$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: +t3j55URCqSH7OJkiV7ocPuAhVSTIBla9BQA8zX97bY= Subject key identifier: B8:48:14:4D:41:8F:8A:8E:16:F1:A9:41:83:69:0C:DF:8D:1F:77:FC Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 5F Signing time: Wed 13 May 2026 08:09:26 +0000 Manifest this update: Wed 13 May 2026 08:09:25 +0000 Manifest next update: Wed 20 May 2026 08:09:25 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: Gx0ijkFKBPmX186mgUM4mSNCLIFMbhmSNqrMzXGA1BM=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: May 13 08:09:25 2026 GMT Not After : May 20 08:09:25 2026 GMT Subject: CN=6a0431b6-2ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:13:2b:ce:50:02:e7:93:df:47:b4:6b:0d: 24:20:18:a7:eb:dc:2f:ff:e8:1d:b3:39:ff:da:8f: ce:18:a5:f8:d4:38:76:8c:2a:d7:84:ab:3a:49:69: 61:e2:db:40:19:9b:17:8a:63:3c:59:13:6e:f3:24: 2f:46:c5:4d:e8:4f:b0:7d:4f:ae:e4:c6:08:9e:f4: c7:60:b8:dc:e3:f2:ce:46:ef:1d:56:a4:20:69:1f: a2:34:a2:4f:98:ce:a0:57:68:c9:c5:3a:ac:62:5f: 2a:70:63:c0:61:c1:07:e3:93:49:3d:a9:23:2a:37: 7e:48:80:fb:e5:f1:f8:5a:65:f3:57:a5:9d:e7:67: 0e:91:e9:b9:8f:83:93:b7:e1:fc:31:1a:56:d7:87: 81:93:5d:f8:a9:e9:80:db:9d:19:dc:74:56:1b:7c: be:63:57:7a:aa:35:9c:77:31:d2:13:6a:a8:09:20: 34:6b:63:3b:83:0f:76:78:4f:51:c4:f7:a2:28:42: 60:85:db:a0:91:ca:a7:dd:69:90:34:7d:cd:4e:64: e1:87:aa:2b:50:45:98:52:4b:2e:e7:f5:41:62:c9: d3:1c:7e:f7:50:b4:ef:20:a5:2d:3f:5f:34:49:9a: 7c:bf:fd:ad:e0:ed:d3:6a:b3:7a:c4:0e:f3:61:a3: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:48:14:4D:41:8F:8A:8E:16:F1:A9:41:83:69:0C:DF:8D:1F:77:FC X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3a:b1:c5:b5:b7:14:d9:42:57:c6:a2:bb:af:08:17:b7:e7: ed:d5:86:75:66:e4:5b:e7:f7:72:92:c2:0e:48:45:0e:6c:db: 86:a1:25:b1:b6:a3:5c:f0:cd:2e:09:7e:ba:79:d1:ff:c3:0d: ff:a4:75:1a:59:ca:e6:44:a1:89:0c:d3:cb:42:f1:dd:5b:19: 25:f7:c2:5c:07:ae:7f:c6:8c:7f:4b:92:27:e9:96:a7:9a:95: 3b:9d:61:7e:43:bd:30:b9:3a:6d:9e:8e:4f:89:84:08:24:45: a9:6a:6e:ba:47:bf:1b:53:3e:15:28:05:77:2c:25:a4:70:da: bf:56:49:09:03:f9:06:55:a2:d3:66:00:d1:54:6a:43:ac:a5: 65:f7:22:50:72:fa:22:bc:40:bb:60:44:f3:01:46:8a:5f:35: 1b:97:6e:b3:64:02:86:06:6d:ba:35:f4:9d:9e:14:cb:35:2b: 0b:4c:37:28:e9:c2:d2:91:f0:4b:80:0c:65:62:17:bb:30:22: 42:ec:2a:bc:f4:4d:f3:b2:58:99:b3:77:39:d6:c2:6e:c6:12: a8:0e:2d:ea:60:6e:3e:03:6c:f4:b9:11:a0:42:64:3e:fe:8f: b2:e9:b8:2b:f5:62:c6:5c:a0:c2:c5:89:ac:07:bc:d9:49:29: 82:bf:74:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjA1MTMwODA5MjVaFw0yNjA1MjAwODA5MjVaMBgxFjAUBgNV BAMTDTZhMDQzMWI2LTJhYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLihMrzlAC55PfR7RrDSQgGKfr3C//6B2zOf/aj84YpfjUOHaMKteEqzpJaWHi 20AZmxeKYzxZE27zJC9GxU3oT7B9T67kxgie9MdguNzj8s5G7x1WpCBpH6I0ok+Y zqBXaMnFOqxiXypwY8BhwQfjk0k9qSMqN35IgPvl8fhaZfNXpZ3nZw6R6bmPg5O3 4fwxGlbXh4GTXfip6YDbnRncdFYbfL5jV3qqNZx3MdITaqgJIDRrYzuDD3Z4T1HE 96IoQmCF26CRyqfdaZA0fc1OZOGHqitQRZhSSy7n9UFiydMcfvdQtO8gpS0/XzRJ mny//a3g7dNqs3rEDvNho0A/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuEgUTUGP io4W8alBg2kM340fd/wwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPOrHFtbcU2UJXxqK7rwgXt+ft1YZ1ZuRb5/dyksIOSEUObNuGoSWxtqNc8M0u CX66edH/ww3/pHUaWcrmRKGJDNPLQvHdWxkl98JcB65/xox/S5In6ZanmpU7nWF+ Q70wuTptno5PiYQIJEWpam66R78bUz4VKAV3LCWkcNq/VkkJA/kGVaLTZgDRVGpD rKVl9yJQcvoivEC7YETzAUaKXzUbl26zZAKGBm26NfSdnhTLNSsLTDco6cLSkfBL gAxlYhe7MCJC7Cq89E3zsliZs3c51sJuxhKoDi3qYG4+A2z0uRGgQmQ+/o+y6bgr 9WLGXKDCxYmsB7zZSSmCv3Rr -----END CERTIFICATE-----Generated at Wed May 13 11:38:24 2026 by rpki-client