8:ad:b1:88:bd:f8:45:11:9e:88:c8:f8:
0c:53:37:14:87:d0:e3:67:64:30:be:ff:e6:b3:f8:
2b:ad:2a:7d:b6:bc:d0:d9:65:c8:07:26:af:0d:49:
dd:41:0d:39:74:c3:81:2b:2b:cb:9d:19:f9:17:8b:
69:46:6c:22:08:95:a1:9c:05:24:ce:04:86:45:7d:
8f:1e:05:a1:c6:47:e0:39:5a:79:7f:2a:9c:cf:3b:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:BA:16:0F:FB:FE:7A:83:B7:EA:F7:56:D8:FC:09:DE:08:A0:BD
X509v3 Authority Key Identifier:
keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:93:c4:f4:24:4b:b9:9b:0a:1e:03:b1:4f:fd:d0:b3:64:
d0:a1:af:21:7a:cf:b1:91:d5:9c:30:a7:dd:fb:7b:fe:f4:76:
cd:d8:f2:83:f2:72:3f:de:e5:cd:05:e8:8f:d3:35:72:9f:b7:
c5:b1:cc:5d:ae:67:4f:0b:e4:e6:a7:26:06:48:07:2d:c1:b1:
93:a6:1a:8f:8c:25:3f:c2:a8:48:6f:f3:29:2f:0c:93:c7:0e:
2f:ce:f4:aa:d0:db:1a:46:f5:8f:7b:ff:af:74:6a:e7:1f:15:
83:c6:17:af:13:6a:6e:a1:05:27:06:6d:c9:a9:27:78:43:84:
05:ad:14:56:93:c9:fa:b2:01:60:4d:47:1d:61:b2:ba:8b:f3:
7b:e5:f9:10:a2:f6:dc:9e:3b:99:ab:c5:f3:e3:bd:53:5b:a3:
72:65:c1:63:41:2f:18:32:48:b1:03:8e:78:d4:22:bc:4d:e7:
c6:48:c0:8f:7c:c9:c0:3d:e3:e8:ed:cd:08:ad:05:79:2a:54:
37:00:a6:e2:8c:64:70:69:7d:a9:17:5a:34:02:41:63:ee:8a:
cb:c6:2c:45:d1:3b:f6:f1:fa:ec:62:89:ab:11:14:0f:97:bd:
0d:f2:68:52:10:2f:d5:b2:b1:04:83:ea:d1:94:b0:65:ca:d4:
a9:d5:74:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlBNDQxMTAvBgNVBAUTKDkyOERGOTVDRTk5QUZDNUI5REU2MDFFNkU4NjQwM0Mw
RDg5MTUyOUYwHhcNMjYwNzIzMDkzMDUyWhcNMjYwNzMwMDkzMDUyWjAYMRYwFAYD
VQQDEw02YTYxZGY0ZC0xYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Cu+/DHqFYqYtAgJM4SW+ZFDujA3HyBzHhuzXPx5bJrD6ujiNGZWMmlO79IE
GXKqpKmArTwrP2jnGKOr4ozqdGAwL+xOpcjiU+v3ttmE/CIfIoDX0IQsemXZDCsj
Pqh6myYKjezx7kfuXHmJrrF8O6lBSUowcatChFY1YneYYFuzPaZoz+2qkm5UZuja
Qxmsix63C+jFMxY4F+D3YETkbS3J8xZHTn24rbGIvfhFEZ6IyPgMUzcUh9DjZ2Qw
vv/ms/grrSp9trzQ2WXIByavDUndQQ05dMOBKyvLnRn5F4tpRmwiCJWhnAUkzgSG
RX2PHgWhxkfgOVp5fyqczzssgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/vuhYP
+/56g7fq91bY/AneCKC9MB8GA1UdIwQYMBaAFJKN+VzpmvxbneYB5uhkA8DYkVKf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUE0NC9ENjkyRTFDQUMw
ODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9GdWQ1Z0htNkdRRHdOaVJV
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9G
dWQ1Z0htNkdRRHdOaVJVcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAfiTxPQkS7mbCh4DsU/90LNk0KGvIXrPsZHVnDCn3ft7/vR2zdjyg/JyP97l
zQXoj9M1cp+3xbHMXa5nTwvk5qcmBkgHLcGxk6Yaj4wlP8KoSG/zKS8Mk8cOL870
qtDbGkb1j3v/r3Rq5x8Vg8YXrxNqbqEFJwZtyakneEOEBa0UVpPJ+rIBYE1HHWGy
uovze+X5EKL23J47mavF8+O9U1ujcmXBY0EvGDJIsQOOeNQivE3nxkjAj3zJwD3j
6O3NCK0FeSpUNwCm4oxkcGl9qRdaNAJBY+6Ky8YsRdE79vH67GKJqxEUD5e9DfJo
UhAv1bKxBIPq0ZSwZcrUqdV04A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:18 2026 by rpki-client