$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: zXsXsqllFYATLZp72HuJYDP15dGXFweR3y0O55nEdXc= Subject key identifier: 2D:57:DC:D9:2D:22:8D:55:87:B2:30:19:2D:23:3D:6A:A1:1A:42:34 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: D1 Signing time: Sun 05 Apr 2026 06:08:27 +0000 Manifest this update: Sun 05 Apr 2026 06:08:27 +0000 Manifest next update: Sun 12 Apr 2026 06:08:27 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: LsxyPP8gplqmaLN4pdKd0CdS+CMlxB0WvgyxpRtK9n4=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: fSSeFIvlDFyD3F7oveg8Hss3IU2bD7/hm8Omjh6KwuM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: gfj1R11Mpbbs83ejkJtVj4rQi5q0YUJRvMfHzMv20uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Apr 5 06:08:27 2026 GMT Not After : Apr 12 06:08:27 2026 GMT Subject: CN=69d1fc5b-d3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:60:cb:c1:c9:11:8c:3e:5d:25:3f:bd:cf: 56:7a:d0:2c:19:fb:f7:8c:5f:df:9f:63:8e:9d:66: 5f:09:2f:ae:2c:c3:e0:a4:7a:93:f1:79:ce:da:e0: 9e:79:8f:87:99:ee:a5:8f:c9:f6:2e:44:89:04:89: 62:82:9a:5a:39:ca:ad:06:4f:dd:f1:44:b6:9c:0e: 26:8a:c3:ae:53:d9:cc:16:4b:1a:4f:8e:25:b0:11: b0:af:d3:ce:08:c4:1f:0a:11:87:43:b1:1b:66:d2: 31:30:b1:77:d9:73:49:e6:c9:9f:3e:69:e4:ee:72: 23:c6:4c:89:0a:6f:00:1d:ed:2b:42:c2:2f:55:05: cf:ee:58:4b:9b:1c:e3:e9:f6:29:4b:4c:53:da:be: b5:42:f7:5f:ad:57:4f:9e:79:4b:0f:35:6e:67:00: 01:e7:e8:02:9f:53:21:6a:ed:06:00:3b:5e:c5:48: 7e:24:e0:47:0d:ab:5d:6b:7a:07:a1:5f:79:9c:1c: 85:74:cb:4a:e4:86:e2:6a:82:c0:41:09:aa:22:d8: 96:d1:ef:d3:5b:0d:03:ec:f8:c8:9c:2e:9d:7d:73: 1a:1d:6a:8b:f2:08:59:b4:9c:b8:c7:08:3b:15:e3: 93:ed:93:6b:40:b8:e0:72:98:11:3f:49:c9:bd:1b: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:DC:D9:2D:22:8D:55:87:B2:30:19:2D:23:3D:6A:A1:1A:42:34 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:f9:fe:ba:4f:b4:ea:77:01:d7:32:aa:c4:0e:28:57:cb: a0:34:27:0c:85:66:35:e1:2a:b9:27:9c:99:a7:47:bd:d3:64: ce:3b:85:e9:44:61:43:4e:3e:d3:3a:47:53:f0:f7:00:92:46: 9c:ef:7c:56:2d:93:db:31:36:88:20:fa:17:13:a9:e4:40:71: e1:07:ea:b3:0b:b2:80:47:b1:76:9e:ee:08:f4:fd:4f:0c:62: b5:ac:c7:b2:33:d8:64:2e:2f:60:13:ce:38:2b:8c:37:52:c2: e4:8f:88:15:40:87:ca:9a:ce:92:27:a7:cd:cc:5b:d1:68:fd: 81:52:95:96:f0:d8:f4:9e:da:cb:e3:69:07:7a:90:6a:aa:31: 7a:bc:8f:5d:48:a4:c8:11:af:f9:db:54:1e:2a:e7:f5:0a:90: a6:19:68:27:d9:d2:dd:3e:e9:ff:7b:6d:48:c0:74:61:35:e7: eb:98:42:3e:ae:fd:58:a0:6a:74:39:3c:fe:08:38:dc:06:ad: 65:04:43:f7:1a:f0:9c:cc:f1:fa:f5:da:54:04:b8:dd:cf:5e: 7d:14:e9:27:ec:72:5d:de:c2:eb:93:e7:44:b4:0c:dc:04:36: 20:ba:10:24:48:2d:fd:f1:82:94:0c:6a:9f:79:ea:a4:fd:d6: ec:72:3e:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC OUM2Q0ZFQzMwHhcNMjYwNDA1MDYwODI3WhcNMjYwNDEyMDYwODI3WjAYMRYwFAYD VQQDEw02OWQxZmM1Yi1kM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGBgy8HJEYw+XSU/vc9WetAsGfv3jF/fn2OOnWZfCS+uLMPgpHqT8XnO2uCe eY+Hme6lj8n2LkSJBIligppaOcqtBk/d8US2nA4misOuU9nMFksaT44lsBGwr9PO CMQfChGHQ7EbZtIxMLF32XNJ5smfPmnk7nIjxkyJCm8AHe0rQsIvVQXP7lhLmxzj 6fYpS0xT2r61QvdfrVdPnnlLDzVuZwAB5+gCn1Mhau0GADtexUh+JOBHDatda3oH oV95nByFdMtK5IbiaoLAQQmqItiW0e/TWw0D7PjInC6dfXMaHWqL8ghZtJy4xwg7 FeOT7ZNrQLjgcpgRP0nJvRsoJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1X3Nkt Io1Vh7IwGS0jPWqhGkI0MB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1 NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWpt Zjk1VjVEWmNmai01eHNfc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPGj5/rpPtOp3AdcyqsQOKFfLoDQnDIVmNeEquSecmadHvdNkzjuF6URhQ04+ 0zpHU/D3AJJGnO98Vi2T2zE2iCD6FxOp5EBx4QfqswuygEexdp7uCPT9TwxitazH sjPYZC4vYBPOOCuMN1LC5I+IFUCHyprOkienzcxb0Wj9gVKVlvDY9J7ay+NpB3qQ aqoxeryPXUikyBGv+dtUHirn9QqQphloJ9nS3T7p/3ttSMB0YTXn65hCPq79WKBq dDk8/gg43AatZQRD9xrwnMzx+vXaVAS43c9efRTpJ+xyXd7C65PnRLQM3AQ2ILoQ JEgt/fGClAxqn3nqpP3W7HI++A== -----END CERTIFICATE-----Generated at Sun Apr 5 21:09:24 2026 by rpki-client