$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: D1oLcmiuBhmrCezYhm7586Sazetfz86ZghEZPmgVDgE= Subject key identifier: 6D:0F:BE:2D:0C:5D:93:6E:01:53:C0:5B:60:13:E0:EF:EA:E9:65:BA Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0DDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0DC9 Signing time: Sat 14 Nov 2026 17:48:15 +0000 Manifest this update: Sat 14 Nov 2026 17:48:14 +0000 Manifest next update: Sat 21 Nov 2026 17:48:14 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: wpLkM+f6y3xQ3nV9GXcvXEPo6vhimmzXdvIMgg7bATw=) 2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: 9AQDof6NEdoR+KKeYJ/yJ1fcJpxS8nSIcGdZOcxC/Z8=) 3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: djvaSh+6rXmlAUtXgHwm0wL+dwa9UePUisMEuBiQhVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 17:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Nov 14 17:48:14 2026 GMT Not After : Nov 21 17:48:14 2026 GMT Subject: CN=6af89edf-20ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:de:58:f6:3e:7c:6a:05:39:80:37:9b:81: 24:72:c3:a0:69:a3:c3:75:9d:66:21:da:cd:65:c1: d5:8c:e8:04:5e:36:66:66:70:f5:63:71:01:ea:a7: 16:14:dd:d3:36:0e:9e:41:42:c9:44:56:ce:8f:9d: 4f:6a:79:03:ed:17:d9:22:32:10:5b:76:06:83:dc: 8e:11:52:05:b4:89:a1:61:90:e4:bc:4e:6d:94:b0: 65:2d:be:8e:c4:a1:84:e1:88:d5:71:df:51:a9:62: 76:60:95:46:89:2f:1b:8b:42:24:4f:9a:49:5f:f4: 1b:6f:00:e2:d9:61:9a:42:29:09:a5:ca:54:7b:4b: 3b:55:90:3c:a0:c7:b7:cd:6d:d8:92:b5:ac:75:59: 38:38:99:e6:d5:c3:b3:ea:fe:c1:e6:67:33:a8:8e: 6c:2d:6e:94:c5:16:06:cd:8d:5b:6c:e9:76:84:56: b1:b4:ba:e9:ac:66:d2:48:df:90:35:bf:ac:d6:38: 7a:d0:13:4c:02:b0:df:71:61:6a:7a:d9:5a:83:0e: ad:47:37:b3:4e:6b:3a:ac:89:aa:a5:0d:32:a2:e0: e8:c9:7b:4a:84:4b:e3:7c:f9:b1:a0:b4:56:40:55: 6c:53:8c:65:07:c9:74:12:b4:bf:7c:f1:95:92:d4: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0F:BE:2D:0C:5D:93:6E:01:53:C0:5B:60:13:E0:EF:EA:E9:65:BA X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:81:fa:4f:a7:97:5e:94:56:dc:0b:f5:00:10:91:f8:1f: 34:95:f5:ac:16:b6:ba:c8:ff:6b:ab:9e:58:5f:b2:2c:d5:21: b7:b3:8e:aa:a1:fb:7b:7f:fe:cf:7e:d9:42:46:06:06:9e:e2: 12:0a:8e:cc:63:9e:81:da:f0:e0:4a:69:4f:c0:be:e3:1b:d0: 2d:c7:c8:5c:1b:6a:0b:fd:bb:cc:9e:66:77:ad:f1:32:18:4f: 76:ce:34:7a:78:80:52:7f:8d:f0:0c:30:38:1d:8d:f5:72:9c: 2a:d0:c5:88:67:23:de:ad:fa:15:2a:ea:76:5b:34:29:63:a2: a2:fa:65:68:7d:de:a2:fe:81:c0:84:2e:fb:cb:ef:f3:8c:bc: 78:5e:9a:a7:8d:d9:24:cd:21:97:9e:9d:5f:02:4e:96:49:ec: 68:17:b4:67:6d:ce:24:7d:11:c1:c9:3c:85:fc:0d:6a:03:61: f3:f9:48:94:b3:06:93:d3:c8:d7:17:4f:e0:4c:d7:c0:52:bd: 9a:fc:f6:41:7d:56:67:3e:36:0c:9e:58:98:46:0e:96:1c:3d: e1:40:8a:58:9f:4e:b3:9e:86:78:e2:9d:30:e5:26:5e:a9:a1: 23:8b:d3:57:40:c0:e5:a2:11:8d:be:3b:05:be:14:5a:35:13: 22:cf:c1:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYxMTE0MTc0ODE0WhcNMjYxMTIxMTc0ODE0WjAYMRYwFAYD VQQDEw02YWY4OWVkZi0yMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7/eWPY+fGoFOYA3m4EkcsOgaaPDdZ1mIdrNZcHVjOgEXjZmZnD1Y3EB6qcW FN3TNg6eQULJRFbOj51PankD7RfZIjIQW3YGg9yOEVIFtImhYZDkvE5tlLBlLb6O xKGE4YjVcd9RqWJ2YJVGiS8bi0IkT5pJX/QbbwDi2WGaQikJpcpUe0s7VZA8oMe3 zW3YkrWsdVk4OJnm1cOz6v7B5mczqI5sLW6UxRYGzY1bbOl2hFaxtLrprGbSSN+Q Nb+s1jh60BNMArDfcWFqetlagw6tRzezTms6rImqpQ0youDoyXtKhEvjfPmxoLRW QFVsU4xlB8l0ErS/fPGVktSAlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0Pvi0M XZNuAVPAW2AT4O/q6WW6MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfvSB+k+nl16UVtwL9QAQkfgfNJX1rBa2usj/a6ueWF+yLNUht7OOqqH7e3/+ z37ZQkYGBp7iEgqOzGOegdrw4EppT8C+4xvQLcfIXBtqC/27zJ5md63xMhhPds40 eniAUn+N8AwwOB2N9XKcKtDFiGcj3q36FSrqdls0KWOiovplaH3eov6BwIQu+8vv 84y8eF6ap43ZJM0hl56dXwJOlknsaBe0Z23OJH0Rwck8hfwNagNh8/lIlLMGk9PI 1xdP4EzXwFK9mvz2QX1WZz42DJ5YmEYOlhw94UCKWJ9Os56GeOKdMOUmXqmhI4vT V0DA5aIRjb47Bb4UWjUTIs/Bog== -----END CERTIFICATE-----Generated at Sun Nov 15 21:19:44 2026 by rpki-client