
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json)
Hash identifier: X1+lAQuhaIUb6AWE8EtxMAJryVF4MBeh6tg1kSom5a0=
Subject key identifier: DA:70:CE:7F:A1:68:89:4B:48:8B:84:EA:72:7D:56:A5:7C:DA:A0:E3
Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
Manifest number: 90
Signing time: Wed 19 Aug 2026 08:07:54 +0000
Manifest this update: Wed 19 Aug 2026 08:07:54 +0000
Manifest next update: Wed 26 Aug 2026 08:07:54 +0000
Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: Ba1SHrVfh4SyTR0aOpDXlrNMYLDkqOt8mOe+bqx+zkc=)
2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Validity
Not Before: Aug 19 08:07:54 2026 GMT
Not After : Aug 26 08:07:54 2026 GMT
Subject: CN=6a85645a-ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:db:9f:cc:ae:91:2d:53:05:66:82:ad:da:
28:20:65:a1:bf:3e:69:12:1c:48:0e:b5:97:75:a7:
bb:15:9e:cf:2b:99:67:0d:0d:41:ba:88:d8:52:d8:
96:7e:81:67:9e:51:70:f2:7b:32:d8:cd:48:cc:20:
72:81:db:27:14:3b:4a:b1:08:c0:dd:ba:ba:ec:1a:
3c:1e:a2:c2:c9:a1:bb:28:10:b0:1d:fd:a0:3c:e3:
73:dc:89:8b:c5:a8:fc:85:03:3a:5a:6f:cb:95:3b:
a7:39:0c:51:93:63:70:b0:56:4b:17:bf:90:7c:b6:
02:b2:8e:3f:d7:7b:d6:9b:83:5e:3c:57:9b:8b:11:
a2:f3:70:f0:22:76:14:25:5a:5b:70:40:8a:4f:91:
de:f2:05:e7:7b:a9:dd:58:fa:20:36:ac:c6:55:aa:
0c:4e:1a:de:79:7e:82:c2:e2:2d:f2:14:c3:cc:30:
1c:44:7e:a1:96:98:f4:18:dd:ae:d7:e2:dc:6f:6c:
67:3b:8f:4d:74:5a:e5:a1:c4:87:f9:bc:1f:49:9c:
fc:b3:20:2d:fd:89:98:16:9c:04:d5:19:5d:9c:f5:
d9:d7:c4:3c:4f:69:a5:36:26:d6:24:9a:1c:e4:33:
89:5b:ca:3e:63:0f:c5:58:19:09:98:8a:30:3a:73:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:CE:7F:A1:68:89:4B:48:8B:84:EA:72:7D:56:A5:7C:DA:A0:E3
X509v3 Authority Key Identifier:
keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:20:dc:19:c9:c4:f1:af:16:87:07:fe:80:1c:cb:e8:8b:
ef:62:0c:96:79:05:0c:c7:96:a7:22:a0:7c:63:d1:f6:8f:e1:
be:78:59:12:34:26:a7:f0:87:7c:04:60:c1:fa:3c:7c:0a:47:
8f:e2:04:e6:ca:76:ef:a1:73:08:b0:65:b6:0d:c5:ab:5d:3c:
d8:33:4c:b4:c4:cb:ad:24:c4:8f:7d:75:5a:6d:b3:75:6a:e4:
9b:e7:a5:21:ce:b1:0e:1b:11:a7:3d:e8:4b:01:cc:63:fb:89:
b0:7b:6a:6c:d9:23:95:2c:b2:d5:60:6d:7d:d5:44:76:a6:9b:
75:ba:46:c2:84:9f:18:90:1e:43:31:1a:1c:8c:c6:7c:36:bf:
a0:8b:95:3d:14:18:1a:df:1d:e6:64:50:56:8c:97:cd:75:e6:
55:b9:5b:f9:15:45:9a:95:7e:e4:ad:8f:f3:52:e2:4b:ec:69:
bf:d9:77:c8:c2:e1:1e:41:7a:a6:52:94:57:d9:7c:21:11:3c:
d5:f1:b2:db:7e:f7:08:94:b0:2a:1f:e7:12:db:14:6a:99:32:
36:31:a0:c5:32:4d:88:c7:06:94:b3:64:db:c2:20:78:3d:c7:
23:35:68:b7:f6:1d:d9:86:db:1c:2e:69:db:a4:67:0f:a3:7d:
c4:30:61:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlBNDQxMTAvBgNVBAUTKDkyOERGOTVDRTk5QUZDNUI5REU2MDFFNkU4NjQwM0Mw
RDg5MTUyOUYwHhcNMjYwODE5MDgwNzU0WhcNMjYwODI2MDgwNzU0WjAYMRYwFAYD
VQQDEw02YTg1NjQ1YS1jYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnC3bn8yukS1TBWaCrdooIGWhvz5pEhxIDrWXdae7FZ7PK5lnDQ1BuojYUtiW
foFnnlFw8nsy2M1IzCBygdsnFDtKsQjA3bq67Bo8HqLCyaG7KBCwHf2gPONz3ImL
xaj8hQM6Wm/LlTunOQxRk2NwsFZLF7+QfLYCso4/13vWm4NePFebixGi83DwInYU
JVpbcECKT5He8gXne6ndWPogNqzGVaoMThreeX6CwuIt8hTDzDAcRH6hlpj0GN2u
1+Lcb2xnO49NdFrlocSH+bwfSZz8syAt/YmYFpwE1RldnPXZ18Q8T2mlNibWJJoc
5DOJW8o+Yw/FWBkJmIowOnNDKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpwzn+h
aIlLSIuE6nJ9VqV82qDjMB8GA1UdIwQYMBaAFJKN+VzpmvxbneYB5uhkA8DYkVKf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUE0NC9ENjkyRTFDQUMw
ODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9GdWQ1Z0htNkdRRHdOaVJV
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9G
dWQ1Z0htNkdRRHdOaVJVcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACjMg3BnJxPGvFocH/oAcy+iL72IMlnkFDMeWpyKgfGPR9o/hvnhZEjQmp/CH
fARgwfo8fApHj+IE5sp276FzCLBltg3Fq1082DNMtMTLrSTEj311Wm2zdWrkm+el
Ic6xDhsRpz3oSwHMY/uJsHtqbNkjlSyy1WBtfdVEdqabdbpGwoSfGJAeQzEaHIzG
fDa/oIuVPRQYGt8d5mRQVoyXzXXmVblb+RVFmpV+5K2P81LiS+xpv9l3yMLhHkF6
plKUV9l8IRE81fGy2373CJSwKh/nEtsUapkyNjGgxTJNiMcGlLNk28IgeD3HIzVo
t/Yd2YbbHC5p26RnD6N9xDBhiA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:36 2026 by rpki-client