$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: qeNazX4SQ+ctjCAfDLYX1Tco651CwY9YhZCbrsTfh7E= Subject key identifier: C1:BC:43:72:47:57:0C:17:68:06:55:15:01:2C:DC:4E:93:07:A5:63 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 52 Signing time: Fri 17 Apr 2026 07:53:12 +0000 Manifest this update: Fri 17 Apr 2026 07:53:12 +0000 Manifest next update: Fri 24 Apr 2026 07:53:12 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: 7xQwg6MTfqrFrqzJC3QJ5BkZthAW/wYPAErrxQVzrs4=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Apr 17 07:53:12 2026 GMT Not After : Apr 24 07:53:12 2026 GMT Subject: CN=69e1e6e8-82c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:1e:2d:4b:7b:6f:85:09:d6:20:a2:cb:40: 87:0c:4a:21:d6:69:73:13:53:45:b4:25:3b:42:16: 05:61:89:1e:ea:a4:af:85:2b:be:24:b3:0b:5d:42: 50:38:fb:2c:76:52:86:d1:9e:03:ed:e6:ec:f3:5c: 54:c0:dc:96:c1:97:31:02:eb:78:6c:32:8a:51:c7: 31:1b:27:b3:9d:47:4c:5b:b1:02:53:17:78:25:1a: 4e:ff:ca:a5:38:c4:97:db:78:5a:d8:e2:0e:03:db: 03:3c:43:1e:56:d3:ee:5f:d5:0f:77:9b:11:6e:1a: 0a:cf:94:a2:21:41:c3:b1:37:60:55:6a:fe:ac:6f: d9:9a:28:76:92:f3:1a:a2:86:94:b9:30:b3:2a:e1: 96:59:ca:07:73:42:ae:c0:b1:7d:4b:88:aa:13:49: 4d:d7:b2:f6:70:de:94:c2:1b:ba:d2:c2:02:59:22: b6:86:30:c0:35:90:79:a5:8f:2f:8e:25:9b:9e:96: 83:fa:3a:ba:27:a3:c8:cc:3b:e1:cb:e5:8a:e7:33: f7:84:a0:fb:51:61:1b:87:bf:3c:91:e0:b7:48:f9: fa:fd:4d:df:64:28:78:88:a4:53:29:29:c5:bf:da: 89:dd:d0:bc:7f:07:ed:0f:be:6a:c3:09:dc:16:75: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BC:43:72:47:57:0C:17:68:06:55:15:01:2C:DC:4E:93:07:A5:63 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:8a:db:b9:60:4e:8e:6b:41:bd:a5:f0:71:1f:73:eb:c2:cc: ba:12:7a:b0:b5:c3:aa:40:52:ac:36:60:ec:b2:e3:a7:24:f6: e2:d6:ca:47:62:28:80:4e:f3:00:d8:85:8d:63:eb:63:f0:e1: af:43:c2:0e:d0:01:2b:8c:58:d2:0d:62:a7:5b:fd:c9:28:ae: 38:9b:b3:08:84:b2:e2:bc:cb:ef:70:a5:fa:7c:eb:ad:24:85: ee:68:b7:fd:7b:b2:03:46:75:c9:5c:c7:36:8a:e0:35:c5:16: 0d:2e:3d:65:8c:c3:19:7a:c6:74:7f:7a:da:ff:6c:a0:01:f4: ac:4e:69:7b:24:7d:09:60:f9:58:e4:68:54:be:a4:45:ed:6c: ba:89:5b:97:ec:70:37:74:7e:f4:b0:94:ea:03:e2:38:31:98: e6:5f:4d:9e:69:76:cb:13:3e:db:e5:2b:df:a4:70:60:11:df: 2e:43:bc:97:7a:11:cf:e8:ca:a3:15:b5:df:8f:48:65:10:36: 8c:da:df:a0:26:88:16:91:4e:7f:cc:a3:d2:16:f7:16:6c:c2: 85:9b:cc:66:62:b2:7e:0d:73:e9:da:eb:cf:c9:a7:e7:2c:4d: bf:4f:0a:b5:e7:92:00:3d:5e:dc:31:0c:64:c3:84:91:c8:d2: 3d:a5:90:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjA0MTcwNzUzMTJaFw0yNjA0MjQwNzUzMTJaMBgxFjAUBgNV BAMTDTY5ZTFlNmU4LTgyYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAax4tS3tvhQnWIKLLQIcMSiHWaXMTU0W0JTtCFgVhiR7qpK+FK74kswtdQlA4 +yx2UobRngPt5uzzXFTA3JbBlzEC63hsMopRxzEbJ7OdR0xbsQJTF3glGk7/yqU4 xJfbeFrY4g4D2wM8Qx5W0+5f1Q93mxFuGgrPlKIhQcOxN2BVav6sb9maKHaS8xqi hpS5MLMq4ZZZygdzQq7AsX1LiKoTSU3XsvZw3pTCG7rSwgJZIraGMMA1kHmljy+O JZueloP6Orono8jMO+HL5YrnM/eEoPtRYRuHvzyR4LdI+fr9Td9kKHiIpFMpKcW/ 2ond0Lx/B+0PvmrDCdwWdTcXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwbxDckdX DBdoBlUVASzcTpMHpWMwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQitu5YE6Oa0G9pfBxH3Prwsy6EnqwtcOqQFKsNmDssuOnJPbi1spHYiiATvMA 2IWNY+tj8OGvQ8IO0AErjFjSDWKnW/3JKK44m7MIhLLivMvvcKX6fOutJIXuaLf9 e7IDRnXJXMc2iuA1xRYNLj1ljMMZesZ0f3ra/2ygAfSsTml7JH0JYPlY5GhUvqRF 7Wy6iVuX7HA3dH70sJTqA+I4MZjmX02eaXbLEz7b5SvfpHBgEd8uQ7yXehHP6Mqj FbXfj0hlEDaM2t+gJogWkU5/zKPSFvcWbMKFm8xmYrJ+DXPp2uvPyafnLE2/Twq1 55IAPV7cMQxkw4SRyNI9pZB6 -----END CERTIFICATE-----Generated at Fri Apr 17 19:29:18 2026 by rpki-client