$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: 3pNHnPA0z6zUITqwKQqwTemmGYuefawh6g/EnWQMh4k= Subject key identifier: 14:A8:A8:05:05:CD:8B:29:1E:C2:D9:D0:AD:6B:87:3F:40:3A:80:E2 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: AA Signing time: Fri 09 Oct 2026 07:49:19 +0000 Manifest this update: Fri 09 Oct 2026 07:49:18 +0000 Manifest next update: Fri 16 Oct 2026 07:49:18 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: UgfKxLMxKwaldi64kR1ANv3eedILraq/hutogSc9yYU=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Oct 9 07:49:18 2026 GMT Not After : Oct 16 07:49:18 2026 GMT Subject: CN=6ac89c7f-d16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:9f:f8:88:ea:37:b4:1e:59:e5:19:f4:76: f0:79:1f:57:08:95:c1:e0:13:06:58:24:c2:22:d6: a6:39:14:56:ec:e1:9e:af:6d:4f:3d:f5:98:7d:9b: 68:98:e6:b2:bb:19:b6:f8:09:1c:07:b0:44:36:4d: 45:4a:e4:f7:32:81:48:10:5e:bc:fe:91:9e:6e:e9: 6f:e8:d2:8e:ca:59:78:7b:27:00:66:43:32:bd:d9: 0f:84:72:01:00:95:ab:f9:e5:56:07:4c:2a:ca:b4: ca:4a:28:6a:81:a3:53:9c:a2:ef:a0:04:87:f5:bb: fa:74:2c:1d:23:04:e5:14:26:11:ad:77:36:29:fe: 0a:af:e8:a4:a6:0c:15:a0:3f:15:57:c5:1a:f1:e5: ea:fa:68:b2:fd:f9:a5:1e:48:28:8f:73:ef:ee:47: 9a:99:f0:bb:ab:a4:54:00:5f:02:1c:c9:a2:30:56: ac:74:e1:84:89:3f:a0:6b:f5:a2:67:a4:d9:64:0a: 92:f4:7e:7e:22:7e:5e:ac:8e:77:c2:34:c2:8c:17: 02:6e:e5:fd:00:fa:a8:48:ce:68:db:f4:40:4b:d9: e8:89:52:66:19:4f:eb:cc:6b:f5:74:f0:0a:1b:6e: d6:c6:94:84:7e:25:f9:82:e3:ad:69:34:ea:8c:29: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:A8:05:05:CD:8B:29:1E:C2:D9:D0:AD:6B:87:3F:40:3A:80:E2 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:29:1a:9c:02:be:a5:85:9e:e2:cf:cd:5a:15:b9:66:43:34: 20:90:42:5c:35:88:9d:c2:02:09:e7:7f:16:d6:e7:9e:2e:62: 7a:96:d0:ee:8f:46:74:bb:e8:d9:e5:14:51:b4:ab:dc:1d:21: b5:88:4d:66:78:2c:52:95:8d:17:35:24:0f:79:21:54:0b:82: eb:dc:5f:b2:fe:82:8c:8a:66:ac:33:fe:00:9d:68:6d:6f:10: 74:73:40:ff:91:07:dd:a0:4f:29:18:dd:09:07:d4:e2:c6:d7: 2b:d6:d3:34:a7:74:83:46:2f:0d:2b:4c:90:2f:b5:59:73:02: 6b:1e:39:67:d0:0e:0d:0c:13:ba:4e:df:7c:dc:1d:bf:e7:0b: 7d:4b:18:ec:ec:b8:a3:9a:8c:7f:b0:6b:63:10:39:00:18:da: f7:c7:12:11:43:62:4f:4c:49:be:ef:24:3e:5c:a1:f5:ea:75: dd:57:a1:01:2d:bf:a3:d0:6d:32:31:29:8a:9f:fe:38:12:e7: 21:0f:93:5a:97:fa:5c:58:c0:e4:53:bb:3e:d5:3c:d0:60:a8: a0:2b:21:2b:9d:02:b9:f6:55:88:d5:9e:5d:d7:79:99:d2:f6: 3a:1c:fc:c3:32:71:f8:9a:ce:2a:78:be:cb:a3:c4:7f:de:24: 4b:b0:ce:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlBNDQxMTAvBgNVBAUTKDkyOERGOTVDRTk5QUZDNUI5REU2MDFFNkU4NjQwM0Mw RDg5MTUyOUYwHhcNMjYxMDA5MDc0OTE4WhcNMjYxMDE2MDc0OTE4WjAYMRYwFAYD VQQDEw02YWM4OWM3Zi1kMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozOf+IjqN7QeWeUZ9HbweR9XCJXB4BMGWCTCItamORRW7OGer21PPfWYfZto mOayuxm2+AkcB7BENk1FSuT3MoFIEF68/pGebulv6NKOyll4eycAZkMyvdkPhHIB AJWr+eVWB0wqyrTKSihqgaNTnKLvoASH9bv6dCwdIwTlFCYRrXc2Kf4Kr+ikpgwV oD8VV8Ua8eXq+miy/fmlHkgoj3Pv7keamfC7q6RUAF8CHMmiMFasdOGEiT+ga/Wi Z6TZZAqS9H5+In5erI53wjTCjBcCbuX9APqoSM5o2/RAS9noiVJmGU/rzGv1dPAK G27WxpSEfiX5guOtaTTqjCkhLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSoqAUF zYspHsLZ0K1rhz9AOoDiMB8GA1UdIwQYMBaAFJKN+VzpmvxbneYB5uhkA8DYkVKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUE0NC9ENjkyRTFDQUMw ODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9GdWQ1Z0htNkdRRHdOaVJV cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9tYV9G dWQ1Z0htNkdRRHdOaVJVcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCkanAK+pYWe4s/NWhW5ZkM0IJBCXDWIncICCed/Ftbnni5iepbQ7o9GdLvo 2eUUUbSr3B0htYhNZngsUpWNFzUkD3khVAuC69xfsv6CjIpmrDP+AJ1obW8QdHNA /5EH3aBPKRjdCQfU4sbXK9bTNKd0g0YvDStMkC+1WXMCax45Z9AODQwTuk7ffNwd v+cLfUsY7Oy4o5qMf7BrYxA5ABja98cSEUNiT0xJvu8kPlyh9ep13VehAS2/o9Bt MjEpip/+OBLnIQ+TWpf6XFjA5FO7PtU80GCooCshK50CufZViNWeXdd5mdL2Ohz8 wzJx+JrOKni+y6PEf94kS7DOvQ== -----END CERTIFICATE-----Generated at Sat Oct 10 13:03:07 2026 by rpki-client