$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: EjfLFeskc7O1UE7TyKziajjhadE/5Jq362PXHeXmZXM= Subject key identifier: 56:4A:F2:A1:D3:63:42:D1:60:79:F4:75:40:12:E1:69:B2:6F:1B:1A Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D4F Signing time: Tue 24 Mar 2026 17:51:58 +0000 Manifest this update: Tue 24 Mar 2026 17:51:58 +0000 Manifest next update: Tue 31 Mar 2026 17:51:58 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: IaN3+32X2JLQUGU7KfepiZK3w2v1fAM+5LxAdfTUp5s=) 2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) 3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Mar 24 17:51:58 2026 GMT Not After : Mar 31 17:51:58 2026 GMT Subject: CN=69c2cf3e-d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:f8:88:83:37:c0:ae:97:9e:96:2e:f2:72: 55:5e:5a:15:9e:e5:08:21:25:3a:64:ea:e9:11:e4: 92:4e:44:53:42:08:67:63:da:ca:c7:1a:94:70:c9: 71:68:45:0a:30:aa:72:2f:c5:96:c0:a0:ba:4a:83: 9e:3d:9b:1f:54:1f:65:d3:ce:20:6e:14:7e:28:3b: 25:0b:90:3c:36:98:9a:a0:72:cf:7a:d2:14:6c:df: ce:e5:45:ac:f9:f8:a3:39:a0:d9:15:cb:58:97:b1: 3f:ce:e1:3f:5f:e2:54:94:5b:92:f8:fb:b3:03:14: d0:6f:3f:66:68:b3:ad:8e:bc:ea:a3:23:6c:19:17: dc:28:7a:87:4a:3e:6d:f8:cc:ea:b3:10:e7:77:c6: 11:f3:35:b0:38:2a:67:4a:32:31:d6:51:aa:6e:2c: b6:cd:82:d9:df:e5:d2:f5:7a:e9:70:fc:fb:14:5b: 7c:91:1a:5a:3a:cc:5b:de:19:ac:11:3d:ce:d4:a9: 72:3b:dd:5e:50:e8:13:9e:0b:18:ae:8b:f1:8a:b7: d9:fe:cf:6d:29:78:b4:76:fd:88:74:24:36:5e:1d: be:5e:e7:29:47:f4:ad:65:39:7b:e9:d9:f2:99:52: 58:64:fd:a9:cd:1d:5d:ab:e8:98:0b:8a:72:b3:47: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4A:F2:A1:D3:63:42:D1:60:79:F4:75:40:12:E1:69:B2:6F:1B:1A X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:73:32:c7:40:d7:42:74:54:26:2a:6d:07:d5:cb:86:04:b1: 09:d9:01:28:3d:a3:fc:72:fb:df:0c:e2:56:67:74:80:bf:2d: 9a:f0:d0:e8:e7:3c:c8:ef:b8:53:9e:72:38:6d:b3:64:a9:f0: b6:4c:e4:e9:fb:6e:21:a9:f2:48:eb:b1:df:e8:63:b4:25:5a: 11:7f:d6:12:2e:89:b2:b6:2e:8f:b4:ed:c3:ab:dd:9e:1f:81: 9f:ba:39:d1:fa:11:0d:a2:2f:8d:c1:54:c6:21:e0:6b:24:0d: 87:18:aa:82:c7:07:55:ae:79:ad:91:a4:52:62:47:67:f5:61: d6:84:fd:a8:78:36:46:87:aa:5b:98:b8:42:58:71:34:26:66: 3b:66:f0:bf:b9:37:4e:4f:af:9c:7a:aa:45:ad:0a:94:69:a4: 09:62:ad:6a:1d:f9:b6:f9:86:90:65:ce:d3:09:9a:59:68:2d: 34:04:55:ed:1c:45:c3:2e:34:51:d2:0f:02:37:76:5d:f7:d3: a0:fe:87:a5:ee:71:f7:fd:5d:63:5d:df:7d:c0:e1:bc:1c:a5: b2:0d:1b:58:1f:fb:af:e4:f2:cc:bd:2a:ce:32:f8:34:16:04: 78:4b:eb:89:fc:fe:9e:65:2e:31:59:60:fc:29:19:a5:86:a7: 91:28:05:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwMzI0MTc1MTU4WhcNMjYwMzMxMTc1MTU4WjAYMRYwFAYD VQQDEw02OWMyY2YzZS1kNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYf4iIM3wK6XnpYu8nJVXloVnuUIISU6ZOrpEeSSTkRTQghnY9rKxxqUcMlx aEUKMKpyL8WWwKC6SoOePZsfVB9l084gbhR+KDslC5A8NpiaoHLPetIUbN/O5UWs +fijOaDZFctYl7E/zuE/X+JUlFuS+PuzAxTQbz9maLOtjrzqoyNsGRfcKHqHSj5t +MzqsxDnd8YR8zWwOCpnSjIx1lGqbiy2zYLZ3+XS9XrpcPz7FFt8kRpaOsxb3hms ET3O1KlyO91eUOgTngsYrovxirfZ/s9tKXi0dv2IdCQ2Xh2+XucpR/StZTl76dny mVJYZP2pzR1dq+iYC4pys0f8VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZK8qHT Y0LRYHn0dUAS4WmybxsaMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPXMyx0DXQnRUJiptB9XLhgSxCdkBKD2j/HL73wziVmd0gL8tmvDQ6Oc8yO+4 U55yOG2zZKnwtkzk6ftuIanySOux3+hjtCVaEX/WEi6JsrYuj7Ttw6vdnh+Bn7o5 0foRDaIvjcFUxiHgayQNhxiqgscHVa55rZGkUmJHZ/Vh1oT9qHg2RoeqW5i4Qlhx NCZmO2bwv7k3Tk+vnHqqRa0KlGmkCWKtah35tvmGkGXO0wmaWWgtNARV7RxFwy40 UdIPAjd2XffToP6Hpe5x9/1dY13ffcDhvBylsg0bWB/7r+TyzL0qzjL4NBYEeEvr ifz+nmUuMVlg/CkZpYankSgF2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:54 2026 by rpki-client