$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: iXZFcvd2ymy+RNC9By95RBlmm+3dJt5CwPMwgBUvCFo= Subject key identifier: 92:05:9B:09:BB:58:0C:27:9F:60:6C:25:4C:AC:52:00:8F:19:6A:97 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B05 Signing time: Thu 24 Apr 2025 19:10:36 +0000 Manifest this update: Thu 24 Apr 2025 19:10:35 +0000 Manifest next update: Thu 01 May 2025 19:10:35 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: xg6ztpFFd6oT81M5jnTtnOmt3wMeB6QihRREQesU3Sg=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Apr 24 19:10:35 2025 GMT Not After : May 1 19:10:35 2025 GMT Subject: CN=680a8cac-9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:86:2a:f3:d2:7f:32:f1:9f:cf:89:04:f9: ac:0f:11:93:76:22:bc:28:e6:a2:92:9d:2c:d7:66: 89:fc:74:4c:b6:74:ab:8b:48:ca:3f:de:69:03:ee: 84:92:e8:d8:18:5a:6c:f6:45:13:fd:6e:d2:50:96: fe:85:3e:ba:d2:6d:d9:8c:2b:dc:76:96:ff:84:61: ff:72:85:75:c6:66:d2:a0:a8:f5:9c:46:13:01:9d: a9:f9:f5:8e:80:8b:49:30:18:cd:49:2c:6f:35:db: ee:62:3b:9a:8b:80:94:39:2c:31:cc:a5:a3:23:41: a2:3a:be:55:fa:c7:09:67:61:16:34:26:88:05:0e: 3e:a6:db:a6:3f:19:6a:e9:a4:86:05:82:01:b6:87: cb:95:0d:86:56:c0:46:26:11:02:d9:3f:1a:b3:bb: 3b:43:4b:ce:9c:0a:db:a9:13:23:9b:ce:31:74:8e: 09:bc:cf:41:69:dc:22:71:9c:fb:17:3a:19:94:5a: b9:14:4f:43:1d:52:28:0c:3a:66:42:3f:67:ec:85: 87:b0:f3:a8:ef:28:cd:76:6f:46:39:e2:11:64:a3: fc:02:87:88:d5:55:6a:0d:c8:7c:a5:73:31:3c:09: ed:80:69:3a:0a:a7:4b:bc:db:f3:5e:6f:e6:38:57: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:05:9B:09:BB:58:0C:27:9F:60:6C:25:4C:AC:52:00:8F:19:6A:97 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:f3:05:0a:ae:09:a4:71:9e:b8:be:17:7a:b4:b4:b1:c7: 4d:62:5f:98:bc:52:35:bc:bd:95:fa:7b:d5:30:39:bd:dd:d9: e9:e1:3c:3e:f0:dd:f1:f4:0c:ff:1d:0a:3a:e8:4a:66:c1:60: 39:79:aa:52:75:99:89:88:3f:65:10:d1:26:79:b7:b6:f2:1d: 09:4a:a3:22:42:85:37:60:0e:97:35:62:3d:1f:df:04:5e:34: a1:4c:25:06:05:ba:ac:f8:fd:e6:70:99:26:8d:99:01:5b:76: 4f:16:58:a5:82:bf:ea:9f:33:0f:21:72:d9:df:24:9b:09:49: ba:d8:75:a2:2f:2c:86:4e:75:fd:eb:3e:57:94:8f:b5:f0:42: 24:05:63:92:68:36:64:4e:fa:1a:b6:8f:61:20:3d:fe:63:f9: e4:92:fc:bc:06:96:b0:de:44:41:cf:6a:67:7a:76:7d:dc:4e: fc:9e:e3:80:f6:d1:ea:4d:9a:58:72:6d:65:9f:0d:f8:64:0a: c1:75:41:3b:6e:6a:27:3d:a3:7c:2d:f5:d7:a6:b3:ed:a9:40: c9:c0:47:65:e9:86:50:ec:e1:5f:34:07:42:93:7e:39:27:58: 37:35:ab:66:9d:02:dc:55:83:59:25:d3:58:20:50:ae:0c:a1: c3:10:1b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwNDI0MTkxMDM1WhcNMjUwNTAxMTkxMDM1WjAYMRYwFAYD VQQDEw02ODBhOGNhYy05ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2quGKvPSfzLxn8+JBPmsDxGTdiK8KOaikp0s12aJ/HRMtnSri0jKP95pA+6E kujYGFps9kUT/W7SUJb+hT660m3ZjCvcdpb/hGH/coV1xmbSoKj1nEYTAZ2p+fWO gItJMBjNSSxvNdvuYjuai4CUOSwxzKWjI0GiOr5V+scJZ2EWNCaIBQ4+ptumPxlq 6aSGBYIBtofLlQ2GVsBGJhEC2T8as7s7Q0vOnArbqRMjm84xdI4JvM9BadwicZz7 FzoZlFq5FE9DHVIoDDpmQj9n7IWHsPOo7yjNdm9GOeIRZKP8AoeI1VVqDch8pXMx PAntgGk6CqdLvNvzXm/mOFdNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIFmwm7 WAwnn2BsJUysUgCPGWqXMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCFPMFCq4JpHGeuL4XerS0scdNYl+YvFI1vL2V+nvVMDm93dnp4Tw+ 8N3x9Az/HQo66EpmwWA5eapSdZmJiD9lENEmebe28h0JSqMiQoU3YA6XNWI9H98E XjShTCUGBbqs+P3mcJkmjZkBW3ZPFlilgr/qnzMPIXLZ3ySbCUm62HWiLyyGTnX9 6z5XlI+18EIkBWOSaDZkTvoato9hID3+Y/nkkvy8Bpaw3kRBz2pnenZ93E78nuOA 9tHqTZpYcm1lnw34ZArBdUE7bmonPaN8LfXXprPtqUDJwEdl6YZQ7OFfNAdCk345 J1g3NatmnQLcVYNZJdNYIFCuDKHDEBsz -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:27 2025 by rpki-client