$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: FM7CLWjjePeajfTHJyo50uCqCRUkAEqS/DL7eCu5ZW0= Subject key identifier: 5B:DF:FE:B3:2A:40:28:FB:9F:56:08:A5:A2:7B:81:1D:51:EA:23:FF Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 0D Signing time: Wed 25 Mar 2026 08:16:13 +0000 Manifest this update: Wed 25 Mar 2026 08:16:12 +0000 Manifest next update: Wed 01 Apr 2026 08:16:12 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: tSgNez+A09YIRmkTRko0fDcePj80zVwr7LnIWAlSjMM=) 2: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) 3: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Mar 25 08:16:12 2026 GMT Not After : Apr 1 08:16:12 2026 GMT Subject: CN=69c399cc-c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:ea:a8:1e:aa:8a:7a:43:3d:05:35:c7:20: 2a:ee:c2:36:1d:1b:d7:9f:78:c2:dc:8d:02:ed:98: 73:95:ec:49:e2:fb:90:e9:92:44:21:96:48:4f:ff: 1f:61:1e:59:55:a3:f3:7d:42:bf:cd:2c:8f:b0:05: cc:d8:58:36:a8:9a:68:06:ef:7c:50:56:2f:9e:14: e6:fa:dc:61:95:d1:a2:2e:ac:d3:f3:0d:7c:fa:ed: 9b:db:0a:51:1e:12:cb:5a:40:a8:ff:43:ce:4c:33: ba:b6:5c:b4:f9:d0:ca:8c:21:22:ae:c9:dd:b9:1e: 0f:89:6d:b9:b8:d2:57:6e:df:6d:ab:4f:8c:0e:07: 77:87:10:fd:25:95:8d:b0:8c:b6:f0:8b:29:73:ee: 89:90:de:00:2c:40:87:4e:3e:95:c5:99:39:d5:27: d1:99:ec:72:f0:c7:45:95:ce:8a:a3:02:53:07:db: ad:a6:ff:c3:12:81:22:43:fb:28:5d:19:37:35:c1: b9:8f:13:29:01:0c:8a:99:c2:2d:06:4c:47:a1:72: 64:de:a3:c0:1b:9e:d2:75:44:17:dd:20:21:b9:24: 3d:03:20:65:1a:e7:22:33:5d:74:b4:68:88:6f:5d: b2:07:43:33:29:cc:c3:6d:b8:0a:71:bb:c5:47:cd: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:FE:B3:2A:40:28:FB:9F:56:08:A5:A2:7B:81:1D:51:EA:23:FF X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:92:40:66:55:cb:e7:86:c3:cb:2f:a5:c2:60:bf:d0:4f:27: 9b:aa:9d:6e:3a:51:7b:a9:e4:32:06:08:cd:30:5b:0f:59:0c: 68:3f:5d:45:56:c5:53:bc:a6:e5:98:e8:70:4c:bb:fb:b8:61: 82:21:0c:b8:0c:b0:cb:6f:2e:85:5c:7f:eb:2d:1f:9d:5d:b5: d5:a0:c3:a0:bf:b2:73:fa:a6:d4:61:11:98:a4:74:56:ee:d4: 5a:d3:be:72:77:de:3e:f7:0c:0c:25:56:73:c9:02:7b:67:e9: 92:69:84:9a:f4:bf:5c:26:f2:84:b5:ed:b3:13:50:ca:d0:4e: c8:c3:ed:63:0e:3b:54:75:10:4a:31:ac:23:b1:ed:9d:55:a5: 97:3e:38:db:21:c0:3a:e0:81:ca:02:4e:fa:ef:dc:be:0f:ee: 68:0d:1d:99:57:7e:b8:18:5f:59:ab:51:1c:c4:52:66:11:fd: da:df:64:fe:64:3e:4b:5c:d8:fb:07:66:fb:81:95:9f:28:9d: a4:b0:0e:7e:28:60:2b:76:a0:22:33:25:8f:9d:a6:43:4e:35: 46:da:32:d7:16:fa:8e:28:50:5b:ff:05:a0:7e:90:67:a6:15: a1:67:d2:56:62:58:0e:66:9a:d8:eb:25:24:09:cb:5b:20:2e: a3:3d:63:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjAzMjUwODE2MTJaFw0yNjA0MDEwODE2MTJaMBgxFjAUBgNV BAMTDTY5YzM5OWNjLWMyMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSB+qoHqqKekM9BTXHICruwjYdG9efeMLcjQLtmHOV7Eni+5DpkkQhlkhP/x9h HllVo/N9Qr/NLI+wBczYWDaommgG73xQVi+eFOb63GGV0aIurNPzDXz67ZvbClEe EstaQKj/Q85MM7q2XLT50MqMISKuyd25Hg+Jbbm40ldu322rT4wOB3eHEP0llY2w jLbwiylz7omQ3gAsQIdOPpXFmTnVJ9GZ7HLwx0WVzoqjAlMH262m/8MSgSJD+yhd GTc1wbmPEykBDIqZwi0GTEehcmTeo8AbntJ1RBfdICG5JD0DIGUa5yIzXXS0aIhv XbIHQzMpzMNtuApxu8VHzXwZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW9/+sypA KPufVgilonuBHVHqI/8wHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFkkBmVcvnhsPLL6XCYL/QTyebqp1uOlF7qeQyBgjNMFsPWQxoP11FVsVTvKbl mOhwTLv7uGGCIQy4DLDLby6FXH/rLR+dXbXVoMOgv7Jz+qbUYRGYpHRW7tRa075y d94+9wwMJVZzyQJ7Z+mSaYSa9L9cJvKEte2zE1DK0E7Iw+1jDjtUdRBKMawjse2d VaWXPjjbIcA64IHKAk7679y+D+5oDR2ZV364GF9Zq1EcxFJmEf3a32T+ZD5LXNj7 B2b7gZWfKJ2ksA5+KGArdqAiMyWPnaZDTjVG2jLXFvqOKFBb/wWgfpBnphWhZ9JW YlgOZprY6yUkCctbIC6jPWM0 -----END CERTIFICATE-----Generated at Fri Mar 27 00:15:42 2026 by rpki-client