$ rpki-client -vvvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: /doZ7bxuMeQIaNULnEkFyBCEhMtBQX0+2Kbm/V/sPM0= Subject key identifier: 84:A9:19:94:94:36:D5:64:25:51:EE:65:AD:1E:AD:2B:5C:3E:4C:BB Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 5F Signing time: Thu 03 Sep 2026 08:19:07 +0000 Manifest this update: Thu 03 Sep 2026 08:19:06 +0000 Manifest next update: Thu 10 Sep 2026 08:19:06 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: F6xk0GURFBdRbYhrERyC469pkZFk2iLzZzHOXLwgMyk=) 2: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) 3: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Sep 3 08:19:06 2026 GMT Not After : Sep 10 08:19:06 2026 GMT Subject: CN=6a992d7b-c589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:ec:69:d0:e0:52:20:f3:e8:63:c5:a4:35: db:69:56:39:08:1d:2d:18:e6:90:67:32:f5:87:1c: 05:16:71:ac:db:a6:57:6e:c3:87:cb:a4:e2:03:0d: 39:90:8c:52:f6:39:d1:44:14:fa:23:85:87:24:9d: f4:ac:33:73:8f:3f:b6:f3:4f:58:17:fa:c5:8f:46: 0b:e1:68:eb:39:a0:bb:ea:82:b2:22:96:1d:ba:d1: d1:da:9e:ec:b8:61:84:02:a7:34:1a:60:09:d5:57: 12:14:5f:e6:e0:ed:e2:4a:51:6b:74:6a:3f:51:31: dd:9b:6d:31:68:37:71:e8:88:db:8b:1c:bb:bb:bd: 5d:a6:85:34:d7:9f:d9:2e:f6:9f:55:20:bf:73:df: 19:66:2f:86:77:a2:11:2b:32:3f:a9:91:3b:d3:5f: 90:37:85:bc:f3:ff:81:02:f4:b8:42:22:69:12:b7: 8c:6f:51:02:15:37:55:d4:6a:13:26:ee:e7:a4:d1: dd:8b:ed:4c:1a:67:77:0d:52:12:d1:5c:c1:fa:2a: da:04:58:58:8e:b4:5a:8d:26:17:f7:a1:7e:f4:06: a6:5c:29:5f:66:94:b2:22:c8:90:8a:c8:0d:08:64: 8e:c1:51:37:a4:08:34:4d:aa:d4:33:9b:ca:d6:b7: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A9:19:94:94:36:D5:64:25:51:EE:65:AD:1E:AD:2B:5C:3E:4C:BB X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:1f:01:d1:7d:9a:9e:84:b9:4f:55:e0:04:68:72:b5:83: 91:42:06:f8:b3:0a:39:25:19:2a:1b:46:ee:b3:d3:b1:81:d2: 7e:18:a7:c1:53:56:3f:17:8d:59:ca:09:df:21:5e:ea:12:32: 96:57:f4:86:e7:30:58:53:a3:3e:fa:b1:b8:eb:68:50:21:d0: b3:e8:35:eb:b2:bc:f3:6d:99:69:c9:96:38:bc:0a:e7:fc:05: b8:3f:a0:24:82:85:c5:09:0d:ef:2a:a2:68:3b:7f:7f:b3:a4: 60:56:75:b8:91:55:21:04:37:e9:1e:e7:e1:de:13:1a:69:87: 36:c6:f3:57:60:49:05:12:2a:15:9a:b1:0d:9a:29:9b:9f:a2: 96:70:6b:28:ba:bc:40:ce:c7:c2:f9:8f:37:78:a9:05:5a:9b: b9:b6:32:22:c2:70:7a:f6:5c:26:64:bd:c2:d6:55:63:f5:df: 99:27:9b:46:fe:a3:7f:93:8d:a5:dc:1e:b4:71:ba:9a:3f:46: 18:c5:91:ef:48:f3:44:17:1f:8e:22:4c:a7:39:a0:e5:02:46: 71:4f:d4:b6:09:e1:a0:3b:77:7e:0e:0e:ae:fd:00:e9:78:3f: a6:8d:65:09:2e:24:f4:a2:6b:75:ee:88:5f:58:ca:6d:83:59: d2:d8:c2:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA5MDMwODE5MDZaFw0yNjA5MTAwODE5MDZaMBgxFjAUBgNV BAMTDTZhOTkyZDdiLWM1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7MOxp0OBSIPPoY8WkNdtpVjkIHS0Y5pBnMvWHHAUWcazbplduw4fLpOIDDTmQ jFL2OdFEFPojhYcknfSsM3OPP7bzT1gX+sWPRgvhaOs5oLvqgrIilh260dHanuy4 YYQCpzQaYAnVVxIUX+bg7eJKUWt0aj9RMd2bbTFoN3HoiNuLHLu7vV2mhTTXn9ku 9p9VIL9z3xlmL4Z3ohErMj+pkTvTX5A3hbzz/4EC9LhCImkSt4xvUQIVN1XUahMm 7uek0d2L7UwaZ3cNUhLRXMH6KtoEWFiOtFqNJhf3oX70BqZcKV9mlLIiyJCKyA0I ZI7BUTekCDRNqtQzm8rWt7HjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhKkZlJQ2 1WQlUe5lrR6tK1w+TLswHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCsMx8B0X2anoS5T1XgBGhytYORQgb4swo5JRkqG0bus9OxgdJ+GKfBU1Y/F41Z ygnfIV7qEjKWV/SG5zBYU6M++rG462hQIdCz6DXrsrzzbZlpyZY4vArn/AW4P6Ak goXFCQ3vKqJoO39/s6RgVnW4kVUhBDfpHufh3hMaaYc2xvNXYEkFEioVmrENmimb n6KWcGsourxAzsfC+Y83eKkFWpu5tjIiwnB69lwmZL3C1lVj9d+ZJ5tG/qN/k42l 3B60cbqaP0YYxZHvSPNEFx+OIkynOaDlAkZxT9S2CeGgO3d+Dg6u/QDpeD+mjWUJ LiT0omt17ohfWMptg1nS2MJT -----END CERTIFICATE-----Generated at Sat Sep 5 02:43:52 2026 by rpki-client