$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: T3z8bjGqP2S7W0QNcNVc2MWw/ZuqC0SH6iccdLZUolI= Subject key identifier: D3:2A:3E:A7:CD:73:7B:F1:8C:4A:82:17:86:B4:0A:4D:04:B0:6D:23 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: BF Signing time: Sun 01 Mar 2026 08:11:36 +0000 Manifest this update: Sun 01 Mar 2026 08:11:36 +0000 Manifest next update: Sun 08 Mar 2026 08:11:36 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: ItJu7BjHW3epWM36Rhq6Kl25IBz2GaDKb/oHVJqftnw=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: fSSeFIvlDFyD3F7oveg8Hss3IU2bD7/hm8Omjh6KwuM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: gfj1R11Mpbbs83ejkJtVj4rQi5q0YUJRvMfHzMv20uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Mar 1 08:11:36 2026 GMT Not After : Mar 8 08:11:36 2026 GMT Subject: CN=69a3f4b8-b924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:0b:4e:ca:3d:86:0a:06:37:8f:c0:7a:f3: a9:e3:30:e1:c9:e6:f7:21:5f:28:e9:af:eb:ee:f8: 5b:81:5d:ca:fb:47:44:cc:e4:76:8c:fa:14:93:68: 53:30:fb:34:21:22:02:78:0a:3c:28:f8:21:5d:82: 2b:45:dc:d5:44:69:8d:96:59:03:46:53:a4:95:73: 76:4a:67:44:77:f8:e6:bf:1a:27:98:fa:e8:81:57: d2:02:26:51:d6:be:48:b6:41:89:d1:51:0d:f8:23: 95:e6:98:ce:f6:16:91:e6:f2:ff:7d:f9:09:4c:f6: 4d:1a:58:bb:06:6f:19:97:44:cc:67:db:7e:90:e9: 9b:7c:8d:26:7a:24:46:72:fd:10:a6:94:2f:e9:d3: 47:1e:6a:35:e6:be:10:a5:ac:84:5e:83:4f:f9:03: 6e:54:fb:22:9d:ff:59:bc:df:a9:d1:c9:62:27:49: b8:d2:35:d0:b3:af:c2:d1:0b:27:e1:b6:b1:18:0d: d5:9d:8d:5b:28:fd:2d:72:bc:1a:7b:b3:42:8b:6f: d9:98:20:59:24:07:9d:d5:bd:cd:58:ec:40:dd:e2: f5:b7:f0:5c:74:1b:d1:86:0b:2d:57:6f:83:21:37: 04:b2:21:07:db:4d:0f:f4:8b:ce:86:4c:b9:46:05: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:3E:A7:CD:73:7B:F1:8C:4A:82:17:86:B4:0A:4D:04:B0:6D:23 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:58:cb:6b:5d:20:2a:28:f3:4b:6d:2c:37:c9:0c:e7:56:19: d7:f3:13:64:fd:f3:bd:17:3f:6e:70:7f:77:cc:cd:78:51:1f: 86:3c:ba:2b:44:ca:1f:b4:50:40:d5:a7:2e:d1:92:59:ae:a5: f0:f1:ae:ad:4d:6b:d9:58:4c:93:aa:30:80:cc:33:02:35:dd: c1:34:4a:ca:a6:75:54:4d:b4:a1:19:1e:96:14:0b:13:81:30: 92:69:a8:5c:6f:7e:a1:4e:64:44:b5:b3:11:53:9f:98:0a:19: 23:5b:e9:f0:45:8b:3c:bb:23:e4:72:6b:94:24:e0:63:94:55: fe:ef:3d:b6:d0:e2:11:75:d0:9a:2c:3d:f0:47:0c:41:ad:9d: 8e:66:9c:5c:23:34:2a:22:a2:59:73:04:50:72:76:34:9e:45: ee:d6:6a:f2:53:75:66:cc:e6:03:7f:e1:53:96:f2:8a:c0:64: e4:23:4b:cd:e1:76:30:f2:fd:01:7c:bc:d2:ad:81:c2:45:cc: 47:0c:cb:53:89:9d:09:30:ba:ce:bf:12:d9:e2:ef:84:20:f1: 79:04:32:db:43:d4:9d:6a:9a:06:55:95:17:df:1e:d5:f5:49: fb:d4:f0:f7:ed:c5:bd:d2:11:ab:12:cf:d1:84:c9:0f:ff:30: 63:ed:85:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC OUM2Q0ZFQzMwHhcNMjYwMzAxMDgxMTM2WhcNMjYwMzA4MDgxMTM2WjAYMRYwFAYD VQQDEw02OWEzZjRiOC1iOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GQLTso9hgoGN4/AevOp4zDhyeb3IV8o6a/r7vhbgV3K+0dEzOR2jPoUk2hT MPs0ISICeAo8KPghXYIrRdzVRGmNllkDRlOklXN2SmdEd/jmvxonmProgVfSAiZR 1r5ItkGJ0VEN+COV5pjO9haR5vL/ffkJTPZNGli7Bm8Zl0TMZ9t+kOmbfI0meiRG cv0QppQv6dNHHmo15r4QpayEXoNP+QNuVPsinf9ZvN+p0cliJ0m40jXQs6/C0Qsn 4baxGA3VnY1bKP0tcrwae7NCi2/ZmCBZJAed1b3NWOxA3eL1t/BcdBvRhgstV2+D ITcEsiEH200P9IvOhky5RgWrawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMqPqfN c3vxjEqCF4a0Ck0EsG0jMB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1 NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWpt Zjk1VjVEWmNmai01eHNfc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqFjLa10gKijzS20sN8kM51YZ1/MTZP3zvRc/bnB/d8zNeFEfhjy6K0TKH7RQ QNWnLtGSWa6l8PGurU1r2VhMk6owgMwzAjXdwTRKyqZ1VE20oRkelhQLE4Ewkmmo XG9+oU5kRLWzEVOfmAoZI1vp8EWLPLsj5HJrlCTgY5RV/u89ttDiEXXQmiw98EcM Qa2djmacXCM0KiKiWXMEUHJ2NJ5F7tZq8lN1ZszmA3/hU5byisBk5CNLzeF2MPL9 AXy80q2BwkXMRwzLU4mdCTC6zr8S2eLvhCDxeQQy20PUnWqaBlWVF98e1fVJ+9Tw 9+3FvdIRqxLP0YTJD/8wY+2Fzw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:30:38 2026 by rpki-client