$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: shJLcEg3cr8AQdUtNp4RBapt5kr8KkFzkxBv9b8dwg4= Subject key identifier: 93:B8:76:CB:5E:F7:8E:D7:FC:2E:38:85:B6:B0:D0:DA:A1:8B:F5:B8 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B1E Signing time: Sat 14 Jun 2025 19:04:39 +0000 Manifest this update: Sat 14 Jun 2025 19:04:39 +0000 Manifest next update: Sat 21 Jun 2025 19:04:39 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: TkjMsEzfeVb2F4Gtc2mvB7bds6r8GK/U8nvpXFYA89I=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Jun 14 19:04:39 2025 GMT Not After : Jun 21 19:04:39 2025 GMT Subject: CN=684dc7c7-ddb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:94:7a:7d:36:8f:de:5b:cd:68:46:ec:13: c0:38:5c:ae:54:7c:07:e0:25:25:54:02:b7:54:3a: 8c:d5:63:99:c5:4e:f9:3e:08:45:8c:13:f7:d8:4a: 6b:b2:db:41:96:42:67:61:6b:cd:3f:80:ab:45:ab: dc:bc:b9:1a:bb:cb:61:ba:61:99:49:1e:86:b6:5c: 35:53:9a:1a:36:40:38:ed:92:03:8e:01:f2:d3:05: 2f:81:49:38:9f:23:fa:21:e1:a4:85:c5:8c:b8:03: 3d:0d:aa:45:33:70:19:16:88:c7:53:66:4f:4e:d0: 6b:ec:6f:01:a0:f0:00:ea:52:76:08:d1:25:c9:d9: c3:12:de:57:99:30:bd:a4:1f:02:f6:4d:ad:dc:20: 0d:3e:f2:23:59:5b:59:36:87:05:d5:fe:00:99:41: 5d:d8:6d:b6:b9:fc:60:b9:e1:09:1a:60:3f:c3:85: 40:b6:17:10:e0:5c:82:e9:29:d0:bb:7a:2e:98:18: 96:de:b2:4e:1d:12:f1:3e:0c:09:91:6d:d7:12:74: f7:7e:ee:81:c2:55:05:3f:50:32:3a:1f:a6:a6:49: a3:b8:44:6a:d8:f8:7d:73:56:0d:f1:8b:ff:d8:ce: cb:64:e9:25:04:ff:04:08:3c:9b:a3:48:0d:61:83: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B8:76:CB:5E:F7:8E:D7:FC:2E:38:85:B6:B0:D0:DA:A1:8B:F5:B8 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:31:c0:4d:49:89:df:a4:98:71:4a:71:f6:86:e7:a7:64:53: d1:6a:8f:59:1d:4d:f6:56:c9:3b:2d:0a:c6:92:c3:cc:46:7d: 22:5d:e1:07:11:a3:56:f7:53:1f:b4:dc:26:5a:79:d0:4e:81: 32:3c:b5:18:75:33:e1:88:be:3e:bb:e0:5f:ff:29:f6:3f:08: e1:38:66:40:9a:7b:eb:95:19:c7:22:dd:f6:76:cb:82:55:99: ba:a4:89:ef:66:4b:40:95:9b:05:b6:85:6e:41:51:09:94:46: e3:c5:bd:3f:95:d3:07:6e:c4:af:1d:4d:4d:77:70:7f:dc:d2: 2e:4b:1b:56:b3:43:f8:40:e7:f7:fa:33:af:d3:af:ef:c4:35: 26:d0:ea:fb:bf:4c:ff:b0:6f:39:14:c1:e7:a0:3c:d9:01:82: 47:dd:c2:70:80:c5:c6:01:44:9c:1f:41:a2:ce:ca:46:1b:23: 68:00:47:3f:8e:80:0b:b0:2b:0b:ed:7b:a1:ec:66:b0:f6:1c: ab:e5:7d:fc:8e:3c:78:40:de:b6:1a:73:43:20:f3:ce:08:f9: bf:9b:d8:09:02:ea:21:12:d4:b6:ab:7f:51:9b:a1:c9:49:cd: 70:ce:24:f1:92:84:a7:a1:5e:7a:d3:e1:d5:c3:89:99:db:b3: 19:24:18:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwNjE0MTkwNDM5WhcNMjUwNjIxMTkwNDM5WjAYMRYwFAYD VQQDEw02ODRkYzdjNy1kZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U2Uen02j95bzWhG7BPAOFyuVHwH4CUlVAK3VDqM1WOZxU75PghFjBP32Epr sttBlkJnYWvNP4CrRavcvLkau8thumGZSR6Gtlw1U5oaNkA47ZIDjgHy0wUvgUk4 nyP6IeGkhcWMuAM9DapFM3AZFojHU2ZPTtBr7G8BoPAA6lJ2CNElydnDEt5XmTC9 pB8C9k2t3CANPvIjWVtZNocF1f4AmUFd2G22ufxgueEJGmA/w4VAthcQ4FyC6SnQ u3oumBiW3rJOHRLxPgwJkW3XEnT3fu6BwlUFP1AyOh+mpkmjuERq2Ph9c1YN8Yv/ 2M7LZOklBP8ECDybo0gNYYNm2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO4dste 947X/C44hbaw0Nqhi/W4MB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmMcBNSYnfpJhxSnH2huenZFPRao9ZHU32Vsk7LQrGksPMRn0iXeEH EaNW91MftNwmWnnQToEyPLUYdTPhiL4+u+Bf/yn2PwjhOGZAmnvrlRnHIt32dsuC VZm6pInvZktAlZsFtoVuQVEJlEbjxb0/ldMHbsSvHU1Nd3B/3NIuSxtWs0P4QOf3 +jOv06/vxDUm0Or7v0z/sG85FMHnoDzZAYJH3cJwgMXGAUScH0GizspGGyNoAEc/ joALsCsL7Xuh7Gaw9hyr5X38jjx4QN62GnNDIPPOCPm/m9gJAuohEtS2q39Rm6HJ Sc1wziTxkoSnoV560+HVw4mZ27MZJBia -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:10 2025 by rpki-client