$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: QQgLd4z6atw99wDuS4Z2ZkBmIRTY+n1cd0BHgbAvm7o= Subject key identifier: E3:C1:B8:3E:DE:75:DF:CB:58:01:BA:72:01:BD:14:90:72:8D:04:2A Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 08:07:31 +0000 Manifest this update: Tue 03 Mar 2026 08:07:31 +0000 Manifest next update: Tue 10 Mar 2026 08:07:31 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: hnuEYGvVGZwEpsqiORSeGvRh5BKulUSV5JzTaIvsYLY=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Mar 3 08:07:31 2026 GMT Not After : Mar 10 08:07:31 2026 GMT Subject: CN=69a696c3-4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:b0:f3:42:77:0e:00:86:25:72:00:f8:3f: 94:07:b5:4e:bf:af:b4:dd:6e:f2:db:64:be:1f:e8: de:80:23:bb:39:f0:c0:33:d6:fe:91:c3:b6:2c:c1: 71:4f:19:a0:bd:eb:7a:1b:19:23:5c:40:38:22:ba: b4:96:bc:41:af:b7:b2:6c:97:15:7a:fa:c9:a9:40: 99:2c:05:18:2e:ea:bc:eb:05:46:7c:e0:92:10:2b: 2c:27:d6:bc:1d:17:18:15:ea:c0:64:0c:24:4b:bb: 3c:6c:35:b9:99:d8:1d:14:ba:0c:39:2f:6f:9d:fe: f5:28:c7:50:f3:30:ad:87:a6:7b:08:78:33:32:10: ca:56:c4:e1:ff:09:2b:65:04:0b:3c:5e:28:b0:0e: 72:8e:ce:70:aa:f6:e4:93:cc:6d:6b:0e:c3:6a:aa: c3:4e:29:a6:28:98:fb:ba:ef:99:b1:60:8f:23:8e: a1:92:49:25:ac:28:9f:68:0d:60:45:d4:0d:08:f2: b4:e4:c1:85:19:bd:c9:be:30:df:8e:29:a9:63:15: cb:e8:07:42:06:9a:85:61:3d:29:d3:58:c7:01:28: 13:7c:57:02:6f:17:39:05:2a:39:f2:d3:1f:71:a2: 70:88:18:4d:a7:9e:72:2c:46:0c:77:1c:9f:9e:88: e4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C1:B8:3E:DE:75:DF:CB:58:01:BA:72:01:BD:14:90:72:8D:04:2A X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:f6:b9:98:62:72:85:9f:03:9f:36:9a:1e:64:1c:bc:a0: ba:31:62:06:38:28:d1:30:a6:c7:96:ca:3c:d6:8c:fa:21:98: dc:ed:09:25:e9:bf:64:e8:89:a5:0c:ae:2d:ee:d8:8c:dd:c1: e0:bd:bd:3b:e6:71:c6:35:25:0d:17:2b:17:12:32:4a:a6:54: f5:36:2a:3d:8d:b8:5b:af:0f:67:34:3e:72:36:8d:cc:72:b7: 2f:1a:24:eb:b9:3a:27:0a:c6:29:ce:ba:a7:f4:ff:3b:25:45: 81:59:69:96:38:f4:75:47:5f:37:d7:eb:85:cd:93:37:19:20: 1b:e7:ff:0f:53:ed:16:f3:b0:b4:84:fb:78:3e:02:f6:0b:df: ef:28:11:fb:9b:ee:5f:11:d4:5a:3e:49:a9:27:2d:04:32:20: e3:97:8f:54:d7:b5:a0:da:b1:0a:78:07:78:bb:50:d6:80:5f: a6:97:37:81:54:36:d3:95:b2:ba:e9:c0:3f:f4:7e:a8:ec:cd: 6c:c7:21:4f:8c:a5:a7:d5:d8:eb:33:7b:25:8f:32:26:38:ec: 4b:4e:fc:54:be:27:6e:d3:0a:5a:b9:98:8f:89:4c:2a:c0:ad: c9:29:3e:6d:61:f0:4b:a4:3c:a5:f8:cb:49:5d:38:1a:be:ae: e8:4f:cb:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjAzMDMwODA3MzFaFw0yNjAzMTAwODA3MzFaMBgxFjAUBgNV BAMTDTY5YTY5NmMzLTQ0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt1LDzQncOAIYlcgD4P5QHtU6/r7TdbvLbZL4f6N6AI7s58MAz1v6Rw7YswXFP GaC963obGSNcQDgiurSWvEGvt7JslxV6+smpQJksBRgu6rzrBUZ84JIQKywn1rwd FxgV6sBkDCRLuzxsNbmZ2B0Uugw5L2+d/vUox1DzMK2HpnsIeDMyEMpWxOH/CStl BAs8XiiwDnKOznCq9uSTzG1rDsNqqsNOKaYomPu675mxYI8jjqGSSSWsKJ9oDWBF 1A0I8rTkwYUZvcm+MN+OKaljFcvoB0IGmoVhPSnTWMcBKBN8VwJvFzkFKjny0x9x onCIGE2nnnIsRgx3HJ+eiOTVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU48G4Pt51 38tYAbpyAb0UkHKNBCowHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASGPa5mGJyhZ8DnzaaHmQcvKC6MWIGOCjRMKbHlso81oz6IZjc7Qkl6b9k6Iml DK4t7tiM3cHgvb075nHGNSUNFysXEjJKplT1Nio9jbhbrw9nND5yNo3McrcvGiTr uTonCsYpzrqn9P87JUWBWWmWOPR1R1831+uFzZM3GSAb5/8PU+0W87C0hPt4PgL2 C9/vKBH7m+5fEdRaPkmpJy0EMiDjl49U17Wg2rEKeAd4u1DWgF+mlzeBVDbTlbK6 6cA/9H6o7M1sxyFPjKWn1djrM3sljzImOOxLTvxUvidu0wpauZiPiUwqwK3JKT5t YfBLpDyl+MtJXTgavq7oT8ur -----END CERTIFICATE-----Generated at Wed Mar 4 14:27:43 2026 by rpki-client