$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: yTFpoG5kWFwCBUWHTe+jxvL351r1oqmkw2olMnxvjHM= Subject key identifier: 2A:A4:D8:30:52:34:39:66:88:41:E1:3D:66:09:3B:E1:D7:E7:04:90 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0C0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0BFC Signing time: Tue 28 Jul 2026 19:07:15 +0000 Manifest this update: Tue 28 Jul 2026 19:07:14 +0000 Manifest next update: Tue 04 Aug 2026 19:07:14 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: PddhQsywNEQGi9rN33AceaD57aMpuQhrQ/zGQG+wcII=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: ZiiZYbmkg3n6zqgPw8ZXM9niSF2z+ejf3luh9TSJfQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Jul 28 19:07:14 2026 GMT Not After : Aug 4 19:07:14 2026 GMT Subject: CN=6a68fde3-522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:6e:54:9e:57:6e:3b:bb:96:b4:a2:43:f3: 2f:cb:55:38:9c:63:1d:9f:30:96:c5:b5:ee:60:35: fa:83:c5:1d:5a:c4:d8:8e:41:9c:50:ff:fc:71:17: 6d:89:2f:77:95:eb:c3:22:0c:39:ec:73:1d:1b:3c: 58:b6:8f:2f:02:9e:2c:3f:03:08:f8:3f:fe:7f:96: 23:3d:17:c9:0c:7e:1d:e9:dc:f4:47:62:e6:f9:3d: 44:82:cf:cd:c0:c8:9c:db:0b:65:e4:bd:48:89:e2: 32:80:3d:0f:fb:fe:fa:26:0f:f4:94:15:70:01:fb: 30:dd:01:62:13:b0:9b:fc:e2:ce:1a:3d:ff:cd:17: 11:12:2b:72:be:29:6f:91:ce:3e:b2:4a:44:84:00: f5:84:c9:4c:e5:6b:61:e3:64:df:3d:c6:d2:fd:df: b3:03:c1:1d:51:a2:6c:3c:89:79:db:3f:a7:5e:8b: b2:67:06:e9:a2:e3:8f:e9:ef:37:f5:61:3c:fe:90: 59:93:32:5c:33:0a:e6:2a:1a:8f:b2:f9:99:33:29: fc:a7:43:2c:30:08:f3:d2:df:ad:e8:8e:f0:98:e8: 4a:ab:9e:89:1e:51:a4:51:19:d8:2e:b4:7e:15:5d: 7b:90:d1:37:53:8e:79:3e:82:27:de:f3:d3:68:03: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:D8:30:52:34:39:66:88:41:E1:3D:66:09:3B:E1:D7:E7:04:90 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6d:76:9d:f5:68:ee:d0:b8:9a:66:c3:c1:50:6c:d5:45:7c: 16:f0:ca:fd:c3:06:5e:fe:d3:2c:bb:a1:c6:63:e9:24:b5:9e: 62:fb:b2:59:47:dc:db:85:e2:75:d7:9b:00:db:9e:1e:60:67: ea:fd:72:93:3c:0a:97:65:c1:c3:5a:e4:d1:ae:74:96:80:da: 10:49:e5:c2:03:e3:45:ba:93:a8:83:3e:8d:0a:56:cf:b3:89: 37:11:ce:4a:7a:86:87:18:91:8d:dd:be:a3:32:f3:45:0f:de: 28:e5:ca:cc:0e:4b:5e:1f:9b:66:f0:51:63:c1:ea:11:30:35: 0f:96:94:6e:b6:d8:f1:80:3d:9a:cb:24:ff:cf:4f:a0:66:71: 17:75:90:db:19:35:72:94:77:91:85:6a:9d:0a:2f:f0:cb:57: 4a:27:a4:24:5c:ab:7a:af:75:e1:6a:db:82:69:2b:a0:96:d4: 04:69:a8:79:fd:6d:30:79:89:46:82:1d:ce:d5:ea:03:f9:db: 24:15:40:eb:69:28:5c:fc:fe:95:58:cc:27:be:bf:84:84:27: cb:f3:02:ee:96:01:fa:3e:bf:39:94:36:ab:34:83:9f:2c:ed: 1a:b1:3e:34:88:05:9d:13:59:c8:ac:53:0f:a6:fb:af:72:9f: 32:15:a4:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjYwNzI4MTkwNzE0WhcNMjYwODA0MTkwNzE0WjAYMRYwFAYD VQQDEw02YTY4ZmRlMy01MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wBuVJ5Xbju7lrSiQ/Mvy1U4nGMdnzCWxbXuYDX6g8UdWsTYjkGcUP/8cRdt iS93levDIgw57HMdGzxYto8vAp4sPwMI+D/+f5YjPRfJDH4d6dz0R2Lm+T1Egs/N wMic2wtl5L1IieIygD0P+/76Jg/0lBVwAfsw3QFiE7Cb/OLOGj3/zRcREityvilv kc4+skpEhAD1hMlM5Wth42TfPcbS/d+zA8EdUaJsPIl52z+nXouyZwbpouOP6e83 9WE8/pBZkzJcMwrmKhqPsvmZMyn8p0MsMAjz0t+t6I7wmOhKq56JHlGkURnYLrR+ FV17kNE3U455PoIn3vPTaAPNAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqk2DBS NDlmiEHhPWYJO+HX5wSQMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFm12nfVo7tC4mmbDwVBs1UV8FvDK/cMGXv7TLLuhxmPpJLWeYvuyWUfc24Xi ddebANueHmBn6v1ykzwKl2XBw1rk0a50loDaEEnlwgPjRbqTqIM+jQpWz7OJNxHO SnqGhxiRjd2+ozLzRQ/eKOXKzA5LXh+bZvBRY8HqETA1D5aUbrbY8YA9mssk/89P oGZxF3WQ2xk1cpR3kYVqnQov8MtXSiekJFyreq914WrbgmkroJbUBGmoef1tMHmJ RoIdztXqA/nbJBVA62koXPz+lVjMJ76/hIQny/MC7pYB+j6/OZQ2qzSDnyztGrE+ NIgFnRNZyKxTD6b7r3KfMhWkKA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:08:16 2026 by rpki-client