$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: OQNMClbArLtWLhxipbhsr3gOt9QcF6EgqAAEJD0sY4k= Subject key identifier: 4F:8B:0E:DF:22:15:2F:38:93:1C:D7:C6:3E:7D:F8:D0:88:B8:2C:16 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0D73 Signing time: Tue 02 Jun 2026 17:58:34 +0000 Manifest this update: Tue 02 Jun 2026 17:58:34 +0000 Manifest next update: Tue 09 Jun 2026 17:58:34 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: nL/9A/uRBpzx4XQA2DzBkCnpPykmSsi6+E1iTZI7oYg=) 2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) 3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Jun 2 17:58:34 2026 GMT Not After : Jun 9 17:58:34 2026 GMT Subject: CN=6a1f19ca-6d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:1c:d7:25:21:9f:1c:2f:2a:5c:f5:36:a4: 12:51:7b:cd:de:07:bd:f9:8f:d7:43:ec:8d:b8:c4: 1f:a9:9a:be:e9:87:f6:c2:2a:e4:01:f5:da:b5:ae: 59:0a:ce:ba:9d:14:75:5c:18:47:05:c8:92:d8:49: 71:e7:43:4d:af:a4:22:ca:2e:2a:0d:a0:3b:b0:65: 4c:0e:d1:fe:2c:66:01:62:d3:2e:b7:a6:12:24:42: 89:f3:18:78:74:21:01:71:16:da:69:60:8c:f7:1b: bd:4b:2a:1b:a0:45:86:7d:75:c6:e8:5e:a2:34:ff: 7f:85:c2:27:dc:9b:aa:44:3d:6d:48:26:6d:7b:fc: d0:88:62:58:2c:34:04:a5:d9:e6:0a:2b:bb:b4:94: 8d:cc:b9:59:c3:26:d5:e4:a5:57:ad:0f:c6:7d:ed: dd:70:f1:c2:fa:8e:d6:27:be:0f:3c:7a:5f:36:92: 75:7b:4d:f8:b3:35:d6:0a:f3:63:b6:9a:2b:bf:e0: 71:bb:aa:e0:d9:70:d0:5e:6b:a9:23:52:f6:df:b6: c0:a2:80:7f:4a:2c:29:d5:d5:7e:51:33:98:7a:92: a6:f0:c8:b8:89:7e:7b:2d:dc:cc:2a:a5:0e:38:0d: f6:9b:11:d7:dc:25:59:29:b9:61:f5:3e:e0:8f:db: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:0E:DF:22:15:2F:38:93:1C:D7:C6:3E:7D:F8:D0:88:B8:2C:16 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d3:aa:9e:91:39:bb:41:f4:b6:43:10:44:45:bf:06:03:8b: 48:d1:6c:a4:7e:19:3e:fb:70:7b:51:08:90:8e:46:76:bd:21: 16:e0:dc:27:49:55:7c:66:cb:ef:cb:f9:6c:ff:36:fa:0b:21: df:62:49:a1:c3:ff:81:80:0f:31:ae:11:16:9e:b1:14:4a:4c: d1:7f:bf:f2:77:38:f4:68:09:d2:72:b8:7d:96:77:74:95:98: c9:9a:e6:e1:16:2c:78:ef:5c:6d:ca:ba:60:99:75:aa:bf:c7: b9:1c:77:50:70:97:9f:25:21:00:15:1b:a3:bc:e4:8e:e2:7d: 50:42:ea:0e:ba:91:10:05:bd:de:0c:0a:4b:d6:31:a3:44:e0: 28:dc:20:60:62:5a:64:4f:b3:9d:dc:40:b9:36:00:af:9b:06: db:93:83:80:96:17:27:fb:97:b7:16:75:bb:c6:27:da:d6:e0: 3a:02:a2:d2:91:1d:ac:f2:99:86:29:dc:b5:82:39:50:14:85: 0e:0c:69:77:be:2d:69:a3:e9:3e:1b:b2:c9:ce:ff:d9:27:b1: 30:02:10:c8:7c:e1:ca:09:47:68:2d:46:db:40:ec:3f:87:c1: db:87:43:11:e8:bc:46:d5:56:56:25:6d:73:af:f0:71:1f:5a: c6:7f:b8:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwNjAyMTc1ODM0WhcNMjYwNjA5MTc1ODM0WjAYMRYwFAYD VQQDEw02YTFmMTljYS02ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD0c1yUhnxwvKlz1NqQSUXvN3ge9+Y/XQ+yNuMQfqZq+6Yf2wirkAfXata5Z Cs66nRR1XBhHBciS2Elx50NNr6Qiyi4qDaA7sGVMDtH+LGYBYtMut6YSJEKJ8xh4 dCEBcRbaaWCM9xu9SyoboEWGfXXG6F6iNP9/hcIn3JuqRD1tSCZte/zQiGJYLDQE pdnmCiu7tJSNzLlZwybV5KVXrQ/Gfe3dcPHC+o7WJ74PPHpfNpJ1e034szXWCvNj tporv+Bxu6rg2XDQXmupI1L237bAooB/Siwp1dV+UTOYepKm8Mi4iX57LdzMKqUO OA32mxHX3CVZKblh9T7gj9uF1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+LDt8i FS84kxzXxj59+NCIuCwWMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtOqnpE5u0H0tkMQREW/BgOLSNFspH4ZPvtwe1EIkI5Gdr0hFuDcJ0lVfGbL 78v5bP82+gsh32JJocP/gYAPMa4RFp6xFEpM0X+/8nc49GgJ0nK4fZZ3dJWYyZrm 4RYseO9cbcq6YJl1qr/HuRx3UHCXnyUhABUbo7zkjuJ9UELqDrqREAW93gwKS9Yx o0TgKNwgYGJaZE+zndxAuTYAr5sG25ODgJYXJ/uXtxZ1u8Yn2tbgOgKi0pEdrPKZ hinctYI5UBSFDgxpd74taaPpPhuyyc7/2SexMAIQyHzhyglHaC1G20DsP4fB24dD Eei8RtVWViVtc6/wcR9axn+4JQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:24 2026 by rpki-client