$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: +RORpswNAu9zLC+W3L313KQt5H7Sm+pt2lyOrc4aLsU= Subject key identifier: 5B:0E:01:6B:5F:24:83:87:15:08:79:50:DD:46:74:C6:5B:D7:2C:CB Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0DA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D8C Signing time: Wed 22 Jul 2026 18:09:51 +0000 Manifest this update: Wed 22 Jul 2026 18:09:50 +0000 Manifest next update: Wed 29 Jul 2026 18:09:50 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: zogdshIWWEnkYp+kpnN1tuNYdMZRxbWUg1ggB1tZgf4=) 2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) 3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3488 (0xda0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Jul 22 18:09:50 2026 GMT Not After : Jul 29 18:09:50 2026 GMT Subject: CN=6a61076e-83d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:7d:b8:f8:9b:ef:67:ba:1a:4d:6b:e1:38: 1e:2a:9a:52:a9:5d:13:74:e4:33:c9:6b:25:db:55: 13:6e:6b:9d:7e:ed:77:43:fb:bc:3a:72:b9:36:89: 4c:85:6e:ea:97:32:d5:76:8e:05:ca:aa:b2:f5:b4: e3:66:10:04:f2:0e:84:c3:8f:02:15:7b:5c:e4:0f: 7c:fb:f3:ce:be:86:d2:06:02:cd:d6:d3:2c:e8:ac: 71:bc:5f:fa:84:4c:2c:69:96:d0:46:f4:fd:48:21: 63:47:9b:d1:05:5a:90:d2:c5:da:94:99:6a:04:b5: fd:d0:d8:27:7a:e6:6d:06:2d:70:d1:b4:ee:5b:8b: 49:5c:9a:d9:ff:e2:7c:ac:e8:11:89:42:3c:09:20: 42:84:d2:d1:ce:57:3d:a1:ef:87:ad:96:33:1c:ec: 2c:b7:99:6f:e3:f3:3d:35:bf:5f:43:61:dd:99:7a: 4b:d7:f9:0f:75:29:de:ac:bc:ac:d5:f4:ca:7a:53: 9a:16:2b:5b:84:a8:2c:cf:29:d2:7a:5f:9b:2c:b3: 5d:70:c1:30:7d:33:bf:4f:8b:02:9e:11:87:dc:72: b3:8f:91:f4:b1:74:08:02:9b:d9:60:9e:7e:13:40: fe:e0:e1:4c:0a:cc:96:7f:fd:df:b2:9f:e2:3b:8e: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:01:6B:5F:24:83:87:15:08:79:50:DD:46:74:C6:5B:D7:2C:CB X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:79:c3:bb:67:d4:f4:03:b8:41:73:67:58:6b:10:16:56:80: d2:53:10:7d:53:8a:23:59:30:d1:4b:bc:9c:83:f6:87:83:f8: 12:84:c9:e5:09:0d:72:b8:cc:c3:b1:d4:42:d1:c6:15:d5:40: 61:c8:de:3c:98:ae:0b:7e:ef:1e:2b:b2:29:24:e8:90:bb:e9: 18:cd:9d:6d:54:61:8e:6f:76:53:8d:a9:c8:92:9c:04:3f:01: b3:0c:d1:ed:47:cc:e3:58:b9:d8:17:c5:af:7f:fc:b8:b5:8e: b3:78:35:d5:3a:08:03:09:b3:61:5f:0b:95:57:27:97:8c:f1: a6:a4:02:34:92:31:a8:fd:71:e6:51:3c:52:57:7c:92:c9:d9: d8:6d:63:72:e4:9f:32:65:e5:a9:fa:b4:43:94:8a:e4:71:01: fb:38:2c:cd:52:36:82:c9:02:68:2a:30:cd:17:c4:f8:db:f6: 17:f3:63:c7:d8:a5:97:b3:7a:32:c2:e6:e3:a9:6c:46:03:72: 67:9a:34:9d:28:1f:d3:a1:58:c4:f6:38:49:c2:a9:cb:0f:af: 05:5d:00:b3:2e:66:1c:73:d3:d2:1f:21:92:db:e4:c4:99:0a: 1c:d3:bb:72:44:d8:a9:38:94:3e:e9:7a:b1:b0:37:ef:80:04: 98:68:28:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwNzIyMTgwOTUwWhcNMjYwNzI5MTgwOTUwWjAYMRYwFAYD VQQDEw02YTYxMDc2ZS04M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFR9uPib72e6Gk1r4TgeKppSqV0TdOQzyWsl21UTbmudfu13Q/u8OnK5NolM hW7qlzLVdo4Fyqqy9bTjZhAE8g6Ew48CFXtc5A98+/POvobSBgLN1tMs6KxxvF/6 hEwsaZbQRvT9SCFjR5vRBVqQ0sXalJlqBLX90NgneuZtBi1w0bTuW4tJXJrZ/+J8 rOgRiUI8CSBChNLRzlc9oe+HrZYzHOwst5lv4/M9Nb9fQ2HdmXpL1/kPdSnerLys 1fTKelOaFitbhKgszynSel+bLLNdcMEwfTO/T4sCnhGH3HKzj5H0sXQIApvZYJ5+ E0D+4OFMCsyWf/3fsp/iO47ekQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsOAWtf JIOHFQh5UN1GdMZb1yzLMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARXnDu2fU9AO4QXNnWGsQFlaA0lMQfVOKI1kw0Uu8nIP2h4P4EoTJ5QkNcrjM w7HUQtHGFdVAYcjePJiuC37vHiuyKSTokLvpGM2dbVRhjm92U42pyJKcBD8BswzR 7UfM41i52BfFr3/8uLWOs3g11ToIAwmzYV8LlVcnl4zxpqQCNJIxqP1x5lE8Uld8 ksnZ2G1jcuSfMmXlqfq0Q5SK5HEB+zgszVI2gskCaCowzRfE+Nv2F/Njx9ill7N6 MsLm46lsRgNyZ5o0nSgf06FYxPY4ScKpyw+vBV0Asy5mHHPT0h8hktvkxJkKHNO7 ckTYqTiUPul6sbA374AEmGgoyg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:42:07 2026 by rpki-client