$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: iRO8mw2C3Zt7EM1CqptdSovTdj9irDIzpw1Q+fpu9YQ= Subject key identifier: B0:15:D0:2C:0B:C0:68:20:D3:AA:A6:02:3E:8A:85:D9:B4:07:2D:05 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B69 Signing time: Tue 04 Nov 2025 19:12:02 +0000 Manifest this update: Tue 04 Nov 2025 19:12:01 +0000 Manifest next update: Tue 11 Nov 2025 19:12:01 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: s29ILzrBVckKUWHONpfZb9XHTJw75HgtmPpwu16+XCg=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Nov 4 19:12:01 2025 GMT Not After : Nov 11 19:12:01 2025 GMT Subject: CN=690a5002-0291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:16:71:e4:36:89:4e:96:5b:a4:0c:49:35: df:b0:96:a4:b7:d7:f2:46:ac:88:56:63:60:03:7f: 9c:17:9c:6f:fc:21:f5:69:6a:35:0a:37:cb:90:50: 02:1b:b1:0c:e4:4c:b5:b0:46:0e:42:21:fd:96:6b: c2:fd:51:26:f3:d4:b7:03:a6:4a:a3:74:d2:4b:b4: f2:a5:9e:a4:d9:4c:b9:07:11:05:e4:ef:16:60:16: f8:c8:48:04:47:07:6b:11:0e:b7:b9:50:fd:bd:4e: ff:0a:2a:79:5f:e8:ab:09:c8:63:0b:11:3c:d7:73: af:9c:18:5b:53:bd:c6:47:24:61:85:2f:cc:ba:45: 0d:76:c9:d5:21:6b:18:ee:56:85:0a:ba:97:28:b1: 56:24:b9:6a:d5:fb:9f:b4:9c:f2:a4:b2:2b:85:56: 05:a1:be:c3:6a:43:fd:98:45:fa:56:30:ac:2e:06: 64:c3:24:0b:07:fc:a0:75:09:2d:69:bd:61:39:a6: 94:4c:9e:4c:13:f6:1f:a2:8b:ca:62:93:b9:e1:2f: 3c:c9:24:fe:d9:09:ed:5b:ea:58:1b:55:0e:bb:98: 19:ba:6a:9f:6e:31:b0:b3:3e:40:c4:e5:58:3e:73: e3:43:e9:96:60:63:18:99:f3:9d:06:e6:6f:d8:8c: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:D0:2C:0B:C0:68:20:D3:AA:A6:02:3E:8A:85:D9:B4:07:2D:05 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c8:44:b5:f5:3a:e4:2b:97:d1:ce:4e:3e:1f:d5:78:4d:b1: 08:b2:1e:56:50:e8:f1:4c:50:3a:04:0e:0d:a5:a7:61:d4:ba: f1:48:d9:4a:b8:d7:5c:bd:9d:03:a0:81:da:94:2e:5f:9b:ab: 20:fa:1e:14:0b:62:94:35:c1:a9:2b:4c:15:03:c3:53:c3:3e: 5d:db:87:c2:de:63:fe:19:09:dc:90:0b:38:88:b7:61:29:02: b3:d5:5e:00:81:2e:b6:66:af:6e:81:7c:35:0f:cf:0a:f3:3d: 30:f6:a5:b4:9f:2e:59:27:3e:be:ee:57:9d:57:b4:83:c2:4a: ab:5a:e8:99:4c:31:dd:d3:20:47:20:f2:b9:e5:de:0b:6b:1b: e7:97:fe:f8:a9:aa:32:85:2a:20:fb:31:83:40:cf:2f:5a:61: 96:bf:c7:1d:e3:13:ab:79:c4:91:93:66:d6:80:c0:4c:e7:c3: a1:de:9b:f6:26:95:5d:a2:f1:45:bb:e5:7b:38:61:07:49:48: 8d:ed:91:18:f6:f7:26:10:14:32:ea:af:3b:cd:c0:96:2a:12: 5e:b4:1e:02:80:1d:e6:1c:7b:f1:21:b1:34:25:9d:6f:fc:8f: 66:ff:d0:32:aa:af:b1:31:42:bc:6b:08:bf:e5:02:f6:57:be: b9:a8:a4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUxMTA0MTkxMjAxWhcNMjUxMTExMTkxMjAxWjAYMRYwFAYD VQQDEw02OTBhNTAwMi0wMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6AWceQ2iU6WW6QMSTXfsJakt9fyRqyIVmNgA3+cF5xv/CH1aWo1CjfLkFAC G7EM5Ey1sEYOQiH9lmvC/VEm89S3A6ZKo3TSS7TypZ6k2Uy5BxEF5O8WYBb4yEgE RwdrEQ63uVD9vU7/Cip5X+irCchjCxE813OvnBhbU73GRyRhhS/MukUNdsnVIWsY 7laFCrqXKLFWJLlq1fuftJzypLIrhVYFob7DakP9mEX6VjCsLgZkwyQLB/ygdQkt ab1hOaaUTJ5ME/YfoovKYpO54S88yST+2QntW+pYG1UOu5gZumqfbjGwsz5AxOVY PnPjQ+mWYGMYmfOdBuZv2IxBrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAV0CwL wGgg06qmAj6Khdm0By0FMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/yES19TrkK5fRzk4+H9V4TbEIsh5WUOjxTFA6BA4Npadh1LrxSNlK uNdcvZ0DoIHalC5fm6sg+h4UC2KUNcGpK0wVA8NTwz5d24fC3mP+GQnckAs4iLdh KQKz1V4AgS62Zq9ugXw1D88K8z0w9qW0ny5ZJz6+7ledV7SDwkqrWuiZTDHd0yBH IPK55d4Laxvnl/74qaoyhSog+zGDQM8vWmGWv8cd4xOrecSRk2bWgMBM58Oh3pv2 JpVdovFFu+V7OGEHSUiN7ZEY9vcmEBQy6q87zcCWKhJetB4CgB3mHHvxIbE0JZ1v /I9m/9Ayqq+xMUK8awi/5QL2V765qKQn -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:45 2025 by rpki-client