$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: i4jDdRRO1b3mCDBxiikNN+IWjdOGjvfy0UdWbbYFURU= Subject key identifier: 75:33:B3:91:E3:97:E9:71:04:A4:05:E8:2D:28:6C:77:6A:E4:95:F8 Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 26 Signing time: Wed 13 May 2026 08:55:13 +0000 Manifest this update: Wed 13 May 2026 08:55:12 +0000 Manifest next update: Wed 20 May 2026 08:55:12 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: nrrcKUBZQzROOcgxtIqm6vsKG8V1PHvePAGL2wrXLSs=) 2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) 3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: May 13 08:55:12 2026 GMT Not After : May 20 08:55:12 2026 GMT Subject: CN=6a043c71-99ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:07:5f:69:cf:44:96:6a:21:04:1e:3a:aa: 4e:e0:e4:a2:2f:5e:f0:3f:52:d5:2f:35:90:1f:16: 19:76:57:3f:91:56:bb:6b:97:2e:a1:9f:84:8c:bc: 0f:4c:51:05:06:1a:24:13:f8:aa:68:28:c9:8d:55: 15:90:14:f4:d2:d6:b0:08:ce:f3:05:d3:6e:ad:17: 2f:52:3e:a3:f8:2e:f8:dd:d4:16:f1:12:40:37:3a: a5:50:e8:8d:5c:52:14:a0:e9:e8:58:a6:a0:2b:dc: c7:e7:ba:e4:ad:5c:72:c8:eb:fb:2d:91:d1:8f:ad: 5c:da:63:36:4d:01:2b:aa:14:8e:b3:02:cd:89:c3: 05:0b:aa:bc:76:ec:f5:be:7d:78:33:55:cb:fd:f6: f7:eb:45:0a:1b:7a:05:1a:c3:24:36:48:e0:a3:ef: 67:42:7f:8a:46:4d:06:bc:fe:2d:f3:8b:33:1b:dc: 8e:dd:65:a1:58:21:47:a7:04:ad:3a:f7:b9:35:1a: 20:c0:4a:3c:57:a2:c6:e3:cf:64:8a:c7:47:b2:b7: 93:de:02:29:98:01:77:96:c6:bf:93:aa:0b:2b:b8: 1a:b9:bf:c4:07:b3:67:c5:2b:53:d6:1d:12:10:60: c0:1a:0e:4e:66:3b:7e:ad:01:3f:82:33:cd:f5:f5: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:33:B3:91:E3:97:E9:71:04:A4:05:E8:2D:28:6C:77:6A:E4:95:F8 X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:b5:f1:20:09:d3:ed:a3:fb:77:a6:dd:96:90:ed:2e:b4:c2: cb:89:9e:10:73:af:cd:a5:6c:17:6e:e0:1b:d6:97:18:3a:72: 7e:85:3d:f7:22:70:12:d7:f3:06:06:29:5f:e3:a4:ec:ba:5b: 18:04:69:59:6b:e9:a6:8a:b3:19:6f:48:2a:09:8d:50:77:dd: 18:0e:35:2f:15:2c:14:1f:cc:14:c2:de:cd:d2:2a:37:8d:b0: 1e:31:50:28:69:2e:05:f1:75:95:94:58:b4:46:62:0f:a7:ec: 10:c2:70:77:1b:ec:9c:1f:74:3e:66:e8:20:4a:b0:61:b2:8c: 41:84:6e:01:49:e7:11:81:4c:29:b5:90:ae:38:2d:c4:2a:10: 19:eb:25:15:35:2d:cd:3e:51:a7:81:63:aa:44:db:6a:92:ab: 24:65:46:ed:55:64:a2:43:ff:91:eb:e2:45:f5:84:80:47:8e: d0:9d:11:17:1b:f7:f4:60:e4:1f:1f:ec:5f:35:c4:cb:a1:01: 2f:01:a7:d3:2f:0a:c7:37:91:cd:4f:9f:10:60:b5:b4:dd:15: 3a:7e:51:ee:ca:61:e1:8b:30:89:23:66:f3:42:31:01:09:81: a7:ec:63:96:f9:f7:b9:bf:41:ec:c1:a7:d4:78:9c:4d:bd:0b: 60:a0:f9:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA1MTMwODU1MTJaFw0yNjA1MjAwODU1MTJaMBgxFjAUBgNV BAMTDTZhMDQzYzcxLTk5ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDISgdfac9ElmohBB46qk7g5KIvXvA/UtUvNZAfFhl2Vz+RVrtrly6hn4SMvA9M UQUGGiQT+KpoKMmNVRWQFPTS1rAIzvMF026tFy9SPqP4Lvjd1BbxEkA3OqVQ6I1c UhSg6ehYpqAr3MfnuuStXHLI6/stkdGPrVzaYzZNASuqFI6zAs2JwwULqrx27PW+ fXgzVcv99vfrRQobegUawyQ2SOCj72dCf4pGTQa8/i3zizMb3I7dZaFYIUenBK06 97k1GiDASjxXosbjz2SKx0eyt5PeAimYAXeWxr+TqgsruBq5v8QHs2fFK1PWHRIQ YMAaDk5mO36tAT+CM8319XaZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdTOzkeOX 6XEEpAXoLShsd2rklfgwHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC/tfEgCdPto/t3pt2WkO0utMLLiZ4Qc6/NpWwXbuAb1pcYOnJ+hT33InAS1/MG Bilf46TsulsYBGlZa+mmirMZb0gqCY1Qd90YDjUvFSwUH8wUwt7N0io3jbAeMVAo aS4F8XWVlFi0RmIPp+wQwnB3G+ycH3Q+ZuggSrBhsoxBhG4BSecRgUwptZCuOC3E KhAZ6yUVNS3NPlGngWOqRNtqkqskZUbtVWSiQ/+R6+JF9YSAR47QnREXG/f0YOQf H+xfNcTLoQEvAafTLwrHN5HNT58QYLW03RU6flHuymHhizCJI2bzQjEBCYGn7GOW +fe5v0HswafUeJxNvQtgoPnS -----END CERTIFICATE-----Generated at Wed May 13 14:05:07 2026 by rpki-client