$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json) Hash identifier: 212bV1Ruc3hjU8yBRZE6IPlw+CTME2PnXYiGIvvax2I= Subject key identifier: 3A:6C:47:FA:0C:EB:78:3D:5D:D0:CA:40:79:D8:3E:A4:FC:87:4B:2D Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 08:38:26 +0000 Manifest this update: Fri 17 Apr 2026 08:38:26 +0000 Manifest next update: Fri 24 Apr 2026 08:38:26 +0000 Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: xsgrOjxmWnuWuhI/nIB0yYTTv8AoIg3yo2VKsKJyD7E=) 2: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=) 3: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E Validity Not Before: Apr 17 08:38:26 2026 GMT Not After : Apr 24 08:38:26 2026 GMT Subject: CN=69e1f182-a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:d7:c0:9c:f1:31:a4:be:7c:4e:bb:ff:6a: be:3a:be:91:9a:1e:36:bf:fd:3b:c5:7e:b8:a7:14: 41:b2:0c:03:7b:97:b7:3a:05:b4:12:43:f3:50:c3: 0a:7d:15:74:f5:ef:c6:48:f6:7f:9d:9e:82:65:98: 5c:07:ad:a4:5f:7d:4e:d4:87:b2:1f:5c:21:5f:9e: 33:e1:c7:cf:1b:ab:f6:e8:cd:13:f1:a6:b6:a1:02: 6c:70:49:8c:f7:64:23:15:c0:fc:c7:3c:69:01:3f: 25:0c:77:1f:6d:79:9d:1b:71:23:ca:63:96:4b:b9: a9:eb:9c:5c:79:55:97:42:ae:81:6a:10:b9:c4:5a: 2d:8f:22:f8:82:c0:60:0c:13:85:c0:9a:d2:65:94: 28:70:e4:41:b4:64:e5:1c:8f:ed:45:8e:e8:e8:c8: 63:ce:ce:39:df:64:b3:84:0b:75:43:d5:8a:33:0d: 01:40:5c:60:91:26:a2:60:88:0e:26:c3:48:76:9f: f5:88:44:99:e6:18:a7:a7:c0:d5:82:4d:1b:5d:6f: 6c:2f:51:19:ea:3a:20:20:7c:79:e1:03:5b:59:e1: d8:cf:39:12:f1:57:15:29:ee:2d:7e:51:fa:85:3c: 4e:f6:ac:4d:20:6a:16:48:1b:57:75:5c:a1:b6:1e: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:47:FA:0C:EB:78:3D:5D:D0:CA:40:79:D8:3E:A4:FC:87:4B:2D X509v3 Authority Key Identifier: keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:8b:a4:52:8e:5a:18:c3:49:32:ab:4a:26:4c:16:84:22: 5f:57:24:b6:a3:1b:19:56:9c:64:d5:7c:65:a6:c3:71:37:cf: 7c:71:85:f2:ee:50:f0:47:16:eb:2f:d9:d0:db:dc:41:7c:8f: cb:5b:b8:58:da:4e:bb:2a:fa:d6:d7:a8:db:e8:92:30:67:b1: 0d:0f:92:37:e5:73:75:f3:b2:23:be:80:19:cd:d2:77:87:92: 6a:bd:a7:10:51:6b:09:ad:fa:55:63:05:e0:be:fb:64:35:82: 67:76:0d:52:5c:79:b0:40:1e:a1:62:8d:94:6e:05:d7:bd:09: 1f:4b:9d:7f:cc:73:3a:7a:64:f8:6e:0f:b0:68:99:f9:0f:ef: 22:e0:69:5a:43:7d:6b:04:e8:88:3f:e7:57:bb:a8:3b:e8:f0: c1:a5:df:28:d5:e0:78:6d:31:74:95:aa:b9:1a:ee:cf:ca:2b: 1f:47:f7:0d:02:e2:17:ee:18:07:9a:ad:1c:25:ce:8a:ac:fb: e6:3d:16:e2:9c:61:d6:60:15:05:fb:59:a3:07:12:1a:e6:05: e0:8b:1c:42:95:a2:5f:59:1c:a1:2d:57:70:59:d5:8f:7d:55: d3:d0:bc:7b:ee:b5:43:0b:62:f7:0b:43:91:58:3f:cb:9d:d7: bf:f0:7a:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoNDBFOTMwMkI3NUM1RUExOTIzRUE3RjY5NThFMkFGNDEw ODY1QUY4RTAeFw0yNjA0MTcwODM4MjZaFw0yNjA0MjQwODM4MjZaMBgxFjAUBgNV BAMTDTY5ZTFmMTgyLWEwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWUtfAnPExpL58Trv/ar46vpGaHja//TvFfrinFEGyDAN7l7c6BbQSQ/NQwwp9 FXT178ZI9n+dnoJlmFwHraRffU7Uh7IfXCFfnjPhx88bq/bozRPxprahAmxwSYz3 ZCMVwPzHPGkBPyUMdx9teZ0bcSPKY5ZLuanrnFx5VZdCroFqELnEWi2PIviCwGAM E4XAmtJllChw5EG0ZOUcj+1FjujoyGPOzjnfZLOEC3VD1YozDQFAXGCRJqJgiA4m w0h2n/WIRJnmGKenwNWCTRtdb2wvURnqOiAgfHnhA1tZ4djPORLxVxUp7i1+UfqF PE72rE0gahZIG1d1XKG2HipVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOmxH+gzr eD1d0MpAedg+pPyHSy0wHwYDVR0jBBgwFoAUQOkwK3XF6hkj6n9pWOKvQQhlr44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGLzk3NUYxQ0I2MTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhrajZuOXBXT0t2UVFobHI0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9rd0szWEY2aGtqNm45cFdPS3ZRUWhscjQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGLzk3NUYxQ0I2MTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3L1FPa3dLM1hGNmhr ajZuOXBXT0t2UVFobHI0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPNIukUo5aGMNJMqtKJkwWhCJfVyS2oxsZVpxk1XxlpsNxN898cYXy7lDwRxbr L9nQ29xBfI/LW7hY2k67KvrW16jb6JIwZ7END5I35XN187IjvoAZzdJ3h5JqvacQ UWsJrfpVYwXgvvtkNYJndg1SXHmwQB6hYo2UbgXXvQkfS51/zHM6emT4bg+waJn5 D+8i4GlaQ31rBOiIP+dXu6g76PDBpd8o1eB4bTF0laq5Gu7PyisfR/cNAuIX7hgH mq0cJc6KrPvmPRbinGHWYBUF+1mjBxIa5gXgixxClaJfWRyhLVdwWdWPfVXT0Lx7 7rVDC2L3C0ORWD/Lnde/8Hqb -----END CERTIFICATE-----Generated at Fri Apr 17 22:12:04 2026 by rpki-client