$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: EiVWmOUkDrPoy1WBrjwuYJEsS/J76BF3rULa8nHilEU= Subject key identifier: 20:A1:82:7B:36:CA:FF:A6:EA:F3:7F:4D:FA:6F:87:59:EA:FA:BD:44 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: EA Signing time: Thu 21 May 2026 06:33:25 +0000 Manifest this update: Thu 21 May 2026 06:33:25 +0000 Manifest next update: Thu 28 May 2026 06:33:25 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: jWO+4vyK4NYdKk2HGHhY6HoyRMNWUMzfx1skk9lyI2s=) 2: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: H9V2MyUqIitXZrS/5dU1I0DAeNIYmQRs+ziomgqJcr4=) 3: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 5zcvJSt2efyJ2mxfcHBGUb0jglP48w26ykrEskIQ7pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: May 21 06:33:25 2026 GMT Not After : May 28 06:33:25 2026 GMT Subject: CN=6a0ea735-f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:18:eb:c5:33:e0:53:65:55:cc:93:f6:40: e0:48:9d:f6:88:19:99:78:8c:ed:2d:cd:cc:6a:6d: 16:4a:58:7d:fd:09:3a:8a:36:6a:b4:fe:12:31:bf: b3:36:82:c2:a3:b3:54:d2:70:4a:75:16:23:42:4f: 40:b4:22:9f:2e:cd:1d:33:db:81:b9:54:a4:18:01: bc:86:96:0b:e2:31:c3:18:96:15:fe:1c:98:64:ce: fe:a2:2b:ef:21:a0:ae:22:a6:c7:c4:11:e8:d8:3c: cc:11:05:12:ac:f4:5a:46:1e:53:50:44:ec:54:c9: c0:0b:59:e6:13:e6:ce:96:43:b4:ff:f7:13:c4:13: 4b:75:c3:d6:92:a9:23:36:52:8f:fe:a5:d6:75:2e: 79:f9:cb:27:7d:14:04:d9:a5:8b:ce:a0:7a:11:07: 56:16:59:a2:ae:d7:39:0a:98:f5:ad:ce:e1:1f:4d: ae:4a:4f:f2:8a:bd:ab:b1:90:2c:36:27:51:17:72: 11:7f:29:48:47:a7:4b:fa:42:df:41:f1:d6:e9:e4: ca:cd:a5:60:4d:d8:99:39:38:1d:7c:c2:86:b6:e4: ef:8e:1a:b9:44:dc:b4:f9:94:21:4e:f3:6a:fb:45: d6:64:71:0a:27:c6:aa:29:c5:68:39:da:2c:7d:5a: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:82:7B:36:CA:FF:A6:EA:F3:7F:4D:FA:6F:87:59:EA:FA:BD:44 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:53:e1:ee:95:7d:3a:a6:b4:e4:ee:ef:c0:10:d4:b3:88:e3: 19:8f:d0:14:86:83:f9:80:23:9f:b1:62:2b:b7:9a:03:aa:f1: 48:0a:09:9d:a9:71:18:88:f6:c1:8b:77:ad:36:24:c4:53:33: d6:25:ac:cf:87:a2:3a:0d:9b:72:44:0b:d5:6a:3b:58:08:77: 28:83:56:ad:c3:90:a3:0c:c1:69:d7:b6:1a:76:ce:dd:36:c9: 6e:4e:37:4c:c3:b3:ec:d9:62:bb:9d:5b:fd:92:fa:77:c4:84: e6:49:69:82:4c:40:05:b0:77:a2:8a:ca:2b:a8:48:95:82:b1: ce:23:10:64:7a:45:0b:85:78:ab:70:2d:e8:1c:32:e8:ff:da: 33:d6:0c:b8:25:be:af:80:a9:ed:b7:b1:d3:fc:0e:56:62:8b: 20:cf:d4:b1:e0:d2:42:8a:0d:57:e4:a3:f2:9d:b6:65:81:76: d7:22:22:52:3f:25:2c:cf:47:24:77:f8:fa:75:57:84:ff:fb: e3:87:c6:5a:3e:ea:79:65:77:c3:6f:ea:c0:95:57:93:a6:a2: 5e:0c:22:21:0b:4c:2c:2f:64:70:cd:b0:a2:cd:46:48:74:71: 73:62:b0:48:81:ad:7b:43:e6:7c:a5:ab:70:97:ce:65:a7:61: b4:45:a1:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC OUM2Q0ZFQzMwHhcNMjYwNTIxMDYzMzI1WhcNMjYwNTI4MDYzMzI1WjAYMRYwFAYD VQQDEw02YTBlYTczNS1mMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5kY68Uz4FNlVcyT9kDgSJ32iBmZeIztLc3Mam0WSlh9/Qk6ijZqtP4SMb+z NoLCo7NU0nBKdRYjQk9AtCKfLs0dM9uBuVSkGAG8hpYL4jHDGJYV/hyYZM7+oivv IaCuIqbHxBHo2DzMEQUSrPRaRh5TUETsVMnAC1nmE+bOlkO0//cTxBNLdcPWkqkj NlKP/qXWdS55+csnfRQE2aWLzqB6EQdWFlmirtc5Cpj1rc7hH02uSk/yir2rsZAs NidRF3IRfylIR6dL+kLfQfHW6eTKzaVgTdiZOTgdfMKGtuTvjhq5RNy0+ZQhTvNq +0XWZHEKJ8aqKcVoOdosfVryOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCChgns2 yv+m6vN/Tfpvh1nq+r1EMB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1 NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWpt Zjk1VjVEWmNmai01eHNfc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs1Ph7pV9Oqa05O7vwBDUs4jjGY/QFIaD+YAjn7FiK7eaA6rxSAoJnalxGIj2 wYt3rTYkxFMz1iWsz4eiOg2bckQL1Wo7WAh3KINWrcOQowzBade2GnbO3TbJbk43 TMOz7Nliu51b/ZL6d8SE5klpgkxABbB3oorKK6hIlYKxziMQZHpFC4V4q3At6Bwy 6P/aM9YMuCW+r4Cp7bex0/wOVmKLIM/UseDSQooNV+Sj8p22ZYF21yIiUj8lLM9H JHf4+nVXhP/744fGWj7qeWV3w2/qwJVXk6aiXgwiIQtMLC9kcM2wos1GSHRxc2Kw SIGte0PmfKWrcJfOZadhtEWh2Q== -----END CERTIFICATE-----Generated at Fri May 22 15:10:10 2026 by rpki-client