$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: PFLwTZ86NoVZZrYuw2u6YrXMxbAyhDspgjDKmX7Jfqg= Subject key identifier: CD:F0:CC:8C:ED:41:D3:BD:9E:8E:5A:21:CE:71:B0:72:14:DC:C1:FC Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CC1 Signing time: Mon 30 Jun 2025 18:20:10 +0000 Manifest this update: Mon 30 Jun 2025 18:20:09 +0000 Manifest next update: Mon 07 Jul 2025 18:20:09 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: QPrLOm41or6fxYeN6Zo9gtJaX0IzRekrcXAi/YR5bRU=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: sVwxj8pb/X0KOyVBfmu/JHCV32hFIOXFbfXDeMrIHO4=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: TvxmtDuu0g+5vHIGbKKqvtivjp3MqjbTQqIf6Vqxlu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Jun 30 18:20:09 2025 GMT Not After : Jul 7 18:20:09 2025 GMT Subject: CN=6862d55a-6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:45:0c:9e:3e:02:6f:ae:bd:cf:52:21:ec: 05:c6:73:5c:1c:54:8c:32:d2:79:d2:de:5f:98:ab: 9f:a7:ee:1a:0a:b5:44:4a:66:f3:fb:a0:e5:a1:2d: 34:00:e5:66:4b:1d:ed:09:eb:59:95:2a:f9:d6:67: 68:1f:98:e3:81:26:b0:64:1c:23:dc:cc:e1:9d:bc: 91:a0:ba:3d:3a:05:0c:ce:a2:84:ef:51:6b:1f:c1: 84:93:14:e3:d8:71:05:7a:44:14:19:b9:36:f8:b2: eb:72:d5:7a:50:7f:7a:f1:cc:2e:70:5d:09:fb:10: ed:18:85:b2:ea:63:45:34:ca:72:f2:47:ab:42:12: bc:30:b7:3a:58:82:71:b9:0d:d2:c9:51:03:5b:10: 7f:e4:19:55:e6:6d:aa:2c:41:50:39:87:c5:c0:d7: 2c:42:91:10:ed:b1:92:de:2f:2b:5f:f0:70:87:35: 8a:56:04:a7:6a:21:e1:10:c0:36:b7:22:47:96:2e: 46:a5:a7:b0:d0:db:7f:bf:2b:88:a9:75:0f:ff:92: 6c:ed:d2:64:c7:5f:a9:fc:de:bc:0a:6c:9c:5e:5f: 85:12:3a:85:3d:0d:22:3e:f9:f7:3c:b5:e8:68:b0: f5:7f:e6:bf:6b:b8:9d:49:54:e0:2b:dc:73:59:9f: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:CC:8C:ED:41:D3:BD:9E:8E:5A:21:CE:71:B0:72:14:DC:C1:FC X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:6f:6c:cf:09:70:25:d3:ae:5f:6d:b5:0d:65:f7:a9:86: d6:3f:fc:74:64:20:90:19:19:72:53:83:9d:bd:16:35:f7:e6: b5:6c:bf:9f:bf:34:9a:20:c8:b4:b3:d7:a8:dd:72:6a:74:c7: fc:45:d0:55:b7:9e:6a:64:66:2f:05:dc:8b:6b:73:54:97:a4: ab:d8:47:63:9b:b1:cd:ba:c6:1c:1b:b2:56:35:53:f5:84:df: 5a:ab:72:3a:a7:99:d1:c0:73:94:c1:06:b1:df:55:34:35:11: 00:96:57:f5:aa:f7:6a:d6:69:6b:55:e6:e9:92:1b:75:f6:80: 8f:8f:90:dc:c8:73:e7:90:77:85:94:47:33:2c:e1:d7:6f:c7: d2:cd:28:3b:e1:19:1c:a8:b7:fc:4e:fe:82:c9:f9:68:3b:65: 35:87:44:aa:8c:f5:80:2b:df:29:43:fd:e2:00:36:cf:d9:cb: ed:d9:72:75:17:59:52:05:a8:26:9f:bd:df:88:b4:4d:6d:e6: ab:89:a3:1a:46:c7:21:12:11:4e:3f:0f:2b:ce:62:a7:68:f7: 64:d0:3f:2a:3d:9c:9b:ec:15:76:f2:5d:70:7e:b0:b4:75:93: fd:ed:90:68:4a:1b:47:11:b0:01:93:7b:d2:b1:69:9f:0d:ee: 99:e6:5f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNjMwMTgyMDA5WhcNMjUwNzA3MTgyMDA5WjAYMRYwFAYD VQQDEw02ODYyZDU1YS02MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHdFDJ4+Am+uvc9SIewFxnNcHFSMMtJ50t5fmKufp+4aCrVESmbz+6DloS00 AOVmSx3tCetZlSr51mdoH5jjgSawZBwj3MzhnbyRoLo9OgUMzqKE71FrH8GEkxTj 2HEFekQUGbk2+LLrctV6UH968cwucF0J+xDtGIWy6mNFNMpy8kerQhK8MLc6WIJx uQ3SyVEDWxB/5BlV5m2qLEFQOYfFwNcsQpEQ7bGS3i8rX/BwhzWKVgSnaiHhEMA2 tyJHli5Gpaew0Nt/vyuIqXUP/5Js7dJkx1+p/N68CmycXl+FEjqFPQ0iPvn3PLXo aLD1f+a/a7idSVTgK9xzWZ8PpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3wzIzt QdO9no5aIc5xsHIU3MH8MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv5G9szwlwJdOuX221DWX3qYbWP/x0ZCCQGRlyU4OdvRY19+a1bL+f vzSaIMi0s9eo3XJqdMf8RdBVt55qZGYvBdyLa3NUl6Sr2Edjm7HNusYcG7JWNVP1 hN9aq3I6p5nRwHOUwQax31U0NREAllf1qvdq1mlrVebpkht19oCPj5DcyHPnkHeF lEczLOHXb8fSzSg74RkcqLf8Tv6CyfloO2U1h0SqjPWAK98pQ/3iADbP2cvt2XJ1 F1lSBagmn73fiLRNbeariaMaRschEhFOPw8rzmKnaPdk0D8qPZyb7BV28l1wfrC0 dZP97ZBoShtHEbABk3vSsWmfDe6Z5l++ -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:12 2025 by rpki-client