$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: q3ctVyWYM192SpQTe6dB6RbRIpwWtdC6PVg7wwY+Ao4= Subject key identifier: 1F:50:A0:39:C9:BE:A5:B8:28:58:48:58:D9:0D:53:F8:47:50:C0:7A Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D42 Signing time: Sun 01 Mar 2026 22:31:54 +0000 Manifest this update: Sun 01 Mar 2026 22:31:53 +0000 Manifest next update: Sun 08 Mar 2026 22:31:53 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: q175NWRXL7i26uxXDN4UZ2DvNjxl1By4ckMNYjf6TmA=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Mar 1 22:31:53 2026 GMT Not After : Mar 8 22:31:53 2026 GMT Subject: CN=69a4be59-a1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:70:15:42:72:cb:da:ac:f8:94:2b:1c:e9: 11:74:b3:bd:be:58:fa:5b:91:99:d1:6b:c2:68:db: 39:32:c7:43:3d:95:44:da:a8:65:46:ba:bd:71:9c: 2b:b7:20:1f:ae:51:06:e5:19:15:0d:c9:b8:1b:45: ef:21:77:81:48:f7:dc:ff:fc:11:d4:bf:4e:b9:17: 39:f8:dd:30:20:e1:0e:cb:9e:e7:c7:6c:67:80:03: 4c:5b:ee:eb:2f:00:b7:7c:76:a9:86:d6:bd:2e:0f: 40:89:bb:83:16:a1:11:f3:47:4f:9b:19:f3:4b:ae: a8:81:00:3c:e6:b5:94:8f:82:a6:75:ca:65:08:4d: b4:e0:d5:0e:2e:e2:2b:1e:0b:a2:50:4d:79:5a:88: f8:a5:d4:8b:24:00:c7:07:1e:bc:d1:a1:b9:af:25: 8a:9d:e6:7e:94:de:c1:01:10:f2:a7:56:1e:08:41: 17:c9:f1:6e:8f:d2:e7:08:26:b4:79:f9:df:3a:de: 64:4e:3f:2c:3f:5c:bf:ff:97:d6:07:27:93:b9:2d: c9:c1:7d:81:40:00:8d:66:bc:c8:b8:52:24:30:ad: 35:88:f4:0e:17:28:23:32:54:a9:8a:68:71:4f:5c: f5:22:83:c5:89:0e:88:5a:4e:97:c1:26:13:78:0b: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:50:A0:39:C9:BE:A5:B8:28:58:48:58:D9:0D:53:F8:47:50:C0:7A X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:39:9c:b3:bb:6c:20:43:d0:80:ff:62:3c:35:1a:0c:c0:0c: b6:ab:fb:91:48:5a:0f:4f:3f:c8:c6:69:1a:2f:b3:14:60:5b: cb:d7:aa:d1:5e:13:1b:76:04:e8:69:7a:47:6e:71:a9:59:d7: 46:4b:bf:a7:0c:f7:65:d1:18:02:77:4a:84:f0:d9:00:07:e5: 89:28:ac:f8:26:60:ba:17:b0:44:7d:d4:08:98:cb:ee:f6:69: ad:23:62:2e:49:3e:e0:15:20:5e:08:7e:c4:88:bb:b6:5e:5a: 17:28:fc:3e:e3:5c:13:88:c6:89:fe:0c:1d:57:6b:b7:38:75: c7:ab:c2:57:0a:a9:7a:e6:21:bd:6d:e5:fb:25:f6:dd:42:62: e7:f5:60:3e:a9:2f:58:71:9a:58:56:7c:6b:09:6a:a1:ba:ff: e4:77:20:76:c2:12:34:ea:19:39:2e:bf:de:3d:d7:ec:e8:c0: 59:5f:b9:1b:1f:f1:c2:c3:b4:bb:52:03:bd:d6:db:72:a4:fb: 9c:8b:b5:74:7d:dc:34:ad:aa:38:c0:ae:9c:cf:4b:49:b0:bc: 46:3b:8f:92:43:d9:04:63:1e:2d:52:7b:89:3b:61:3a:7e:66: c0:03:d3:de:64:a6:41:50:4f:b2:e1:aa:e8:50:35:6f:ef:db: 75:d7:6a:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwMzAxMjIzMTUzWhcNMjYwMzA4MjIzMTUzWjAYMRYwFAYD VQQDEw02OWE0YmU1OS1hMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsw5wFUJyy9qs+JQrHOkRdLO9vlj6W5GZ0WvCaNs5MsdDPZVE2qhlRrq9cZwr tyAfrlEG5RkVDcm4G0XvIXeBSPfc//wR1L9OuRc5+N0wIOEOy57nx2xngANMW+7r LwC3fHaphta9Lg9AibuDFqER80dPmxnzS66ogQA85rWUj4KmdcplCE204NUOLuIr HguiUE15Woj4pdSLJADHBx680aG5ryWKneZ+lN7BARDyp1YeCEEXyfFuj9LnCCa0 efnfOt5kTj8sP1y//5fWByeTuS3JwX2BQACNZrzIuFIkMK01iPQOFygjMlSpimhx T1z1IoPFiQ6IWk6XwSYTeAuHDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9QoDnJ vqW4KFhIWNkNU/hHUMB6MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkjmcs7tsIEPQgP9iPDUaDMAMtqv7kUhaD08/yMZpGi+zFGBby9eq0V4TG3YE 6Gl6R25xqVnXRku/pwz3ZdEYAndKhPDZAAfliSis+CZguhewRH3UCJjL7vZprSNi Lkk+4BUgXgh+xIi7tl5aFyj8PuNcE4jGif4MHVdrtzh1x6vCVwqpeuYhvW3l+yX2 3UJi5/VgPqkvWHGaWFZ8awlqobr/5HcgdsISNOoZOS6/3j3X7OjAWV+5Gx/xwsO0 u1IDvdbbcqT7nIu1dH3cNK2qOMCunM9LSbC8RjuPkkPZBGMeLVJ7iTthOn5mwAPT 3mSmQVBPsuGq6FA1b+/bdddqkQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:51:22 2026 by rpki-client