$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: T1T04PQcI9SCmGnq6mSIUkmV03LtjQigie+yYFg2/L8= Subject key identifier: 0C:49:F1:9D:68:45:51:16:A2:2A:C2:2A:7D:BB:46:39:A8:8A:4B:B7 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CA3 Signing time: Sat 10 May 2025 18:00:11 +0000 Manifest this update: Sat 10 May 2025 18:00:11 +0000 Manifest next update: Sat 17 May 2025 18:00:11 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: +ToZO5Xy02oS+WHHo+hGqQIzKUxlSbd1Ury2GvC4JZk=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: CnvBV8reOxNk//OTIvb7GslAhZESiEX8ju+87HitBRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: May 10 18:00:11 2025 GMT Not After : May 17 18:00:11 2025 GMT Subject: CN=681f942b-213d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:df:a0:e5:0c:48:bc:ad:d1:54:7f:6c:03: 09:3e:6e:58:a7:2c:bf:b6:38:8a:5c:48:73:52:41: cf:1b:27:9e:5e:f5:40:0e:cf:27:12:38:dc:d7:2e: eb:49:f3:81:1f:d6:c0:90:e5:7e:5e:6a:7c:81:7e: 7a:ee:75:63:cf:dd:6b:c2:0a:49:83:3e:09:df:71: 80:0a:41:39:e1:f4:26:e9:06:30:bd:db:0a:5a:27: 6c:fc:04:5b:32:a0:a9:fb:db:d3:d9:4a:d4:48:fa: 09:4c:71:95:f1:0a:ae:72:bd:d7:d1:86:1a:20:01: ee:6a:df:a4:50:62:ea:9f:b4:05:d3:b4:6d:cd:6b: 23:b7:fc:0b:f9:f4:d7:70:f6:97:97:fe:f0:9a:41: 4f:6e:f7:6f:db:86:ba:1e:8e:fe:68:58:b9:8b:c9: da:49:d2:4f:07:5d:70:6c:1e:eb:89:28:64:8b:04: ab:68:a5:82:0b:74:80:0a:55:24:86:13:77:00:54: c8:30:bf:93:e5:0c:14:d4:e2:ae:0a:31:c5:b9:34: a5:de:36:f2:7e:bd:d0:e1:96:92:5b:6b:8e:98:06: e4:df:f0:7a:05:76:b1:44:fa:a7:3f:59:36:93:99: 74:69:23:ab:a7:ef:80:84:cc:f9:9a:78:f5:98:76: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:F1:9D:68:45:51:16:A2:2A:C2:2A:7D:BB:46:39:A8:8A:4B:B7 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:12:3a:5f:f3:c0:f8:c7:38:f0:e1:f7:06:99:07:6d:4a: d9:11:a6:4b:2a:0c:e5:c2:18:b4:fb:4a:96:75:e8:28:3e:c4: b5:6e:8c:52:04:8c:05:a1:68:ec:db:b7:12:82:97:21:f2:32: 5e:f6:db:b8:87:fa:ac:a2:f6:a9:3f:8c:54:5b:45:df:c4:f0: 0a:87:b9:74:4b:b7:d6:02:68:10:60:f1:90:69:42:35:c1:69: 05:e3:9a:a4:57:51:7f:83:60:2f:90:e0:a5:17:4f:80:c7:31: 3c:cc:66:7c:9f:a0:16:b7:e6:a8:89:8f:5a:19:35:62:5d:bc: 79:86:6c:b7:48:77:95:1a:e2:3b:49:1a:a1:36:56:b2:21:e3: 63:1e:a5:7f:fc:87:c9:bf:70:08:89:aa:82:07:d7:88:d5:03: 71:2c:d1:7c:df:ce:3e:a1:d6:db:47:99:47:cf:01:11:82:e4: 5a:57:32:71:fb:ab:4d:8c:28:ae:10:e1:4c:85:39:98:36:0d: fe:d5:ed:b3:5e:3f:a7:ee:1f:de:7f:24:78:19:39:de:7b:18: 5e:a2:ec:c2:41:1d:f3:15:9d:83:19:2f:da:42:ce:49:eb:3c: bb:bf:bb:43:81:27:47:cf:65:99:66:c5:20:f0:e0:3e:27:59: b7:d4:c4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNTEwMTgwMDExWhcNMjUwNTE3MTgwMDExWjAYMRYwFAYD VQQDEw02ODFmOTQyYi0yMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kjfoOUMSLyt0VR/bAMJPm5Ypyy/tjiKXEhzUkHPGyeeXvVADs8nEjjc1y7r SfOBH9bAkOV+Xmp8gX567nVjz91rwgpJgz4J33GACkE54fQm6QYwvdsKWids/ARb MqCp+9vT2UrUSPoJTHGV8Qqucr3X0YYaIAHuat+kUGLqn7QF07RtzWsjt/wL+fTX cPaXl/7wmkFPbvdv24a6Ho7+aFi5i8naSdJPB11wbB7riShkiwSraKWCC3SAClUk hhN3AFTIML+T5QwU1OKuCjHFuTSl3jbyfr3Q4ZaSW2uOmAbk3/B6BXaxRPqnP1k2 k5l0aSOrp++AhMz5mnj1mHaSmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxJ8Z1o RVEWoirCKn27Rjmoiku3MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5rhI6X/PA+Mc48OH3BpkHbUrZEaZLKgzlwhi0+0qWdegoPsS1boxS BIwFoWjs27cSgpch8jJe9tu4h/qsovapP4xUW0XfxPAKh7l0S7fWAmgQYPGQaUI1 wWkF45qkV1F/g2AvkOClF0+AxzE8zGZ8n6AWt+aoiY9aGTViXbx5hmy3SHeVGuI7 SRqhNlayIeNjHqV//IfJv3AIiaqCB9eI1QNxLNF8384+odbbR5lHzwERguRaVzJx +6tNjCiuEOFMhTmYNg3+1e2zXj+n7h/efyR4GTneexheouzCQR3zFZ2DGS/aQs5J 6zy7v7tDgSdHz2WZZsUg8OA+J1m31MQD -----END CERTIFICATE-----Generated at Mon May 12 12:52:15 2025 by rpki-client