
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier: gYLSDP48u1EibW1cIInuU7TesYxiOCligDJbPyb5mc0=
Subject key identifier: F3:A9:37:A1:87:82:8B:F3:EB:E0:FA:7A:9D:48:5E:2D:A0:83:2C:DD
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial: 0DA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number: 0D8E
Signing time: Sun 26 Jul 2026 18:12:26 +0000
Manifest this update: Sun 26 Jul 2026 18:12:25 +0000
Manifest next update: Sun 02 Aug 2026 18:12:25 +0000
Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: uH4K5usKZn6NDxVQ60FuwF5GY+kIckMgwG/izxsRXBU=)
2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=)
3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Validity
Not Before: Jul 26 18:12:25 2026 GMT
Not After : Aug 2 18:12:25 2026 GMT
Subject: CN=6a664e0a-44c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:1f:c2:7c:d1:e5:34:18:e2:6e:1e:cc:7a:
49:1f:95:76:35:f2:97:8f:02:52:a9:49:23:48:43:
0a:60:c6:ec:fc:70:83:36:81:74:49:5f:49:10:8f:
27:d1:d4:72:e9:76:5c:c6:1c:77:8d:13:4f:e0:e4:
43:6d:68:cd:da:4a:b2:f5:a4:b3:c3:99:6b:6c:a2:
2b:6c:2b:0e:63:b4:b1:94:bd:5b:aa:8a:36:e7:2f:
17:a0:16:7c:ac:5c:0d:dd:ac:22:cc:9b:56:88:d2:
a3:d7:7a:cd:2b:fb:11:fa:0e:04:2d:ed:c7:c5:71:
93:ce:6a:a0:bd:4a:9c:da:3d:76:65:fd:f2:2c:68:
0c:f5:21:20:9c:dd:39:97:39:64:1f:f8:5e:03:01:
12:71:15:1f:03:b9:96:97:a4:af:20:5f:59:6d:01:
c3:ec:e8:32:10:25:ed:f9:ec:be:b0:20:4f:e4:35:
70:bf:c6:86:0c:c1:db:34:25:3e:1a:27:df:de:ac:
d7:38:c9:22:30:49:c9:de:7f:df:aa:42:68:75:8b:
4d:83:4a:77:8e:2e:9b:18:0d:ed:18:d8:0d:b5:4b:
28:6e:ef:fe:56:88:d4:11:ab:4b:83:59:47:11:a4:
bf:f6:79:3b:4c:68:4b:4d:4a:6f:7b:ad:91:df:64:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:37:A1:87:82:8B:F3:EB:E0:FA:7A:9D:48:5E:2D:A0:83:2C:DD
X509v3 Authority Key Identifier:
keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5c:97:74:8e:6f:f7:3d:b1:24:07:5d:68:b0:1e:72:b2:0b:
71:42:1e:ae:4b:12:3f:e1:7b:9d:f4:39:38:ea:fe:d4:c9:fe:
a3:f2:04:12:14:66:7d:d9:a2:f9:80:61:fb:e5:8b:4c:c1:79:
2d:a5:7a:5c:b0:36:a8:44:9e:24:8b:9c:fa:78:31:89:2d:41:
a3:2b:8e:b2:13:11:08:19:78:72:38:19:36:a3:05:eb:cf:11:
e2:52:6f:99:18:10:41:89:ae:f8:b7:49:89:57:76:ec:af:75:
ae:dd:07:3d:1f:d9:bd:f2:1f:98:34:f4:e2:71:01:84:9c:9d:
b9:77:8b:e0:0e:71:0f:27:2d:28:aa:66:6f:b7:db:85:ce:56:
c7:83:34:21:dd:12:91:8c:bc:43:64:a3:68:dc:bf:15:18:05:
36:ae:48:56:67:33:85:4f:c4:d5:3c:e2:7f:63:32:57:32:84:
52:e3:91:c8:aa:d2:61:e5:e4:44:4b:73:2c:e5:56:a9:a0:60:
0f:d8:8c:10:be:f5:cd:63:e3:e8:76:8f:67:ee:fb:31:22:b3:
c0:57:db:b5:fd:23:bf:2d:80:a8:52:31:a8:e2:21:2a:39:90:
16:9b:0e:e2:34:7b:6b:8c:13:d4:9e:49:36:5e:d4:ed:3a:71:
4e:6f:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:32 2026 by rpki-client