$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: HOkGAoo4hnjBrJC8INjDbMZAavASgI+tT+bSq8K/15U= Subject key identifier: 1D:92:F9:DC:2F:71:D2:B0:C8:55:57:B2:3E:CE:AC:C8:63:EA:A7:C4 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0DAD Signing time: Thu 24 Sep 2026 17:52:14 +0000 Manifest this update: Thu 24 Sep 2026 17:52:14 +0000 Manifest next update: Thu 01 Oct 2026 17:52:14 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: t9nlI3M8z4ZEqiGFbBCtaTEsqjd5tO3l3+PYsDWbulw=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Sep 24 17:52:14 2026 GMT Not After : Oct 1 17:52:14 2026 GMT Subject: CN=6ab5634e-0c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:c8:6c:b6:cd:65:6a:93:d3:61:17:31:4d: e2:ba:b5:54:73:eb:54:2b:f0:68:d0:b0:b3:a7:8a: 2c:3b:19:bc:f5:70:30:56:95:74:55:d2:08:07:c4: 0b:ff:50:34:7a:02:4b:eb:9d:bf:47:36:00:9c:b2: 57:cf:53:3e:11:53:3a:8d:fa:ba:ef:38:72:a0:70: 2c:60:d6:6a:37:66:2a:12:3d:b7:36:2d:f5:2e:8a: d8:c1:87:48:44:a7:7d:97:2e:36:7a:35:f4:ce:ce: 48:c1:c6:f5:28:1e:54:a4:4d:d9:2a:be:59:93:d5: cf:b9:6e:14:84:cc:ec:29:cb:8e:93:32:e6:37:4f: e3:2a:e0:aa:21:35:01:63:1b:b8:51:84:4e:14:ed: df:20:9d:63:c3:9d:96:09:e9:43:35:0c:e1:db:36: 62:6e:d4:3d:d8:a9:27:eb:6e:59:c0:f8:28:6f:81: 9e:bf:ba:be:b6:bd:36:ab:cd:13:25:ce:ee:9f:84: 07:5e:e1:71:0e:05:fa:d7:dc:71:75:78:98:fb:81: 3f:0c:c0:64:35:39:11:e1:99:44:ed:39:07:4a:2d: a8:38:67:f1:59:00:a7:31:83:cd:e5:71:b7:86:a1: e3:f8:29:29:d1:6a:07:ba:b0:a1:b4:59:5b:80:81: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:F9:DC:2F:71:D2:B0:C8:55:57:B2:3E:CE:AC:C8:63:EA:A7:C4 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:87:aa:99:dc:b1:46:9d:f3:91:a9:6e:7c:72:89:9b:84: b5:17:b6:15:28:2d:47:80:69:4f:6b:2d:10:85:55:d1:a9:4d: 0d:5d:5d:3d:3c:a5:a1:cf:93:bb:b3:86:50:63:36:4e:f4:16: 13:9a:85:cd:1b:0b:1b:10:1f:94:45:e4:9c:b6:72:95:f6:0b: 6f:d1:2a:d9:60:cd:f7:3d:8b:4b:5c:18:93:59:7f:2a:95:02: 2a:fd:cc:ad:ab:2f:13:97:13:bc:c7:7d:7d:b2:66:4a:4f:bc: 09:16:4b:45:44:1e:1a:cd:c8:f1:c9:fb:44:ef:50:b5:39:88: 22:80:e7:97:56:63:fa:9b:c2:40:0c:c7:55:81:98:71:79:b0: ac:63:20:21:40:f4:ea:4f:98:9a:ff:88:60:be:36:19:2f:c9: db:83:c4:c3:01:49:43:ec:d0:2c:8a:9c:50:3d:92:3d:2d:75: 54:f1:bb:70:98:ac:86:4e:fa:d1:6e:5e:86:1b:9f:51:25:88: a2:2b:08:41:d9:1d:79:ca:68:a4:e0:31:3f:5b:b0:53:94:a5: a9:b4:35:64:89:d8:9c:7f:63:7a:8f:9c:e2:ba:c2:4a:02:f3: 30:bc:3d:9d:5e:63:b7:1f:b8:31:46:71:4d:a2:be:c4:dc:18: 70:e9:e4:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwOTI0MTc1MjE0WhcNMjYxMDAxMTc1MjE0WjAYMRYwFAYD VQQDEw02YWI1NjM0ZS0wYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS7IbLbNZWqT02EXMU3iurVUc+tUK/Bo0LCzp4osOxm89XAwVpV0VdIIB8QL /1A0egJL652/RzYAnLJXz1M+EVM6jfq67zhyoHAsYNZqN2YqEj23Ni31LorYwYdI RKd9ly42ejX0zs5Iwcb1KB5UpE3ZKr5Zk9XPuW4UhMzsKcuOkzLmN0/jKuCqITUB Yxu4UYROFO3fIJ1jw52WCelDNQzh2zZibtQ92Kkn625ZwPgob4Gev7q+tr02q80T Jc7un4QHXuFxDgX619xxdXiY+4E/DMBkNTkR4ZlE7TkHSi2oOGfxWQCnMYPN5XG3 hqHj+Ckp0WoHurChtFlbgIHJpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2S+dwv cdKwyFVXsj7OrMhj6qfEMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX9mHqpncsUad85GpbnxyiZuEtRe2FSgtR4BpT2stEIVV0alNDV1dPTyloc+T u7OGUGM2TvQWE5qFzRsLGxAflEXknLZylfYLb9Eq2WDN9z2LS1wYk1l/KpUCKv3M rasvE5cTvMd9fbJmSk+8CRZLRUQeGs3I8cn7RO9QtTmIIoDnl1Zj+pvCQAzHVYGY cXmwrGMgIUD06k+Ymv+IYL42GS/J24PEwwFJQ+zQLIqcUD2SPS11VPG7cJishk76 0W5ehhufUSWIoisIQdkdecpopOAxP1uwU5SlqbQ1ZInYnH9jeo+c4rrCSgLzMLw9 nV5jtx+4MUZxTaK+xNwYcOnkFw== -----END CERTIFICATE-----Generated at Fri Sep 25 16:31:10 2026 by rpki-client