$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: NgNhqysetR0ADj+m8WVJmSPfkuiTcR5eVeoUK8rBQbk= Subject key identifier: 2F:E1:A5:33:F7:B3:1B:3B:67:99:2C:35:8C:EB:E0:BB:99:1E:28:EC Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CBA Signing time: Mon 16 Jun 2025 18:06:14 +0000 Manifest this update: Mon 16 Jun 2025 18:06:13 +0000 Manifest next update: Mon 23 Jun 2025 18:06:13 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: kClAK30DFuAZrTF13X908GEFyNztnDbhsyb1DZ5Msks=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: sVwxj8pb/X0KOyVBfmu/JHCV32hFIOXFbfXDeMrIHO4=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: TvxmtDuu0g+5vHIGbKKqvtivjp3MqjbTQqIf6Vqxlu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Jun 16 18:06:13 2025 GMT Not After : Jun 23 18:06:13 2025 GMT Subject: CN=68505d16-ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:ac:d2:bb:77:88:51:31:99:c1:c8:6a:c2: 13:77:89:4d:5b:a1:c5:d1:17:a2:d7:45:41:65:0b: b8:bd:b7:cc:42:29:c8:88:97:5b:f6:d1:ca:95:ae: fd:7e:e5:03:48:74:ec:20:51:c9:95:cf:29:9b:d2: ca:fa:46:f7:d7:4d:2a:ff:c3:5f:f1:09:02:69:ff: ec:9d:1e:41:04:57:93:9d:0e:4f:9c:d5:93:32:be: a4:e7:15:71:9a:1f:99:9f:cb:45:38:fa:5c:5f:86: d2:2a:f0:96:5f:af:d3:47:49:f4:7c:ef:67:e0:b9: f5:6f:64:b9:5e:27:81:4e:19:20:9a:21:38:1d:b6: 38:66:49:43:69:29:54:8a:04:80:ac:e6:da:ed:96: a8:56:16:ef:26:a7:10:5f:3b:32:cc:88:30:92:93: 1d:f0:a2:68:63:3a:e5:3e:51:41:ee:06:37:9b:c4: 59:cc:6d:45:44:f5:2a:b7:37:db:83:e2:ca:7b:32: 26:81:be:93:47:23:ee:47:dc:23:37:4e:db:5a:b9: 9d:3e:8e:aa:b7:44:99:ee:73:90:14:b8:92:c5:e7: a1:86:e2:64:ea:88:47:b5:78:e9:d7:70:55:7f:26: 50:26:c4:11:4e:a2:12:27:ac:66:04:db:71:f1:c5: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:A5:33:F7:B3:1B:3B:67:99:2C:35:8C:EB:E0:BB:99:1E:28:EC X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e7:f6:ce:a6:e8:f0:e4:03:a8:1f:1c:c9:18:58:38:05:10: dd:f9:ea:bb:76:52:2c:d2:c7:19:a9:ae:62:b3:b7:1a:f6:2b: 02:74:d3:9b:c5:49:49:3f:12:d7:8c:f1:d3:7e:36:41:bd:ac: 73:ed:28:9f:6f:de:f3:f3:ff:7b:b8:ff:57:2e:27:ec:dc:1e: 87:40:ae:25:40:38:a8:3e:a0:0d:84:15:a1:06:17:3b:5e:a8: 1c:ee:e8:3d:80:c8:0b:c7:12:96:27:ad:3b:13:df:f5:32:a7: 7a:3c:fc:43:85:c8:3e:ed:c0:9c:fa:21:5b:11:86:b3:91:44: 43:e0:8b:61:25:6b:dc:75:20:5e:80:36:5b:33:b4:19:18:95: 48:c3:e6:47:12:d3:f8:f3:d4:6d:2c:29:36:78:62:ae:ad:63: 25:f5:9a:33:65:8f:8d:f9:3e:7d:62:4c:c0:ba:71:36:2d:03: 0b:71:4c:1f:70:5d:8e:1c:0d:f3:55:75:70:ba:fb:0d:a9:2f: dd:0b:6b:41:ea:db:2f:98:6b:cc:cd:2f:df:16:3d:b1:a0:e7: bb:f4:98:f4:12:d4:40:b5:a6:f7:d1:e6:72:ce:3d:e1:73:fd: ab:6d:89:00:eb:97:ce:4b:b2:a7:0e:a1:73:d3:53:92:34:df: de:12:8e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNjE2MTgwNjEzWhcNMjUwNjIzMTgwNjEzWjAYMRYwFAYD VQQDEw02ODUwNWQxNi1lYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GSs0rt3iFExmcHIasITd4lNW6HF0Rei10VBZQu4vbfMQinIiJdb9tHKla79 fuUDSHTsIFHJlc8pm9LK+kb3100q/8Nf8QkCaf/snR5BBFeTnQ5PnNWTMr6k5xVx mh+Zn8tFOPpcX4bSKvCWX6/TR0n0fO9n4Ln1b2S5XieBThkgmiE4HbY4ZklDaSlU igSArOba7ZaoVhbvJqcQXzsyzIgwkpMd8KJoYzrlPlFB7gY3m8RZzG1FRPUqtzfb g+LKezImgb6TRyPuR9wjN07bWrmdPo6qt0SZ7nOQFLiSxeehhuJk6ohHtXjp13BV fyZQJsQRTqISJ6xmBNtx8cWfGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/hpTP3 sxs7Z5ksNYzr4LuZHijsMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG5/bOpujw5AOoHxzJGFg4BRDd+eq7dlIs0scZqa5is7ca9isCdNOb xUlJPxLXjPHTfjZBvaxz7Sifb97z8/97uP9XLifs3B6HQK4lQDioPqANhBWhBhc7 Xqgc7ug9gMgLxxKWJ607E9/1Mqd6PPxDhcg+7cCc+iFbEYazkURD4IthJWvcdSBe gDZbM7QZGJVIw+ZHEtP489RtLCk2eGKurWMl9ZozZY+N+T59YkzAunE2LQMLcUwf cF2OHA3zVXVwuvsNqS/dC2tB6tsvmGvMzS/fFj2xoOe79Jj0EtRAtab30eZyzj3h c/2rbYkA65fOS7KnDqFz01OSNN/eEo7T -----END CERTIFICATE-----Generated at Wed Jun 18 08:21:32 2025 by rpki-client