$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: fRH2F1t9YG2tlsZw+mmyBdM5MGF/jNkJKXC5Rdtthss= Subject key identifier: 2C:C1:E5:FE:C3:56:23:20:70:2D:A4:0D:86:B2:80:67:17:8F:3B:D7 Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 1B Signing time: Tue 21 Apr 2026 08:41:44 +0000 Manifest this update: Tue 21 Apr 2026 08:41:43 +0000 Manifest next update: Tue 28 Apr 2026 08:41:43 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: 09/RdSpRgxCZN0Nv1+dSTFe3XmyeIJeEeCADTeBR6OY=) 2: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) 3: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Apr 21 08:41:43 2026 GMT Not After : Apr 28 08:41:43 2026 GMT Subject: CN=69e73848-c5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:d5:69:dd:f1:29:2a:97:e5:18:4d:37:47: 13:fc:a8:4d:e4:bb:87:49:c9:e9:c4:78:50:1c:bf: 08:5a:f7:3c:9b:ae:c5:1d:f2:39:e3:b5:c4:70:2d: f7:5d:47:4e:c4:be:b7:ae:13:9a:46:5a:46:da:9e: c2:6e:e6:e5:89:92:b0:ae:85:1d:91:de:19:61:df: d1:3f:59:d0:5c:5f:3c:84:0a:4e:83:7d:f5:bd:e9: 3c:47:09:0a:1b:43:94:43:96:53:6f:88:82:fd:37: 06:a6:4d:fc:33:1f:6c:35:91:c1:88:2b:54:ca:76: 2f:f0:74:c0:36:2a:27:4f:94:6a:fd:ae:b3:48:8b: 2f:e7:70:75:d6:b3:d5:b3:91:6f:4d:fe:6d:b6:cf: 47:d9:07:47:da:4e:d4:f0:14:49:5c:cb:4d:5f:43: 98:55:05:b0:b9:64:45:92:c5:55:9e:21:9e:47:ca: 12:c6:ea:8b:11:6d:8e:f5:93:ee:1e:5d:79:a3:f1: 5a:8a:af:88:6b:c5:3d:4f:33:e2:f1:f6:35:04:40: 30:fc:b9:97:84:5f:f4:f2:76:76:0b:e0:64:18:55: f9:6a:d6:52:df:45:e8:8d:48:8d:2f:fc:3c:d5:03: e5:38:a0:5e:81:53:31:5f:b9:ad:7b:2e:79:16:6e: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:E5:FE:C3:56:23:20:70:2D:A4:0D:86:B2:80:67:17:8F:3B:D7 X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:80:38:60:d8:cc:b3:1f:3f:89:a9:9e:da:e4:18:72:6c:5b: 48:77:44:18:38:b4:a0:9f:45:ca:40:45:a5:b2:88:e3:23:54: b5:1b:25:d8:de:52:a0:89:e2:65:20:70:e3:97:ff:92:70:e1: c7:e7:4f:70:fa:c6:ea:68:1a:d0:ce:37:3b:34:69:41:4b:28: 9e:3d:8d:e1:a8:38:49:e8:34:25:4c:e8:ee:8c:d4:bf:76:ac: 84:02:fe:88:e3:c3:eb:39:72:0b:23:47:c4:20:e3:73:77:24: 5f:8b:b1:57:df:0a:0f:67:01:d6:ba:3a:0d:e0:36:eb:1b:ed: 48:c7:c3:64:98:9d:47:2c:b1:ff:7a:85:d2:c6:cd:0d:e1:13: 81:6d:98:9d:bb:c0:7f:c7:14:19:85:16:0d:3d:65:b2:25:6d: 17:48:4b:12:00:53:ff:88:02:d1:24:5b:54:5b:02:a1:84:c9: 5e:c8:09:30:f3:66:00:a4:0f:a5:b2:b2:31:94:5b:a3:25:15: 8c:c7:0b:c6:56:21:f0:17:7e:47:39:69:f2:6e:6d:c0:b0:5a: aa:6a:ae:dd:74:9e:b6:46:ef:05:55:da:50:3e:cc:72:d6:b9: f7:17:94:a5:76:69:4e:6f:71:4d:b2:7b:30:5c:16:be:68:7c: 1c:c6:ee:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA0MjEwODQxNDNaFw0yNjA0MjgwODQxNDNaMBgxFjAUBgNV BAMTDTY5ZTczODQ4LWM1ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ItVp3fEpKpflGE03RxP8qE3ku4dJyenEeFAcvwha9zybrsUd8jnjtcRwLfdd R07EvreuE5pGWkbansJu5uWJkrCuhR2R3hlh39E/WdBcXzyECk6DffW96TxHCQob Q5RDllNviIL9NwamTfwzH2w1kcGIK1TKdi/wdMA2KidPlGr9rrNIiy/ncHXWs9Wz kW9N/m22z0fZB0faTtTwFElcy01fQ5hVBbC5ZEWSxVWeIZ5HyhLG6osRbY71k+4e XXmj8VqKr4hrxT1PM+Lx9jUEQDD8uZeEX/TydnYL4GQYVflq1lLfReiNSI0v/DzV A+U4oF6BUzFfua17LnkWbpb7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULMHl/sNW IyBwLaQNhrKAZxePO9cwHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcgDhg2MyzHz+JqZ7a5BhybFtId0QYOLSgn0XKQEWlsojjI1S1GyXY3lKgieJl IHDjl/+ScOHH509w+sbqaBrQzjc7NGlBSyiePY3hqDhJ6DQlTOjujNS/dqyEAv6I 48PrOXILI0fEIONzdyRfi7FX3woPZwHWujoN4DbrG+1Ix8NkmJ1HLLH/eoXSxs0N 4ROBbZidu8B/xxQZhRYNPWWyJW0XSEsSAFP/iALRJFtUWwKhhMleyAkw82YApA+l srIxlFujJRWMxwvGViHwF35HOWnybm3AsFqqaq7ddJ62Ru8FVdpQPsxy1rn3F5Sl dmlOb3FNsnswXBa+aHwcxu5M -----END CERTIFICATE-----Generated at Wed Apr 22 06:33:52 2026 by rpki-client