$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: TU3aY77iv85emPIfNKtxgVYcXxrLJrCDn4GEcKgeCVc= Subject key identifier: 1E:A4:12:FC:41:E8:63:2B:EA:98:99:EF:48:06:B5:85:08:30:0F:8F Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0CCA Signing time: Fri 18 Jul 2025 18:17:44 +0000 Manifest this update: Fri 18 Jul 2025 18:17:44 +0000 Manifest next update: Fri 25 Jul 2025 18:17:44 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: MilNe3eTmTxjxEh565EHmZN8lICypMFfpPOQjtSSPys=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: sVwxj8pb/X0KOyVBfmu/JHCV32hFIOXFbfXDeMrIHO4=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: TvxmtDuu0g+5vHIGbKKqvtivjp3MqjbTQqIf6Vqxlu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Jul 18 18:17:44 2025 GMT Not After : Jul 25 18:17:44 2025 GMT Subject: CN=687a8fc8-b634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:b6:38:ca:45:fe:1b:50:87:7b:02:af:18: 8a:8f:7d:e7:9b:79:f4:5c:de:6c:c3:4a:97:25:a7: a0:fc:ec:15:45:17:bb:6e:e0:a7:d1:ce:17:df:74: f5:93:74:51:9b:92:6f:e3:86:49:6f:f3:f5:6f:43: ae:2b:e8:1c:bf:67:97:da:89:75:1d:f9:44:98:53: 09:a4:b9:3e:59:2a:a1:2d:d6:82:8c:e5:64:f5:26: 73:77:fb:aa:b4:9e:b3:11:63:53:db:11:24:ee:6f: 1f:cd:c0:a1:55:02:0a:7f:20:70:92:5e:27:04:cc: f4:82:2c:11:92:7a:f5:75:64:4d:46:30:4f:86:97: cd:b3:28:f8:05:54:8e:42:ae:9f:94:a2:72:8c:d4: bd:56:1d:db:8c:35:63:77:28:73:4e:67:17:79:16: 2f:14:4d:7f:5a:ad:9b:7c:0d:31:63:4d:ca:f0:d2: 71:89:62:5e:06:ad:d2:78:1b:c9:a5:e4:7a:51:d0: 10:d0:17:88:07:75:49:83:19:10:e0:8e:1e:09:7f: 7a:67:b1:13:57:3d:e2:0b:0d:18:1d:a9:9c:42:61: 7b:35:a9:4b:bf:fd:40:cb:51:e9:07:8e:65:46:d6: 40:ce:f7:d6:da:0f:25:6d:95:3f:ba:54:ff:e9:01: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:12:FC:41:E8:63:2B:EA:98:99:EF:48:06:B5:85:08:30:0F:8F X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cb:f2:f5:83:04:b4:d4:2e:0a:26:40:1b:16:a4:7e:14:bb: cd:b0:bf:c8:8f:a8:8c:12:f5:2a:29:19:e6:03:6d:83:8e:ac: 55:24:28:cf:4b:9d:de:2b:fd:75:04:95:dd:21:00:3d:4c:4f: ba:f2:b6:f1:71:a9:da:21:4d:70:fd:07:e3:60:67:5f:a5:80: 6b:87:55:4d:ff:cc:9d:4c:15:5f:c3:25:50:80:80:d7:27:1d: 16:bb:fd:d3:5a:1f:22:ae:50:d6:b1:70:3e:84:be:54:40:1d: d6:11:b0:42:6e:ac:86:8c:63:91:e8:fc:aa:21:cd:9d:a9:57: b5:20:8f:15:91:b9:4d:24:ac:fd:b6:bc:81:a2:a9:da:47:59: 78:b6:cc:38:9b:9f:cd:a0:ee:52:02:09:0f:7c:4e:3d:13:a1: fd:2f:4a:1c:28:a3:4e:83:6a:ce:de:54:ef:04:d3:45:2a:84: ee:13:95:47:4b:32:49:cd:3b:2a:c6:d4:f7:ca:7d:20:3e:00: ef:56:64:48:1e:24:f4:58:86:22:a5:fc:13:7f:50:6b:9e:d0: 63:af:e1:5f:67:6e:22:b6:a1:80:b2:11:00:5f:fc:42:55:19: 04:ba:8f:dd:02:f0:e6:91:74:c0:9f:2f:42:ab:85:bc:b4:5b: da:fd:1d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNzE4MTgxNzQ0WhcNMjUwNzI1MTgxNzQ0WjAYMRYwFAYD VQQDEw02ODdhOGZjOC1iNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWq2OMpF/htQh3sCrxiKj33nm3n0XN5sw0qXJaeg/OwVRRe7buCn0c4X33T1 k3RRm5Jv44ZJb/P1b0OuK+gcv2eX2ol1HflEmFMJpLk+WSqhLdaCjOVk9SZzd/uq tJ6zEWNT2xEk7m8fzcChVQIKfyBwkl4nBMz0giwRknr1dWRNRjBPhpfNsyj4BVSO Qq6flKJyjNS9Vh3bjDVjdyhzTmcXeRYvFE1/Wq2bfA0xY03K8NJxiWJeBq3SeBvJ peR6UdAQ0BeIB3VJgxkQ4I4eCX96Z7ETVz3iCw0YHamcQmF7NalLv/1Ay1HpB45l RtZAzvfW2g8lbZU/ulT/6QEY2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6kEvxB 6GMr6piZ70gGtYUIMA+PMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXy/L1gwS01C4KJkAbFqR+FLvNsL/Ij6iMEvUqKRnmA22DjqxVJCjP S53eK/11BJXdIQA9TE+68rbxcanaIU1w/QfjYGdfpYBrh1VN/8ydTBVfwyVQgIDX Jx0Wu/3TWh8irlDWsXA+hL5UQB3WEbBCbqyGjGOR6PyqIc2dqVe1II8VkblNJKz9 tryBoqnaR1l4tsw4m5/NoO5SAgkPfE49E6H9L0ocKKNOg2rO3lTvBNNFKoTuE5VH SzJJzTsqxtT3yn0gPgDvVmRIHiT0WIYipfwTf1BrntBjr+FfZ24itqGAshEAX/xC VRkEuo/dAvDmkXTAny9Cq4W8tFva/R0N -----END CERTIFICATE-----Generated at Sun Jul 20 11:59:16 2025 by rpki-client