$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: rfHXrzG5DAz+8B/MKcu66Pnq6YUEdVgbcvr/ALSjxQE= Subject key identifier: 61:DC:64:4D:BE:06:0E:94:CB:A7:A5:D6:1D:89:ED:69:E1:55:8E:6F Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B5E Signing time: Sat 18 Oct 2025 19:59:33 +0000 Manifest this update: Sat 18 Oct 2025 19:59:33 +0000 Manifest next update: Sat 25 Oct 2025 19:59:33 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: EMZQWRyFvsXrPEDcaJ8P6dyfp0sbiWcnAwE8jkohxjg=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Oct 18 19:59:33 2025 GMT Not After : Oct 25 19:59:33 2025 GMT Subject: CN=68f3f1a5-c3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:d4:6c:5f:58:8e:b3:d7:e3:e9:2f:88:76: ab:a7:e9:e7:3c:41:67:e8:c4:c8:92:7f:89:dd:fa: 36:ee:f2:b9:15:00:b3:11:48:58:10:06:98:2e:d7: 20:a2:fc:a1:8f:4f:ee:7a:82:04:77:64:a0:b0:be: 14:0f:32:91:b1:3f:5a:b6:aa:d1:8f:28:7b:47:f8: 5e:22:2e:87:3a:9a:fa:ef:27:26:06:e2:e3:0f:7b: b2:1c:d4:f1:6f:06:b7:15:18:c5:31:62:d7:d9:6a: 8b:e6:1e:44:5c:fc:96:d6:a8:8d:71:68:d2:f4:ce: ee:05:64:44:0c:1b:4a:16:18:da:cb:2e:d1:88:dd: 13:1c:46:ee:99:ea:b7:01:67:18:12:ad:d5:70:73: 66:a3:98:01:b0:e9:f6:6d:04:2c:3d:ad:ad:42:b8: af:52:18:a9:94:7f:eb:e0:43:bc:49:9f:89:10:79: f5:10:0c:d8:52:6d:6f:db:2a:9a:5f:c1:a3:67:3d: 2e:9f:36:60:c8:b9:2e:0b:79:e9:66:3a:0a:ab:75: c1:94:c5:90:30:43:ba:6e:de:3b:10:07:07:c2:82: 26:51:02:83:d6:68:96:cc:d4:62:11:4c:07:eb:9c: 1e:b6:2c:00:e1:91:c5:d9:69:8d:c5:10:de:1c:44: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DC:64:4D:BE:06:0E:94:CB:A7:A5:D6:1D:89:ED:69:E1:55:8E:6F X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:eb:ad:2c:8c:b3:07:3e:82:a9:22:42:c6:0b:3c:9d:56:31: f4:6b:3c:67:28:14:e0:69:94:97:98:18:76:b9:b9:34:3b:42: e9:5d:10:28:af:1b:a4:77:6d:1e:a8:88:3d:b3:80:90:80:a2: 93:7e:07:06:0b:8b:63:14:54:6d:11:af:bc:6e:67:40:df:f4: 06:d0:d7:92:1b:e4:45:3a:81:95:26:f1:9a:a4:d8:cd:9f:57: 7d:cd:6e:11:4b:42:72:cc:11:5a:87:95:31:e0:1a:8b:93:d9: 43:4e:c7:55:80:a4:cb:13:f1:9e:c6:31:c5:c2:0c:27:7b:73: 8e:5e:19:ba:d1:69:6b:cc:e4:57:cd:e0:93:44:e6:57:c4:40: 26:93:ef:50:a6:df:f9:5c:b7:ae:b4:6c:86:13:2d:05:1c:6b: f6:6f:47:c1:f6:f3:66:b8:44:55:c1:ff:83:c2:9a:53:c6:54: 1e:66:5e:ff:0d:0f:1e:cb:21:f7:4b:10:e7:61:69:4f:07:75: 03:b9:7f:b7:6d:cf:11:97:ba:a4:f8:15:ac:b1:f6:a4:d7:60: 43:25:9f:a9:2e:b4:1a:66:b8:8f:b0:dc:40:65:ab:8b:43:dc: de:cd:d3:0e:90:f8:82:f2:56:f5:f7:e0:b5:2e:b5:a2:6d:60: 57:9c:61:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUxMDE4MTk1OTMzWhcNMjUxMDI1MTk1OTMzWjAYMRYwFAYD VQQDEw02OGYzZjFhNS1jM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WrUbF9YjrPX4+kviHarp+nnPEFn6MTIkn+J3fo27vK5FQCzEUhYEAaYLtcg ovyhj0/ueoIEd2SgsL4UDzKRsT9atqrRjyh7R/heIi6HOpr67ycmBuLjD3uyHNTx bwa3FRjFMWLX2WqL5h5EXPyW1qiNcWjS9M7uBWREDBtKFhjayy7RiN0THEbumeq3 AWcYEq3VcHNmo5gBsOn2bQQsPa2tQrivUhiplH/r4EO8SZ+JEHn1EAzYUm1v2yqa X8GjZz0unzZgyLkuC3npZjoKq3XBlMWQMEO6bt47EAcHwoImUQKD1miWzNRiEUwH 65wetiwA4ZHF2WmNxRDeHES+0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHcZE2+ Bg6Uy6el1h2J7WnhVY5vMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb660sjLMHPoKpIkLGCzydVjH0azxnKBTgaZSXmBh2ubk0O0LpXRAo rxukd20eqIg9s4CQgKKTfgcGC4tjFFRtEa+8bmdA3/QG0NeSG+RFOoGVJvGapNjN n1d9zW4RS0JyzBFah5Ux4BqLk9lDTsdVgKTLE/GexjHFwgwne3OOXhm60WlrzORX zeCTROZXxEAmk+9Qpt/5XLeutGyGEy0FHGv2b0fB9vNmuERVwf+DwppTxlQeZl7/ DQ8eyyH3SxDnYWlPB3UDuX+3bc8Rl7qk+BWssfak12BDJZ+pLrQaZriPsNxAZauL Q9zezdMOkPiC8lb19+C1LrWibWBXnGFG -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:17 2025 by rpki-client