$ rpki-client -vvvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: nsufAAAY/t1R7d0e6k4e8V2S/VCnvHsFmZLzJgqATWg= Subject key identifier: C5:61:9F:AA:D0:F8:FA:73:6C:85:EA:BC:BA:5F:5C:39:89:76:E0:7C Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0DA3 Signing time: Fri 04 Sep 2026 17:52:03 +0000 Manifest this update: Fri 04 Sep 2026 17:52:02 +0000 Manifest next update: Fri 11 Sep 2026 17:52:02 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: ZBW2DDFnNhMj4s3Fi7hLNmTRbG4QnjlFTmaqPJXj3J0=) 2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=) 3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Sep 4 17:52:02 2026 GMT Not After : Sep 11 17:52:02 2026 GMT Subject: CN=6a9b0542-2caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:35:80:71:36:c0:62:fb:67:87:93:de:20: 74:10:ec:56:df:4d:c0:1f:6e:1c:10:5e:1b:ad:d4: e3:cb:ff:d5:df:eb:24:46:b3:9f:5c:19:40:99:40: 97:13:01:7b:3d:c4:2c:74:06:f9:da:88:8e:a5:2f: 1c:86:9a:d4:07:30:fc:31:2c:d0:f5:98:6f:05:04: 5b:85:15:4e:9e:c6:32:f1:5c:10:55:76:cd:e1:a8: 0b:0a:86:a0:41:a3:58:4a:8f:62:80:c7:3b:7f:b1: 73:d9:c8:00:ca:9f:bd:24:04:94:b0:33:52:8a:6b: 38:14:10:4c:f8:46:1b:c6:51:21:09:91:d1:a6:7f: 8b:5d:34:3c:79:4c:94:47:94:73:1e:46:2f:16:bf: bd:82:f7:6d:57:1a:c8:4f:da:d6:32:a0:17:cd:e9: 97:8b:26:2a:70:99:fb:f3:a9:af:8d:20:2c:28:76: 21:03:a0:aa:19:f7:53:19:be:0b:87:d6:05:28:2c: 12:26:74:be:87:1f:31:b3:3e:4b:07:19:e9:09:43: 09:bb:99:0c:bf:c8:9a:be:41:64:6c:cd:43:c9:62: c8:94:b4:cb:9f:54:bb:f1:d3:e0:8f:bf:d5:a0:34: 97:c9:1a:3b:3c:61:e8:db:9e:a7:b5:90:90:a9:a2: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:61:9F:AA:D0:F8:FA:73:6C:85:EA:BC:BA:5F:5C:39:89:76:E0:7C X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:13:34:86:f3:f5:ea:2b:0d:e2:3e:34:2f:e4:52:fd:4e: bb:38:1a:5e:4f:5d:ec:df:b4:fd:d6:32:aa:5a:63:49:d8:6d: f7:f7:22:de:a3:d6:ae:ba:3d:09:2f:05:6e:5d:34:66:9b:bd: a8:79:89:b5:9e:d6:3d:3b:15:3a:d5:20:0d:d2:c2:ec:65:ee: 94:6d:8d:71:bf:00:99:d1:bd:d2:1e:25:e7:1d:e7:86:46:f5: 87:01:93:94:62:fe:57:9b:eb:b8:46:07:ee:37:f2:57:91:0a: 2a:0b:b5:fa:19:d6:a8:30:83:cb:e8:4c:76:6f:bb:f8:6a:e5: 18:db:b6:8a:de:62:07:24:a8:58:3d:77:8c:62:4b:5a:c5:fb: e1:bc:ec:ed:a6:d3:f6:bc:57:79:07:0c:e7:dc:d0:32:95:f0: 87:d2:b2:a3:c1:ff:3f:6c:98:81:2d:03:2f:ba:d3:5e:8c:1d: 10:fe:c3:5c:0d:dc:f7:18:b0:31:1f:e5:05:f6:4d:69:93:ba: 11:5a:6f:bb:fc:5a:eb:6b:d7:c7:0f:c6:63:94:2f:16:7e:7d: 1b:31:3b:7e:1e:75:76:4f:2b:52:43:3f:42:dc:6c:d1:c1:ce: 14:69:b9:51:15:75:c2:5d:8d:d0:bc:5f:96:76:9b:52:42:ea: 23:86:ca:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjYwOTA0MTc1MjAyWhcNMjYwOTExMTc1MjAyWjAYMRYwFAYD VQQDEw02YTliMDU0Mi0yY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq181gHE2wGL7Z4eT3iB0EOxW303AH24cEF4brdTjy//V3+skRrOfXBlAmUCX EwF7PcQsdAb52oiOpS8chprUBzD8MSzQ9ZhvBQRbhRVOnsYy8VwQVXbN4agLCoag QaNYSo9igMc7f7Fz2cgAyp+9JASUsDNSims4FBBM+EYbxlEhCZHRpn+LXTQ8eUyU R5RzHkYvFr+9gvdtVxrIT9rWMqAXzemXiyYqcJn786mvjSAsKHYhA6CqGfdTGb4L h9YFKCwSJnS+hx8xsz5LBxnpCUMJu5kMv8iavkFkbM1DyWLIlLTLn1S78dPgj7/V oDSXyRo7PGHo256ntZCQqaLktQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVhn6rQ +PpzbIXqvLpfXDmJduB8MB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnDgTNIbz9eorDeI+NC/kUv1OuzgaXk9d7N+0/dYyqlpjSdht9/ci3qPWrro9 CS8Fbl00Zpu9qHmJtZ7WPTsVOtUgDdLC7GXulG2Ncb8AmdG90h4l5x3nhkb1hwGT lGL+V5vruEYH7jfyV5EKKgu1+hnWqDCDy+hMdm+7+GrlGNu2it5iBySoWD13jGJL WsX74bzs7abT9rxXeQcM59zQMpXwh9Kyo8H/P2yYgS0DL7rTXowdEP7DXA3c9xiw MR/lBfZNaZO6EVpvu/xa62vXxw/GY5QvFn59GzE7fh51dk8rUkM/Qtxs0cHOFGm5 URV1wl2N0LxflnabUkLqI4bKxw== -----END CERTIFICATE-----Generated at Sat Sep 5 04:53:49 2026 by rpki-client