$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: TpDBcqv5T9mdRISYNIGyldY1ezueDUQo6+CvD5J78hc= Subject key identifier: 33:00:CA:9D:BE:41:7A:EF:9E:C9:17:A3:2A:ED:80:8A:A7:EC:1B:99 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CD5 Signing time: Fri 08 Aug 2025 18:19:57 +0000 Manifest this update: Fri 08 Aug 2025 18:19:57 +0000 Manifest next update: Fri 15 Aug 2025 18:19:57 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: HaVq2OxZjH2e0UGCA0Pc27E7bSSEc9BwJk5A1LHPv94=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: sVwxj8pb/X0KOyVBfmu/JHCV32hFIOXFbfXDeMrIHO4=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: TvxmtDuu0g+5vHIGbKKqvtivjp3MqjbTQqIf6Vqxlu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Aug 8 18:19:57 2025 GMT Not After : Aug 15 18:19:57 2025 GMT Subject: CN=68963fcd-1907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:13:68:26:2d:2d:22:16:65:c9:70:0e:5f: e1:60:89:da:d4:75:72:48:84:65:e3:05:6f:2a:30: 92:3e:42:43:ad:ff:e3:9e:3d:11:fb:2a:7a:a9:65: 0c:7e:2a:69:7e:80:ce:d0:08:13:2d:ba:97:9c:72: b0:8d:1f:48:05:6f:5e:da:51:67:ad:3d:a9:4c:aa: 0f:d8:1c:af:94:15:ab:4e:b7:24:8f:19:c1:3e:4a: d1:34:ff:e3:39:2d:db:7c:1f:5a:a5:2a:13:d7:cc: d6:3d:10:7e:0c:d6:3e:d0:84:cd:61:0a:60:b6:57: ec:2a:c8:06:ac:bf:87:52:5c:11:02:80:aa:20:8f: 2b:ef:b5:d8:c0:58:b2:58:6a:e5:a7:ee:2e:eb:23: 2d:e5:0f:dc:29:7d:0e:0b:2e:65:b7:f4:3f:7a:fc: c4:e5:43:52:27:e4:6c:65:d4:b3:a2:70:d0:0a:50: 16:c1:c8:4a:c0:d8:95:d2:46:f9:a1:1f:80:16:81: bd:a3:0f:94:94:94:42:6a:38:b2:02:67:48:77:80: dc:33:1e:94:24:f1:e8:44:41:9e:96:33:09:9d:90: 75:b9:a3:1c:6b:56:22:13:ef:39:68:e9:d8:8c:55: 0f:74:e4:65:da:c4:78:db:63:ca:9b:21:ed:75:1e: 88:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:CA:9D:BE:41:7A:EF:9E:C9:17:A3:2A:ED:80:8A:A7:EC:1B:99 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:31:a4:f1:07:53:a6:3e:eb:e6:ea:bc:2e:55:31:88:d1:39: f0:8b:c9:a8:5f:7a:ef:a4:22:83:cf:80:aa:16:fd:82:25:24: c2:67:84:78:cd:c6:3f:b0:34:fc:36:4b:9c:34:f9:4a:d4:40: 6e:91:c6:f3:c5:30:b7:cf:48:2f:b8:ef:26:72:93:62:9c:7a: d9:2f:59:05:ac:ee:d8:aa:a2:c8:47:e8:98:4d:a9:95:d5:ab: 40:fe:56:ba:19:dc:b2:f6:d6:b8:00:5e:6d:b9:6a:85:ae:9f: b1:74:c0:0e:8f:93:3b:4d:6a:9f:65:f2:c9:77:5b:75:3d:71: 9a:a8:dc:27:e3:4c:6e:9a:77:d9:45:65:08:51:7e:4d:e7:73: ff:ca:5d:bf:8c:2e:dc:c0:92:b2:6b:13:af:f8:33:95:43:e2: 7a:a9:09:b1:00:7f:fe:5f:19:95:a6:57:7b:97:62:7c:2e:a8: 2b:dd:c6:c8:39:84:15:5b:52:90:da:03:5a:f1:83:0c:5d:41: 69:29:9d:ef:a4:81:32:d3:f6:29:16:76:4d:f2:47:9a:74:1e: e7:bc:7c:1d:c5:41:c4:a3:4e:e0:c0:12:65:cf:96:30:52:a2: 1a:d6:48:27:0f:5e:52:58:c3:29:0d:26:de:28:08:c0:e0:7e: 0b:54:58:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwODA4MTgxOTU3WhcNMjUwODE1MTgxOTU3WjAYMRYwFAYD VQQDEw02ODk2M2ZjZC0xOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BgTaCYtLSIWZclwDl/hYIna1HVySIRl4wVvKjCSPkJDrf/jnj0R+yp6qWUM fippfoDO0AgTLbqXnHKwjR9IBW9e2lFnrT2pTKoP2ByvlBWrTrckjxnBPkrRNP/j OS3bfB9apSoT18zWPRB+DNY+0ITNYQpgtlfsKsgGrL+HUlwRAoCqII8r77XYwFiy WGrlp+4u6yMt5Q/cKX0OCy5lt/Q/evzE5UNSJ+RsZdSzonDQClAWwchKwNiV0kb5 oR+AFoG9ow+UlJRCajiyAmdId4DcMx6UJPHoREGeljMJnZB1uaMca1YiE+85aOnY jFUPdORl2sR422PKmyHtdR6ImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMAyp2+ QXrvnskXoyrtgIqn7BuZMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuMaTxB1OmPuvm6rwuVTGI0Tnwi8moX3rvpCKDz4CqFv2CJSTCZ4R4 zcY/sDT8NkucNPlK1EBukcbzxTC3z0gvuO8mcpNinHrZL1kFrO7YqqLIR+iYTamV 1atA/la6Gdyy9ta4AF5tuWqFrp+xdMAOj5M7TWqfZfLJd1t1PXGaqNwn40xumnfZ RWUIUX5N53P/yl2/jC7cwJKyaxOv+DOVQ+J6qQmxAH/+XxmVpld7l2J8Lqgr3cbI OYQVW1KQ2gNa8YMMXUFpKZ3vpIEy0/YpFnZN8keadB7nvHwdxUHEo07gwBJlz5Yw UqIa1kgnD15SWMMpDSbeKAjA4H4LVFjx -----END CERTIFICATE-----Generated at Fri Aug 8 20:55:48 2025 by rpki-client