$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: FnggAu5XCwfVtXJEtmRDBRwSoWlDrjGmVG4a6WdFtUI= Subject key identifier: B4:F8:9F:73:A4:13:E1:40:2E:D5:A7:90:EB:17:26:FE:99:D5:5E:20 Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 31 Signing time: Fri 05 Jun 2026 09:03:09 +0000 Manifest this update: Fri 05 Jun 2026 09:03:08 +0000 Manifest next update: Fri 12 Jun 2026 09:03:08 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: MIEGKSJx5yEJExfIi0QOFpMN7QGZ8196TEn2YN6exKQ=) 2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) 3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Jun 5 09:03:08 2026 GMT Not After : Jun 12 09:03:08 2026 GMT Subject: CN=6a2290cd-19c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f9:85:2d:85:5d:aa:d5:0a:ce:18:d9:96:f9: ac:e6:da:80:a4:f7:b4:2a:bb:ab:93:e9:0a:12:39: 7f:e4:72:de:43:f6:1d:43:7f:3e:c0:62:96:94:ae: 6c:3a:af:30:39:cf:af:8f:6f:b9:b9:f0:75:9a:0b: 48:bc:a2:de:d3:55:2b:be:e0:11:d8:21:f2:88:38: b3:74:c4:3e:29:6c:64:11:2b:12:ab:a1:41:77:dc: ef:b6:19:80:37:bc:20:8e:84:01:81:fc:0c:5d:00: b9:1b:f9:55:c6:34:1a:01:19:d5:90:b0:5d:39:d1: 37:13:78:1f:01:ba:2f:08:3e:b8:40:2c:c8:20:7a: df:ff:8f:d7:60:86:53:bc:51:3a:b3:d1:69:f3:97: 20:2c:32:10:ca:93:74:cb:52:5c:ad:ca:23:51:b1: 80:8c:db:c8:e4:cc:e3:2f:b7:5f:93:27:6b:78:2b: 3b:69:ed:8e:e2:86:18:16:63:c2:95:a8:5c:e0:27: c4:13:6c:a5:4d:45:57:51:2e:e5:46:6d:ba:5f:01: a5:cc:de:fa:82:49:ff:14:46:c7:eb:c0:c9:9e:54: 84:28:8a:d1:50:62:00:74:ef:02:5e:be:fe:7e:2b: f5:d7:fc:72:2a:5a:b7:39:7f:bc:1d:de:3a:59:96: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F8:9F:73:A4:13:E1:40:2E:D5:A7:90:EB:17:26:FE:99:D5:5E:20 X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b9:8f:0f:0d:98:10:9e:bf:33:81:11:17:3d:e6:c6:c7:c1: 0a:12:d3:13:92:12:aa:a9:38:22:cd:b2:3d:65:a5:b0:4d:de: 01:9e:fe:41:87:71:de:3b:4a:48:1c:fe:94:b8:be:ef:13:15: be:96:65:86:e1:b1:70:7e:ff:57:a9:5e:d3:67:2f:48:9a:53: c4:25:0f:30:ca:93:54:1b:10:c1:f0:ce:9b:97:ff:ad:39:be: 2a:45:3c:d6:5a:ba:71:d4:9e:ed:35:c4:65:21:00:06:1d:39: ac:ae:05:4d:56:47:46:4a:98:3d:07:c2:e2:1b:62:1c:db:3e: a1:be:2d:4f:12:4b:e1:1a:bc:71:ae:22:f6:5a:0d:fc:53:bd: 3c:0d:26:cb:40:39:78:84:ac:e5:c8:af:27:33:2a:b8:33:95: 9c:17:c4:f3:92:a4:4f:84:fe:60:59:47:92:ac:47:25:12:4a: 84:af:59:38:85:ac:09:ef:0d:c5:d1:30:20:6c:bc:1a:ad:96: c1:a2:2d:ee:62:a8:91:b9:a1:3a:28:bb:51:ab:44:81:5e:15: c0:a9:43:b0:16:fd:b6:c3:92:9a:2e:4e:15:54:c5:3a:e0:09: ec:d9:d8:98:bf:ce:6e:93:95:d5:88:11:87:79:23:50:d5:eb: 3c:76:da:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA2MDUwOTAzMDhaFw0yNjA2MTIwOTAzMDhaMBgxFjAUBgNV BAMTDTZhMjI5MGNkLTE5YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz+YUthV2q1QrOGNmW+azm2oCk97Qqu6uT6QoSOX/kct5D9h1Dfz7AYpaUrmw6 rzA5z6+Pb7m58HWaC0i8ot7TVSu+4BHYIfKIOLN0xD4pbGQRKxKroUF33O+2GYA3 vCCOhAGB/AxdALkb+VXGNBoBGdWQsF050TcTeB8Bui8IPrhALMgget//j9dghlO8 UTqz0WnzlyAsMhDKk3TLUlytyiNRsYCM28jkzOMvt1+TJ2t4Kztp7Y7ihhgWY8KV qFzgJ8QTbKVNRVdRLuVGbbpfAaXM3vqCSf8URsfrwMmeVIQoitFQYgB07wJevv5+ K/XX/HIqWrc5f7wd3jpZllkXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtPifc6QT 4UAu1aeQ6xcm/pnVXiAwHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1uY8PDZgQnr8zgREXPebGx8EKEtMTkhKqqTgizbI9ZaWwTd4Bnv5Bh3HeO0pI HP6UuL7vExW+lmWG4bFwfv9XqV7TZy9ImlPEJQ8wypNUGxDB8M6bl/+tOb4qRTzW Wrpx1J7tNcRlIQAGHTmsrgVNVkdGSpg9B8LiG2Ic2z6hvi1PEkvhGrxxriL2Wg38 U708DSbLQDl4hKzlyK8nMyq4M5WcF8TzkqRPhP5gWUeSrEclEkqEr1k4hawJ7w3F 0TAgbLwarZbBoi3uYqiRuaE6KLtRq0SBXhXAqUOwFv22w5KaLk4VVMU64Ans2diY v85uk5XViBGHeSNQ1es8dtqj -----END CERTIFICATE-----Generated at Sat Jun 6 16:12:56 2026 by rpki-client