$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: J0IJboWEQHL645X2pDwiZyGenksTsdly03M2V2H06H8= Subject key identifier: C7:6A:4E:BE:03:0F:63:41:2C:06:74:40:2D:C5:02:D1:A6:79:A2:B9 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: DA Signing time: Sun 19 Apr 2026 06:16:49 +0000 Manifest this update: Sun 19 Apr 2026 06:16:48 +0000 Manifest next update: Sun 26 Apr 2026 06:16:48 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: gwZuxCohJV0gOKYQuIwjQMqK+YWqbvWeB8Ebh41n+NU=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 5zcvJSt2efyJ2mxfcHBGUb0jglP48w26ykrEskIQ7pk=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: H9V2MyUqIitXZrS/5dU1I0DAeNIYmQRs+ziomgqJcr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Apr 19 06:16:48 2026 GMT Not After : Apr 26 06:16:48 2026 GMT Subject: CN=69e47350-822c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:45:c3:44:7d:fb:65:fd:57:5e:ba:8b:08: 8d:88:89:8c:e7:ba:43:ca:3b:8a:58:76:3e:48:31: 89:62:a0:eb:95:2b:c1:bc:e1:58:1b:0a:62:aa:c0: 1c:ab:bd:a3:e3:34:4c:dd:24:a3:18:bd:a4:ca:5d: b6:d5:f7:55:9e:78:47:eb:33:13:b7:ce:aa:5d:4f: 80:15:c1:5c:be:4d:6c:7c:70:c1:5b:d1:6f:26:0a: 75:5d:61:27:76:f4:55:fb:14:d2:31:a9:2a:9e:8d: bd:fd:7b:ab:73:d5:88:2d:b0:ff:df:b3:5a:b8:44: d8:a8:9e:d9:98:3a:44:ea:fd:58:1e:50:1b:67:20: 17:a5:83:7b:93:7a:ac:ed:e9:e9:7e:5c:56:5c:e9: f8:2d:3d:d5:d4:91:64:3d:d4:11:95:8e:eb:a1:cb: bf:f2:e3:32:00:33:95:4b:3c:b4:42:04:60:75:68: d4:b5:cd:4f:bd:cc:34:bc:3c:df:8e:12:8f:15:5f: 01:e0:f6:be:f7:0f:59:b8:40:b8:d6:ef:19:78:1a: a4:41:15:6a:e1:8e:8f:99:f5:0d:fc:36:52:63:49: 8b:73:4c:0c:5d:e1:6c:70:5a:59:80:f9:3e:35:2b: 72:7b:1d:82:fd:9c:f7:2d:62:cc:1c:a2:da:bb:ab: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:4E:BE:03:0F:63:41:2C:06:74:40:2D:C5:02:D1:A6:79:A2:B9 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:fa:a8:b3:cd:c4:c3:f1:93:01:e2:f1:ec:59:5a:7c:73:49: ba:a4:ea:bf:56:5b:9a:b8:ac:c0:42:52:63:7c:15:d7:a1:1b: 10:50:b8:66:20:c9:f6:b6:87:09:01:ee:cc:ea:d6:57:43:14: 69:36:83:9e:ca:91:ee:e2:35:0a:a3:60:9a:af:16:06:1a:06: a0:d4:da:74:8f:7a:e7:b7:c6:8a:53:ea:a5:93:6e:d6:97:55: 16:d1:cb:69:77:a4:c2:f9:4d:7c:c3:6b:b5:97:19:b6:82:80: b1:0e:c3:3f:96:0d:1d:a8:be:86:5a:d0:b8:ca:48:bd:9f:56: 60:90:7e:c7:b8:91:14:9e:3b:8c:12:d6:49:03:01:1c:5e:3c: 4d:db:ee:b0:91:ab:c2:22:35:de:b2:3a:66:01:bb:0a:84:48: 2b:15:a5:ab:ae:36:26:14:d7:fe:9f:65:74:6f:9c:b6:3d:2f: 16:74:e5:33:c4:c5:bd:85:f7:ca:4d:83:10:76:43:64:67:9c: b2:b1:20:70:d2:a1:78:4d:2c:8c:0d:fc:f7:c0:99:a7:73:48: bc:96:08:b6:ec:b7:6e:c9:75:8c:a6:77:d2:d4:30:98:dc:c7: 34:56:9c:b2:5b:e9:94:cb:6a:73:ab:db:b7:ea:e9:0d:5a:00: 26:97:d5:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzQUExMTAvBgNVBAUTKDBCNDJBODQ0MEYxQThFNjdGREU1NUU0MzY1QzdFM0ZC OUM2Q0ZFQzMwHhcNMjYwNDE5MDYxNjQ4WhcNMjYwNDI2MDYxNjQ4WjAYMRYwFAYD VQQDEw02OWU0NzM1MC04MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJdFw0R9+2X9V166iwiNiImM57pDyjuKWHY+SDGJYqDrlSvBvOFYGwpiqsAc q72j4zRM3SSjGL2kyl221fdVnnhH6zMTt86qXU+AFcFcvk1sfHDBW9FvJgp1XWEn dvRV+xTSMakqno29/Xurc9WILbD/37NauETYqJ7ZmDpE6v1YHlAbZyAXpYN7k3qs 7enpflxWXOn4LT3V1JFkPdQRlY7rocu/8uMyADOVSzy0QgRgdWjUtc1Pvcw0vDzf jhKPFV8B4Pa+9w9ZuEC41u8ZeBqkQRVq4Y6PmfUN/DZSY0mLc0wMXeFscFpZgPk+ NStyex2C/Zz3LWLMHKLau6t3qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdqTr4D D2NBLAZ0QC3FAtGmeaK5MB8GA1UdIwQYMBaAFAtCqEQPGo5n/eVeQ2XH4/ucbP7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzNBQS9EQzBGM0VEMkY1 NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWptZjk1VjVEWmNmai01eHNf c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzNBQS9EQzBGM0VEMkY1NDQxMUVGOTdBNDA0MTBDNEY5QUUwMi9DMEtvUkE4YWpt Zjk1VjVEWmNmai01eHNfc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2fqos83Ew/GTAeLx7FlafHNJuqTqv1ZbmriswEJSY3wV16EbEFC4ZiDJ9raH CQHuzOrWV0MUaTaDnsqR7uI1CqNgmq8WBhoGoNTadI9657fGilPqpZNu1pdVFtHL aXekwvlNfMNrtZcZtoKAsQ7DP5YNHai+hlrQuMpIvZ9WYJB+x7iRFJ47jBLWSQMB HF48TdvusJGrwiI13rI6ZgG7CoRIKxWlq642JhTX/p9ldG+ctj0vFnTlM8TFvYX3 yk2DEHZDZGecsrEgcNKheE0sjA3898CZp3NIvJYItuy3bsl1jKZ30tQwmNzHNFac slvplMtqc6vbt+rpDVoAJpfVuQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:20 2026 by rpki-client