$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: scuSnZThPsuqnjuYqpo9L0JbnpJ7zgV1FjhfKNzm4Mc= Subject key identifier: DC:5E:8A:78:52:B7:31:B8:0D:A0:1B:B0:93:AF:3E:04:A8:CF:15:EF Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B3A Signing time: Fri 08 Aug 2025 19:26:01 +0000 Manifest this update: Fri 08 Aug 2025 19:26:01 +0000 Manifest next update: Fri 15 Aug 2025 19:26:01 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: G6g+roI530ezUwgKKeRLLLFav2+vXfpkml9ywoEpVdo=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Aug 8 19:26:01 2025 GMT Not After : Aug 15 19:26:01 2025 GMT Subject: CN=68964f49-29c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:eb:03:56:79:95:98:7e:b8:46:f6:cd:46: b2:0d:63:6e:f7:c5:3c:af:dd:d3:15:f7:2b:cc:5b: ac:ae:66:88:73:3b:b5:e9:ce:aa:09:07:62:89:2c: 31:d2:5e:d9:e9:17:b8:86:46:d1:43:ef:51:fb:8e: 73:24:07:43:80:8c:9a:39:7e:de:24:a2:eb:d6:73: 3a:8b:a5:8c:c2:0f:1d:cb:0e:35:12:18:52:50:d0: 88:29:8a:c3:7b:39:ab:cc:7c:25:f3:eb:2a:e4:1f: 5a:26:a7:3d:82:50:a4:9a:1b:6a:79:a5:57:03:41: 3c:9a:67:62:0b:0d:b9:c1:46:b9:92:15:a2:bf:8d: be:34:91:79:3d:4c:18:f7:b6:32:32:9d:6a:3a:74: e4:88:be:38:b6:28:56:43:37:6e:6e:c1:bf:3e:2a: ba:be:9e:45:43:c2:73:b7:87:45:04:e7:1f:1d:95: 87:24:1e:7b:4d:9d:e3:9c:87:ea:8e:64:42:29:4d: 70:c5:44:e5:00:70:7d:f5:a6:af:44:f8:2a:90:bf: b1:bd:e0:94:ff:f4:9d:c9:08:f3:ab:ff:89:ee:f4: d2:ea:26:ac:bf:90:3d:19:5b:97:e5:5d:7a:d9:02: 3a:1b:04:bb:55:32:f3:59:08:ee:04:12:c3:ba:a4: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:8A:78:52:B7:31:B8:0D:A0:1B:B0:93:AF:3E:04:A8:CF:15:EF X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1b:be:0e:06:b5:fe:9e:df:b2:ad:a8:41:36:f7:ea:24:fd: f9:d9:59:5e:bc:96:03:ef:a1:f5:d8:bb:7c:8e:7f:71:28:6b: 80:ae:95:51:39:f7:c9:08:56:87:6e:e7:0a:b4:29:78:2e:7a: bc:99:b5:b6:48:03:7d:2d:25:1d:f7:85:ce:28:3b:af:d2:be: 95:5b:9c:bf:21:f5:66:50:fe:b8:9b:bc:74:2a:c4:bf:bf:ab: ba:9c:c6:74:19:8a:43:ed:f2:f2:73:fb:3a:38:da:59:b6:41: 98:50:4c:d5:71:ba:0d:96:d4:ed:2d:f3:90:5c:68:2c:50:5e: 56:31:d6:53:e8:29:dd:51:75:28:8d:d7:c0:ed:2d:c9:d2:fa: 60:19:8c:b6:6e:5d:18:a1:c4:98:34:a5:df:e1:a7:8f:be:c4: 5f:28:fb:f3:4e:95:73:c4:61:dd:62:75:a2:ae:ed:27:ac:93: f8:61:f5:87:5c:17:49:cb:bb:59:71:c8:ae:34:16:f3:14:5d: 6a:9a:65:42:90:a8:1f:38:49:00:3f:2b:51:13:3a:6b:f6:ad: 91:ac:10:18:81:2d:0d:4d:3b:a0:d4:9a:53:a9:7f:a3:63:25: 32:8d:fc:99:3e:3f:fa:63:1e:6e:87:7e:38:5b:33:0d:3e:1a: d9:d9:1b:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwODA4MTkyNjAxWhcNMjUwODE1MTkyNjAxWjAYMRYwFAYD VQQDEw02ODk2NGY0OS0yOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i7rA1Z5lZh+uEb2zUayDWNu98U8r93TFfcrzFusrmaIczu16c6qCQdiiSwx 0l7Z6Re4hkbRQ+9R+45zJAdDgIyaOX7eJKLr1nM6i6WMwg8dyw41EhhSUNCIKYrD ezmrzHwl8+sq5B9aJqc9glCkmhtqeaVXA0E8mmdiCw25wUa5khWiv42+NJF5PUwY 97YyMp1qOnTkiL44tihWQzdubsG/Piq6vp5FQ8Jzt4dFBOcfHZWHJB57TZ3jnIfq jmRCKU1wxUTlAHB99aavRPgqkL+xveCU//SdyQjzq/+J7vTS6iasv5A9GVuX5V16 2QI6GwS7VTLzWQjuBBLDuqQzQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxeinhS tzG4DaAbsJOvPgSozxXvMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbG74OBrX+nt+yrahBNvfqJP352VlevJYD76H12Lt8jn9xKGuArpVR OffJCFaHbucKtCl4Lnq8mbW2SAN9LSUd94XOKDuv0r6VW5y/IfVmUP64m7x0KsS/ v6u6nMZ0GYpD7fLyc/s6ONpZtkGYUEzVcboNltTtLfOQXGgsUF5WMdZT6CndUXUo jdfA7S3J0vpgGYy2bl0YocSYNKXf4aePvsRfKPvzTpVzxGHdYnWiru0nrJP4YfWH XBdJy7tZcciuNBbzFF1qmmVCkKgfOEkAPytREzpr9q2RrBAYgS0NTTug1JpTqX+j YyUyjfyZPj/6Yx5uh344WzMNPhrZ2Rus -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:44 2025 by rpki-client