$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: 9n38ZyOL3nnqdP3RdR2VwPI9XHc9DO3QNcUbwFPMNSc= Subject key identifier: 3A:30:22:85:68:82:B4:C2:08:79:45:2C:7B:06:E9:C3:9B:BA:2A:8A Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 48 Signing time: Tue 21 Jul 2026 10:13:03 +0000 Manifest this update: Tue 21 Jul 2026 10:13:02 +0000 Manifest next update: Tue 28 Jul 2026 10:13:02 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: lS3r5FIiS6bcsgZuV37QEf9sU/bMVFjoJTxKSaU6a8o=) 2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) 3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Jul 21 10:13:02 2026 GMT Not After : Jul 28 10:13:02 2026 GMT Subject: CN=6a5f462e-b063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:8a:f1:17:64:54:b7:05:7c:8f:ff:9c:6b: a7:49:8c:dc:a1:29:91:38:dc:da:73:98:87:8c:74: 60:82:21:47:73:f3:a8:1a:9a:76:45:b1:9a:45:38: 07:84:7c:63:41:5d:34:52:9c:62:d4:91:3f:14:63: 3c:b2:dd:31:28:b1:15:d2:02:1c:01:ff:89:9b:38: d5:c9:2f:d9:56:c1:3e:b3:2a:a4:6a:a7:69:61:81: de:52:9d:2a:43:6b:b4:99:4c:d4:ee:b4:dd:8c:a8: 84:05:64:95:b3:98:67:13:cd:8b:0c:4f:d2:ff:66: b1:06:07:c7:e2:38:de:e9:d7:50:65:9b:2e:a1:3a: 2c:0d:bb:d7:a8:56:b8:49:2b:9d:5e:a6:96:0c:75: 4e:c4:4c:71:ec:57:6b:0d:77:ee:3a:d3:ed:9b:bc: b4:46:d3:3b:6d:2d:13:bb:aa:f4:1b:fd:42:9e:f7: e3:92:c1:0c:c2:a1:88:dc:69:46:72:a5:b5:df:00: 8d:cd:d8:8b:85:2b:96:c3:d5:62:c8:96:37:c4:e7: 57:08:c9:89:83:dd:61:49:0b:b8:bc:00:cb:7d:e0: 6b:95:66:ad:15:80:1b:9e:9e:34:68:cc:aa:f9:d8: e1:c7:cf:ce:b0:26:a7:6e:bc:a9:df:2a:bf:b0:ea: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:30:22:85:68:82:B4:C2:08:79:45:2C:7B:06:E9:C3:9B:BA:2A:8A X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d0:f7:f3:48:fe:3c:ae:64:32:af:e8:a6:43:24:3f:63:8f: 56:56:a7:47:0b:3f:10:c5:97:5c:a4:21:a2:e0:6b:0e:08:70: 96:ee:b1:d6:e5:ed:de:2b:a7:f3:b6:a2:8a:c5:be:a5:41:fa: c3:08:f1:ab:a2:1e:a5:1a:0b:12:38:34:b8:c5:2f:0d:70:52: f9:c3:66:be:a3:7c:8c:7c:de:d2:21:c1:48:a1:7f:26:dd:bb: 89:37:6e:a0:2c:31:db:06:b9:da:14:30:91:ab:5c:5a:1a:98: e8:9c:97:73:c3:13:7d:30:4e:ce:23:e5:e9:ce:89:65:26:17: 4e:b7:aa:6b:d6:03:17:f3:e6:52:6e:bb:90:e6:dd:85:0d:ea: 3f:bd:61:3f:26:7d:c2:7c:fd:66:05:f5:1b:df:c1:8b:62:1e: 04:86:b4:02:54:01:1d:b8:e6:c0:00:5a:e3:08:de:c5:26:c7: 87:ba:32:5e:a0:a7:1e:c9:15:36:7c:94:7d:ab:a0:08:64:cc: 3e:05:12:a9:4b:a3:bb:c1:99:17:b0:89:94:c8:82:3e:2e:cf: e3:6b:fb:f3:f8:26:90:ca:66:c0:b3:d9:4c:e1:dd:39:62:f8: c2:3d:13:ad:38:8c:3b:af:35:b3:3c:29:c8:de:df:93:59:a4: c8:f7:95:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA3MjExMDEzMDJaFw0yNjA3MjgxMDEzMDJaMBgxFjAUBgNV BAMTDTZhNWY0NjJlLWIwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjjIrxF2RUtwV8j/+ca6dJjNyhKZE43NpzmIeMdGCCIUdz86gamnZFsZpFOAeE fGNBXTRSnGLUkT8UYzyy3TEosRXSAhwB/4mbONXJL9lWwT6zKqRqp2lhgd5SnSpD a7SZTNTutN2MqIQFZJWzmGcTzYsMT9L/ZrEGB8fiON7p11Blmy6hOiwNu9eoVrhJ K51eppYMdU7ETHHsV2sNd+460+2bvLRG0zttLRO7qvQb/UKe9+OSwQzCoYjcaUZy pbXfAI3N2IuFK5bD1WLIljfE51cIyYmD3WFJC7i8AMt94GuVZq0VgBuenjRozKr5 2OHHz86wJqduvKnfKr+w6maHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOjAihWiC tMIIeUUsewbpw5u6KoowHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBy0PfzSP48rmQyr+imQyQ/Y49WVqdHCz8QxZdcpCGi4GsOCHCW7rHW5e3eK6fz tqKKxb6lQfrDCPGroh6lGgsSODS4xS8NcFL5w2a+o3yMfN7SIcFIoX8m3buJN26g LDHbBrnaFDCRq1xaGpjonJdzwxN9ME7OI+XpzollJhdOt6pr1gMX8+ZSbruQ5t2F Deo/vWE/Jn3CfP1mBfUb38GLYh4EhrQCVAEduObAAFrjCN7FJseHujJeoKceyRU2 fJR9q6AIZMw+BRKpS6O7wZkXsImUyII+Ls/ja/vz+CaQymbAs9lM4d05YvjCPROt OIw7rzWzPCnI3t+TWaTI95XF -----END CERTIFICATE-----Generated at Wed Jul 22 00:09:46 2026 by rpki-client