
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier: EVpyvI65wyjm1wJPz7I+pqsrFJxNzbaZuxA8A1elysM=
Subject key identifier: 5C:4F:71:B7:E9:D9:85:73:B3:F1:17:51:6F:68:28:58:58:5A:AE:9F
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial: 0D8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number: 0D78
Signing time: Fri 12 Jun 2026 17:56:36 +0000
Manifest this update: Fri 12 Jun 2026 17:56:35 +0000
Manifest next update: Fri 19 Jun 2026 17:56:35 +0000
Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: R4nDjOZZvwY9rI+Pkr7M9XHVITzLcA5Ly2LQoWvnA0E=)
2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=)
3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3468 (0xd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Validity
Not Before: Jun 12 17:56:35 2026 GMT
Not After : Jun 19 17:56:35 2026 GMT
Subject: CN=6a2c4854-2799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:8c:75:21:5a:53:bb:fb:69:45:0f:4c:6f:
10:58:9e:cc:65:60:08:7e:5b:c8:90:71:50:34:59:
c3:13:cf:40:33:ee:11:0a:20:60:63:9b:e9:c0:93:
df:1b:1c:b7:98:aa:ea:a1:b2:44:90:c9:70:4a:65:
16:f8:de:96:05:00:28:0a:8d:e0:0c:26:99:6a:6e:
ba:90:40:92:e4:be:28:4c:a9:08:1d:e6:1b:1f:2f:
ef:d2:7a:b0:3c:a8:4b:85:aa:3b:1c:4e:75:77:67:
c6:46:3c:e2:4b:00:94:6b:36:e7:eb:05:d7:b1:ba:
6c:8a:c9:99:61:67:0a:ea:45:d9:32:3b:30:46:6f:
4e:50:10:68:ff:5d:3a:ed:91:db:4a:2c:be:d3:81:
7d:e7:4e:98:8e:88:d9:3f:8c:9f:c8:1f:f4:5f:0f:
cb:4b:e9:d4:61:cc:92:32:3e:84:8a:fc:46:44:72:
f8:a8:b8:ae:59:e1:07:6a:e1:0d:b8:61:8a:93:ae:
36:3b:e0:7e:e4:60:3f:eb:4c:40:33:84:7a:da:92:
97:67:05:b6:c6:bc:e7:9b:65:b6:12:da:98:d6:44:
f4:69:57:3c:df:ad:8d:c7:54:49:8e:3d:5c:cc:25:
2b:de:61:c9:66:65:07:27:43:9a:f3:fd:fe:d4:c2:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:71:B7:E9:D9:85:73:B3:F1:17:51:6F:68:28:58:58:5A:AE:9F
X509v3 Authority Key Identifier:
keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:22:c3:cc:5f:59:98:77:a9:da:9f:4e:70:d8:5c:ee:46:ef:
18:b5:91:ba:b5:bb:89:12:1b:f2:2c:0e:3d:f0:9e:66:0d:1e:
58:42:16:8e:ea:37:6b:c1:1c:92:e4:b3:3c:87:52:37:13:89:
64:84:24:2b:31:75:25:74:b3:5d:1b:16:59:d8:64:a8:76:82:
24:27:b3:f3:d1:7e:34:1a:06:fa:8f:17:57:4e:21:c2:0d:88:
89:30:10:77:26:2f:14:7b:86:d4:54:80:69:9c:bf:f8:98:fc:
46:a5:8c:62:3d:6b:20:23:99:e3:21:3f:6e:72:ad:0b:01:c5:
99:31:85:b0:37:3e:f5:7a:58:8d:23:43:b5:ed:c8:62:35:36:
4a:3f:0b:3c:30:54:90:e0:17:75:94:d5:0c:f5:75:81:39:d6:
16:bd:97:c6:7d:72:ad:fd:a1:31:46:85:25:a5:ac:84:bb:53:
01:79:81:cc:04:40:86:f0:3d:16:b2:59:44:eb:01:70:60:67:
13:48:b4:30:84:a4:13:e2:88:a8:63:56:6f:72:16:9c:c6:28:
81:44:d1:09:94:b3:9c:21:21:21:92:54:13:68:3e:51:1e:bd:
f9:41:a9:06:a2:e4:eb:c9:95:ea:99:ef:dd:1b:7d:e4:b4:dc:
ce:29:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:19 2026 by rpki-client