$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: mBYKCOcCTTR1paMN3Hb2I5l+nO2Qh62GuP+5bT7ZD+8= Subject key identifier: 3D:1A:85:A2:F4:EB:51:8C:A1:91:FB:AE:26:F1:0D:55:B1:DE:EF:1D Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CFC Signing time: Mon 20 Oct 2025 18:38:09 +0000 Manifest this update: Mon 20 Oct 2025 18:38:08 +0000 Manifest next update: Mon 27 Oct 2025 18:38:08 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: GwQGskWi0kA41qCOYOy8I/ve2Lf/fpCCvqX7lLujEuc=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: WfQhPmIZUh24j8d27BZmWadRYjUYQWfuUpvwsdxRVBY=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Oct 20 18:38:08 2025 GMT Not After : Oct 27 18:38:08 2025 GMT Subject: CN=68f68191-a54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:66:10:be:1c:54:02:c3:32:6a:6e:02:70: 45:e7:f6:af:c3:79:c1:b9:8a:fe:7d:47:5d:c3:16: 2e:0a:96:c0:d6:18:66:4b:82:71:75:c5:5e:c4:54: 3d:82:ef:61:03:fb:4a:3a:fc:70:58:cf:7b:0a:e6: 1a:ef:a9:3d:51:66:bd:a0:6c:2a:4c:d6:7c:d0:87: 5f:32:09:43:8f:6f:3e:b4:f5:39:95:52:8a:2f:75: 11:10:3b:fd:c2:06:c7:53:92:83:c5:2b:3c:37:24: 25:65:4b:27:f2:11:68:5a:0d:b0:48:19:62:45:77: ad:03:ad:14:a8:50:ea:2b:2a:70:e6:21:50:c8:ae: 6b:ea:5f:30:c7:38:1f:d1:3c:27:e5:67:fd:42:f6: ed:16:69:1d:e7:bd:43:f6:50:02:e2:8d:7d:e3:13: 83:99:c9:3c:28:5b:b2:88:7b:be:ca:cb:a8:21:44: 3b:2a:b1:4a:32:ae:06:83:f1:ab:1b:b2:20:ce:08: 06:68:34:38:fa:c4:09:ef:30:d1:06:c3:b6:80:c5: 3c:66:8c:dc:b7:c2:52:62:d4:b2:81:c5:b9:bd:f7: a9:a8:6d:ed:30:aa:93:b3:f0:d0:21:0e:7e:82:53: a1:d3:da:af:a2:9d:d4:d9:59:2a:47:ee:82:b0:41: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1A:85:A2:F4:EB:51:8C:A1:91:FB:AE:26:F1:0D:55:B1:DE:EF:1D X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2e:1e:23:57:39:43:cb:3e:98:4c:97:b5:33:b4:0d:57:56: 33:44:d0:bd:c0:f3:5d:3f:db:f9:9e:39:3e:92:42:7a:1d:a0: 61:fb:75:24:a8:08:f8:27:6c:46:00:66:e6:0b:4b:bc:3b:8f: 14:2f:f0:8b:f3:00:93:c6:e7:22:5e:d8:9f:e6:e9:d5:9c:ce: 93:2b:6e:34:c0:5b:ec:ca:99:cb:da:da:d8:9c:d9:64:b6:d6: e0:86:f2:a9:a6:03:56:d7:ba:70:39:22:29:d0:18:d5:dc:53: ad:a1:da:e2:84:42:cf:3e:5d:4d:50:0a:6c:60:bf:e6:2d:c3: 3d:f4:f4:42:27:4e:4e:c0:ca:78:59:c5:51:83:7c:84:66:49: d8:3a:6c:a1:38:a8:20:65:d4:b1:51:78:d0:b0:07:0c:61:15: 59:8a:f8:83:0a:a3:31:d9:71:ac:60:c4:30:01:ca:51:e8:d0: 7e:08:3e:dc:72:ad:21:4e:41:85:90:0e:aa:63:93:2e:3d:3b: 24:85:ee:ca:31:42:f2:e3:ea:b2:27:82:bb:6f:2a:c0:ae:bb: f0:47:14:69:d0:dc:f6:10:6d:62:34:20:ea:01:57:54:0e:29: d9:dd:13:66:d7:5c:18:6c:6d:83:79:49:0b:05:56:ce:89:3b: 8f:65:1c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUxMDIwMTgzODA4WhcNMjUxMDI3MTgzODA4WjAYMRYwFAYD VQQDEw02OGY2ODE5MS1hNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wBmEL4cVALDMmpuAnBF5/avw3nBuYr+fUddwxYuCpbA1hhmS4JxdcVexFQ9 gu9hA/tKOvxwWM97CuYa76k9UWa9oGwqTNZ80IdfMglDj28+tPU5lVKKL3UREDv9 wgbHU5KDxSs8NyQlZUsn8hFoWg2wSBliRXetA60UqFDqKypw5iFQyK5r6l8wxzgf 0Twn5Wf9QvbtFmkd571D9lAC4o194xODmck8KFuyiHu+ysuoIUQ7KrFKMq4Gg/Gr G7IgzggGaDQ4+sQJ7zDRBsO2gMU8Zozct8JSYtSygcW5vfepqG3tMKqTs/DQIQ5+ glOh09qvop3U2VkqR+6CsEGwZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0ahaL0 61GMoZH7ribxDVWx3u8dMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLLh4jVzlDyz6YTJe1M7QNV1YzRNC9wPNdP9v5njk+kkJ6HaBh+3Uk qAj4J2xGAGbmC0u8O48UL/CL8wCTxuciXtif5unVnM6TK240wFvsypnL2trYnNlk ttbghvKppgNW17pwOSIp0BjV3FOtodrihELPPl1NUApsYL/mLcM99PRCJ05OwMp4 WcVRg3yEZknYOmyhOKggZdSxUXjQsAcMYRVZiviDCqMx2XGsYMQwAcpR6NB+CD7c cq0hTkGFkA6qY5MuPTskhe7KMULy4+qyJ4K7byrArrvwRxRp0Nz2EG1iNCDqAVdU DinZ3RNm11wYbG2DeUkLBVbOiTuPZRyf -----END CERTIFICATE-----Generated at Tue Oct 21 07:41:31 2025 by rpki-client