$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: rrnn7CqqBKIi428snDnxPSRmF/MiOs8OOEQrGnufNQY= Subject key identifier: D6:1D:70:C3:C8:9F:68:1F:16:F7:67:30:6B:90:72:F4:87:F4:4E:25 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D5C Signing time: Sat 18 Apr 2026 17:53:54 +0000 Manifest this update: Sat 18 Apr 2026 17:53:53 +0000 Manifest next update: Sat 25 Apr 2026 17:53:53 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: M7FbF2ruU5upCAH6l9dWOp1PO8fdEO1Z56X2mjlK0VM=) 2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) 3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Apr 18 17:53:53 2026 GMT Not After : Apr 25 17:53:53 2026 GMT Subject: CN=69e3c532-f573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:3d:98:b8:32:7b:04:ad:08:30:e2:6a:57: b6:67:8f:ad:c6:07:16:25:05:cd:ea:a2:5b:0e:fe: 0e:aa:c1:a1:4f:16:cc:7d:47:93:aa:c7:2f:02:86: bb:d6:d6:83:d5:93:4d:f6:3c:6b:88:e6:86:52:41: e4:ed:80:e5:16:b5:bf:13:78:2e:e3:6e:39:14:47: 9a:60:dd:40:83:44:d0:e4:e9:12:7c:d9:04:23:04: 7d:41:ee:11:f3:bf:cb:76:54:a8:f1:2f:e3:f7:64: 8f:06:94:32:ce:6f:b9:6d:d3:22:c8:3a:fc:e4:cb: ad:d6:11:50:65:98:cf:e0:b9:c5:0f:51:c9:31:f5: f9:b4:70:b0:8f:4f:20:fb:47:5d:37:b9:71:06:d9: d5:3a:90:db:e5:36:12:59:2a:27:aa:ca:06:52:0f: 35:78:c3:d3:db:26:63:1e:2e:2e:a4:e9:aa:0b:0f: 4e:bc:99:eb:74:86:81:0c:87:12:f6:81:14:ac:9f: 43:15:25:11:07:32:67:dc:e9:e9:7c:d2:72:6b:f4: 86:2d:12:7e:b5:d1:fc:ad:45:d4:e3:c2:31:bb:45: 43:6b:06:c7:7e:7d:75:8c:1d:5a:71:28:3f:97:2c: 1d:b4:69:89:62:de:0c:34:a6:a8:b9:3b:df:95:42: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1D:70:C3:C8:9F:68:1F:16:F7:67:30:6B:90:72:F4:87:F4:4E:25 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:24:45:c2:5e:02:c1:87:0f:1a:f7:36:6f:f9:4e:8b:82:08: 93:00:92:35:34:23:83:01:4f:f8:0e:00:8c:06:86:21:4c:a3: 42:15:da:5c:d0:29:6c:b9:08:5b:19:bf:6e:cf:af:89:6f:ba: 97:04:89:0a:41:f7:d7:5f:02:d3:02:0f:0f:b5:42:12:ed:12: f1:c8:8c:29:e8:43:81:eb:82:b5:67:38:d9:59:96:c2:9f:18: 5a:75:5c:65:10:0b:ea:58:6a:43:d2:5c:d8:f0:4a:a9:44:3d: f5:68:3b:47:23:f3:f4:fd:e5:4e:fe:1b:34:78:af:19:8a:8d: 5c:73:8c:02:c7:6d:d7:7f:e9:92:57:64:a7:59:d9:e3:11:d9: 17:16:08:c6:b9:9d:83:ca:d0:b7:f7:be:9e:75:c0:b9:0c:7d: 59:19:21:58:ca:d3:ca:1d:68:c3:88:a8:31:51:66:15:9c:f8: 84:b2:bf:39:71:40:d0:45:b4:28:1d:68:c4:7a:81:b7:d1:5d: 43:2f:c1:84:8d:26:13:bc:a9:3b:99:de:d5:2a:26:05:95:4a: 88:b7:b4:c2:1a:b1:51:85:e5:a7:aa:05:17:44:0e:e7:69:a7: 50:96:6a:96:39:98:63:0b:39:82:56:55:29:f6:8d:fb:ca:fd: 6b:86:13:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwNDE4MTc1MzUzWhcNMjYwNDI1MTc1MzUzWjAYMRYwFAYD VQQDEw02OWUzYzUzMi1mNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8A9mLgyewStCDDiale2Z4+txgcWJQXN6qJbDv4OqsGhTxbMfUeTqscvAoa7 1taD1ZNN9jxriOaGUkHk7YDlFrW/E3gu4245FEeaYN1Ag0TQ5OkSfNkEIwR9Qe4R 87/LdlSo8S/j92SPBpQyzm+5bdMiyDr85Mut1hFQZZjP4LnFD1HJMfX5tHCwj08g +0ddN7lxBtnVOpDb5TYSWSonqsoGUg81eMPT2yZjHi4upOmqCw9OvJnrdIaBDIcS 9oEUrJ9DFSURBzJn3OnpfNJya/SGLRJ+tdH8rUXU48Ixu0VDawbHfn11jB1acSg/ lywdtGmJYt4MNKaouTvflULpgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYdcMPI n2gfFvdnMGuQcvSH9E4lMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmSRFwl4CwYcPGvc2b/lOi4IIkwCSNTQjgwFP+A4AjAaGIUyjQhXaXNApbLkI Wxm/bs+viW+6lwSJCkH3118C0wIPD7VCEu0S8ciMKehDgeuCtWc42VmWwp8YWnVc ZRAL6lhqQ9Jc2PBKqUQ99Wg7RyPz9P3lTv4bNHivGYqNXHOMAsdt13/pkldkp1nZ 4xHZFxYIxrmdg8rQt/e+nnXAuQx9WRkhWMrTyh1ow4ioMVFmFZz4hLK/OXFA0EW0 KB1oxHqBt9FdQy/BhI0mE7ypO5ne1SomBZVKiLe0whqxUYXlp6oFF0QO52mnUJZq ljmYYws5glZVKfaN+8r9a4YT5w== -----END CERTIFICATE-----Generated at Sun Apr 19 08:59:38 2026 by rpki-client