$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: ojFd73/Vgh5Zy0GljbpuoXxbwefmiQ73Z+NV+g07Lqs= Subject key identifier: E2:09:93:F8:F5:18:CB:9F:B0:4C:35:32:8D:F9:AC:80:FC:B5:84:9A Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D04 Signing time: Tue 04 Nov 2025 18:10:08 +0000 Manifest this update: Tue 04 Nov 2025 18:10:07 +0000 Manifest next update: Tue 11 Nov 2025 18:10:07 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: +eZLeM5xRAt212VXb7kYYVtAAFBmtiHB2Zo3xjvoG8k=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: WfQhPmIZUh24j8d27BZmWadRYjUYQWfuUpvwsdxRVBY=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Nov 4 18:10:07 2025 GMT Not After : Nov 11 18:10:07 2025 GMT Subject: CN=690a4180-9112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:a0:5a:53:3a:f2:e0:72:35:a6:64:27:0e: 65:4b:a0:e7:48:bc:e0:af:fb:68:aa:36:41:80:99: 0d:9f:4f:e2:2c:a8:cb:a0:7b:e5:50:3a:69:53:9f: f3:04:db:7b:f1:a8:21:a4:35:9d:a7:c5:e2:6d:aa: de:5d:81:a1:53:4b:44:cd:80:e9:92:07:69:49:2b: 38:73:a1:26:83:63:37:f6:7c:42:4d:94:94:22:cd: c0:d6:07:0b:9a:e6:3c:87:66:41:ef:67:01:18:3f: c8:26:9e:4d:76:5c:92:0d:81:33:d2:58:0f:e8:1b: 8f:73:6b:84:28:ea:97:4a:07:54:e8:5f:48:fd:44: f7:64:ee:27:80:8d:d7:7c:b0:a7:7e:e8:cf:b3:b3: 7f:76:d4:28:8f:78:45:53:b3:9c:3d:19:41:7f:ec: 7a:d7:7e:b6:57:2f:10:81:af:21:d8:33:60:50:2a: 0f:c6:b7:e9:94:24:9d:50:fe:04:ef:dc:ed:e4:39: 7d:76:8a:77:94:5c:f0:0c:26:2d:8b:d0:b3:ab:44: 32:4c:c3:e9:fd:cf:8e:62:17:05:83:c8:16:d2:7c: 67:af:1e:41:57:02:96:ea:cd:d9:f4:41:67:4d:3d: 08:96:3c:e5:9a:61:99:52:95:44:d4:af:7d:de:8d: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:09:93:F8:F5:18:CB:9F:B0:4C:35:32:8D:F9:AC:80:FC:B5:84:9A X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:b9:e4:ba:d0:65:13:1b:2e:49:4e:d0:99:4d:d7:15:e9: a2:78:bd:cb:7b:5e:00:7b:76:a6:a5:dd:40:86:23:9f:ad:6c: a9:ab:f1:74:21:f5:21:14:a4:f1:51:d4:23:0c:d8:e3:48:77: 35:2b:89:bd:b6:bc:7f:0d:7f:ef:12:89:b3:f5:04:21:69:3f: e3:71:ad:75:3c:a6:9a:0e:dc:06:44:3d:a3:7e:7d:38:c4:90: 2c:08:fb:e9:f7:63:3e:67:d3:1b:59:cb:09:23:34:3a:6c:18: 9a:1f:a1:98:c2:6b:3e:ed:1c:75:67:8e:e9:cb:ec:b5:7d:6e: 06:fe:83:f6:d5:9c:d3:30:3d:49:e5:fb:79:a9:f0:66:8a:59: 2b:b4:37:95:70:8d:c0:f4:15:b5:d4:d2:9a:ec:46:66:ed:c6: d3:4b:9b:41:26:7b:18:97:37:e5:ae:bd:1b:95:ef:dc:36:7e: 36:f4:b7:05:a0:79:3e:42:a9:1b:67:e3:b8:40:d0:2b:3b:bb: 98:cb:79:76:a7:57:3d:11:32:d1:53:65:53:33:43:f5:e2:69: 1f:99:fd:c2:4f:b2:16:43:a9:65:72:b0:c1:0c:bb:f4:71:d7: c7:34:4e:27:6b:57:0a:81:2f:ea:fb:9c:e2:45:de:68:56:6a: 9f:a1:0f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUxMTA0MTgxMDA3WhcNMjUxMTExMTgxMDA3WjAYMRYwFAYD VQQDEw02OTBhNDE4MC05MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYCgWlM68uByNaZkJw5lS6DnSLzgr/toqjZBgJkNn0/iLKjLoHvlUDppU5/z BNt78aghpDWdp8XibareXYGhU0tEzYDpkgdpSSs4c6Emg2M39nxCTZSUIs3A1gcL muY8h2ZB72cBGD/IJp5NdlySDYEz0lgP6BuPc2uEKOqXSgdU6F9I/UT3ZO4ngI3X fLCnfujPs7N/dtQoj3hFU7OcPRlBf+x61362Vy8Qga8h2DNgUCoPxrfplCSdUP4E 79zt5Dl9dop3lFzwDCYti9Czq0QyTMPp/c+OYhcFg8gW0nxnrx5BVwKW6s3Z9EFn TT0IljzlmmGZUpVE1K993o1RQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIJk/j1 GMufsEw1Mo35rID8tYSaMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgF7nkutBlExsuSU7QmU3XFemieL3Le14Ae3ampd1AhiOfrWypq/F0 IfUhFKTxUdQjDNjjSHc1K4m9trx/DX/vEomz9QQhaT/jca11PKaaDtwGRD2jfn04 xJAsCPvp92M+Z9MbWcsJIzQ6bBiaH6GYwms+7Rx1Z47py+y1fW4G/oP21ZzTMD1J 5ft5qfBmilkrtDeVcI3A9BW11NKa7EZm7cbTS5tBJnsYlzflrr0ble/cNn429LcF oHk+QqkbZ+O4QNArO7uYy3l2p1c9ETLRU2VTM0P14mkfmf3CT7IWQ6llcrDBDLv0 cdfHNE4na1cKgS/q+5ziRd5oVmqfoQ+I -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:37 2025 by rpki-client