$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft File: ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json) Hash identifier: 9KssjhQCi9Sw+PWhxAGpx9p3w04T1DQ3GT2dqwc7IJ0= Subject key identifier: 90:30:17:5E:9E:33:7B:7D:57:DE:A2:16:A0:0C:70:16:F3:C1:D5:08 Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Certificate issuer: /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft Manifest number: 3A Signing time: Sun 01 Mar 2026 09:55:13 +0000 Manifest this update: Sun 01 Mar 2026 09:55:12 +0000 Manifest next update: Sun 08 Mar 2026 09:55:12 +0000 Files and hashes: 1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: XOj+OoloOhTlFbWiPg1OHLKPkQ0z+nlxuMMmmrkdKN8=) 2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Validity Not Before: Mar 1 09:55:12 2026 GMT Not After : Mar 8 09:55:12 2026 GMT Subject: CN=69a40d01-aa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:34:ff:2c:83:32:2a:81:4c:8f:16:5c:4c: 5d:a3:9f:a0:dd:b5:18:3e:6b:98:13:89:e9:c3:f4: 69:81:5c:dd:bd:5e:78:7a:ac:7c:cf:97:97:3d:bb: 6e:76:37:a7:4e:0d:71:49:9b:89:e0:a8:7b:13:03: eb:d7:22:82:03:b2:09:5e:df:02:1d:e5:85:e2:82: 65:8d:60:30:2d:90:95:c3:b3:c0:c8:8d:08:8c:ec: 06:a8:70:d9:68:01:3e:d6:46:c9:2c:19:6c:c6:71: e4:d5:be:d8:c3:20:9b:e7:00:ac:0a:50:41:72:f6: 57:89:aa:b1:f6:cb:c5:13:7a:ff:a8:6d:3b:7e:c9: 1d:63:cf:61:0f:2c:6e:77:a4:8b:62:64:60:e1:ad: bb:4f:1b:ee:d7:2d:23:35:24:5b:f8:9b:90:04:c3: 6f:40:03:03:ab:c8:09:29:fb:31:0d:77:3b:ca:64: 5a:6e:7b:c4:71:44:36:a1:12:f8:ea:17:e6:da:04: be:12:1f:ac:4d:30:21:b0:f9:8c:f9:7d:46:9b:98: 12:a0:03:96:95:a3:40:8e:62:c7:c1:e9:44:92:68: e4:66:44:bc:a9:0c:94:fa:e6:50:29:9c:a7:18:9d: c7:c1:8d:e6:44:da:c1:9a:cd:7e:56:17:38:80:0b: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:17:5E:9E:33:7B:7D:57:DE:A2:16:A0:0C:70:16:F3:C1:D5:08 X509v3 Authority Key Identifier: keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:29:25:57:6e:b0:93:47:6b:49:f7:7a:40:7c:69:48:2a:a0: 9b:6d:32:aa:3c:94:68:e7:0f:ed:d6:7a:c3:df:40:31:fa:6f: 5d:66:9a:5b:61:6e:c8:53:2c:77:70:97:c3:cd:63:b0:cc:b9: 44:ef:e0:0b:10:d8:b1:f4:58:76:75:d0:55:02:4b:f3:f0:11: ff:96:c2:75:b4:7b:0d:ca:3c:34:ca:f5:e3:95:ad:2d:6b:f8: 60:8d:31:e6:92:45:bd:04:1c:22:da:d9:ad:d6:bb:e5:43:83: 15:a3:62:6d:a8:d6:d1:e7:f9:8f:68:bf:93:73:d8:2e:2e:44: c1:49:74:70:b8:00:40:66:61:a6:32:39:e1:11:09:31:15:63: 19:e8:ec:bc:d6:87:d2:fa:4d:0b:4d:5d:52:b1:26:9a:7f:86: 09:6a:1c:07:ad:4d:1c:8e:1b:ca:ad:a7:1e:da:86:ee:e3:5f: c2:80:4d:59:9d:dc:39:8b:f7:02:fc:64:e6:ef:62:99:6e:a8: 6f:de:66:d7:78:09:7b:6d:d9:29:96:5f:52:99:02:53:37:2a: ae:9a:f7:bb:5e:dd:e1:92:36:3e:80:f9:29:c3:31:ab:d0:69: 46:96:63:6f:0f:d7:a3:45:a1:8e:53:c3:0d:c2:2b:24:b9:28: 1d:89:ea:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUE0NDExMC8GA1UEBRMoOTI4REY5NUNFOTlBRkM1QjlERTYwMUU2RTg2NDAzQzBE ODkxNTI5RjAeFw0yNjAzMDEwOTU1MTJaFw0yNjAzMDgwOTU1MTJaMBgxFjAUBgNV BAMTDTY5YTQwZDAxLWFhOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrRzT/LIMyKoFMjxZcTF2jn6DdtRg+a5gTienD9GmBXN29Xnh6rHzPl5c9u252 N6dODXFJm4ngqHsTA+vXIoIDsgle3wId5YXigmWNYDAtkJXDs8DIjQiM7AaocNlo AT7WRsksGWzGceTVvtjDIJvnAKwKUEFy9leJqrH2y8UTev+obTt+yR1jz2EPLG53 pItiZGDhrbtPG+7XLSM1JFv4m5AEw29AAwOryAkp+zENdzvKZFpue8RxRDahEvjq F+baBL4SH6xNMCGw+Yz5fUabmBKgA5aVo0COYsfB6USSaORmRLypDJT65lApnKcY ncfBjeZE2sGazX5WFziAC7xzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkDAXXp4z e31X3qIWoAxwFvPB1QgwHwYDVR0jBBgwFoAUko35XOma/Fud5gHm6GQDwNiRUp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QTQ0L0Q2OTJFMUNBQzA4 MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1ZDVnSG02R1FEd05pUlVw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva28zNVhPbWFfRnVkNWdIbTZHUUR3TmlSVXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyL2tvMzVYT21hX0Z1 ZDVnSG02R1FEd05pUlVwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0KSVXbrCTR2tJ93pAfGlIKqCbbTKqPJRo5w/t1nrD30Ax+m9dZppbYW7IUyx3 cJfDzWOwzLlE7+ALENix9Fh2ddBVAkvz8BH/lsJ1tHsNyjw0yvXjla0ta/hgjTHm kkW9BBwi2tmt1rvlQ4MVo2JtqNbR5/mPaL+Tc9guLkTBSXRwuABAZmGmMjnhEQkx FWMZ6Oy81ofS+k0LTV1SsSaaf4YJahwHrU0cjhvKrace2obu41/CgE1Zndw5i/cC /GTm72KZbqhv3mbXeAl7bdkpll9SmQJTNyqumve7Xt3hkjY+gPkpwzGr0GlGlmNv D9ejRaGOU8MNwiskuSgdiept -----END CERTIFICATE-----Generated at Mon Mar 2 17:27:44 2026 by rpki-client