$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: NQVSO2gc+9FChIOgwhEe6uUr66NAdzC1iMI5QWMJzwQ= Subject key identifier: 10:39:E1:79:52:A2:A0:6A:C7:1D:8F:C6:7B:7F:BD:AA:DE:07:2D:4A Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B41 Signing time: Fri 22 Aug 2025 19:18:00 +0000 Manifest this update: Fri 22 Aug 2025 19:17:59 +0000 Manifest next update: Fri 29 Aug 2025 19:17:59 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: TZX2imFIp3crGxwv/UApPYv4ATWASCd1aN4ZoHSxsr8=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Aug 22 19:17:59 2025 GMT Not After : Aug 29 19:17:59 2025 GMT Subject: CN=68a8c267-d161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:d9:a6:b9:5c:c6:04:c1:d6:38:ac:1b:d8: d0:8f:f2:44:b5:9c:fa:bb:e5:c5:4c:a5:47:b4:25: 43:24:13:cc:3a:f2:ea:c1:47:cd:1c:da:c4:df:30: 50:d3:a6:da:5a:31:00:14:99:d3:69:c3:c5:21:6f: 90:7e:de:cc:03:62:ba:2c:e8:9e:73:62:ef:3a:87: 12:27:c6:a7:50:b3:04:73:89:27:af:1f:29:5e:a0: 36:00:f0:bb:29:ac:85:eb:fc:e9:57:3c:47:96:37: d2:5a:7c:91:a2:cf:c6:c9:6b:be:69:c7:7d:16:4e: d6:3f:83:ac:37:39:87:d0:f1:9b:53:f3:7c:06:a9: 9d:5a:67:65:fa:6f:0e:9e:57:96:87:dd:bf:6b:60: 5e:99:34:73:b6:1f:10:a1:10:0b:0e:6c:8c:d3:6f: 4f:56:6f:6a:77:3a:cc:98:42:21:7b:48:55:76:e3: b5:e2:a2:78:d2:7d:8a:5d:f8:a0:71:ed:9a:54:ae: d9:34:81:cb:45:11:48:69:5d:1d:25:b7:5b:47:b1: 20:40:d9:ce:60:e8:a4:29:04:26:2c:52:aa:23:c7: a1:86:2a:44:bf:b9:7c:74:e1:29:fd:c9:6e:ef:b6: 90:45:c4:df:17:2f:62:1f:8f:ba:eb:80:ad:14:d5: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:39:E1:79:52:A2:A0:6A:C7:1D:8F:C6:7B:7F:BD:AA:DE:07:2D:4A X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a3:49:3b:f8:fc:d5:4d:e4:12:d5:34:e4:cb:f6:10:86:03: 04:ab:be:9e:a8:c2:af:d0:fc:e3:47:c3:76:79:fc:9d:e0:df: 55:11:26:1f:58:cf:5a:33:dd:f7:c4:5b:34:70:93:74:4f:9e: 7b:2f:26:47:dc:9b:f2:e0:da:0d:9c:d6:5f:fe:af:4d:81:e7: 9d:53:0e:ca:48:51:56:24:d5:24:22:d2:5a:3d:e4:55:32:06: 99:ea:04:4c:cc:ed:f0:19:10:0c:f4:81:ac:e7:63:35:95:ce: 49:da:5e:ff:90:3a:ba:ad:5a:e6:fc:64:1c:12:23:9c:2e:db: 31:93:34:f1:ad:5e:93:bc:ca:36:12:33:6d:5c:c0:21:7f:44: 16:69:bb:15:93:a8:9c:43:8e:f9:4d:38:b4:28:38:d1:cd:e5: 02:7e:91:28:da:23:70:0c:ad:86:aa:79:eb:07:f5:3f:3e:08: b1:6f:c1:cf:71:a5:33:fd:44:fc:fc:20:51:b4:fb:b6:52:da: a3:97:ba:26:e6:78:25:e9:93:65:c2:ef:99:21:89:9d:25:16: fe:14:27:bd:38:f4:2f:91:4a:5b:32:75:1e:c2:7a:84:f3:99: 41:37:10:0d:d6:28:8d:7f:18:8b:ef:83:95:97:30:76:f8:07: ba:4a:45:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwODIyMTkxNzU5WhcNMjUwODI5MTkxNzU5WjAYMRYwFAYD VQQDEw02OGE4YzI2Ny1kMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwLZprlcxgTB1jisG9jQj/JEtZz6u+XFTKVHtCVDJBPMOvLqwUfNHNrE3zBQ 06baWjEAFJnTacPFIW+Qft7MA2K6LOiec2LvOocSJ8anULMEc4knrx8pXqA2APC7 KayF6/zpVzxHljfSWnyRos/GyWu+acd9Fk7WP4OsNzmH0PGbU/N8BqmdWmdl+m8O nleWh92/a2BemTRzth8QoRALDmyM029PVm9qdzrMmEIhe0hVduO14qJ40n2KXfig ce2aVK7ZNIHLRRFIaV0dJbdbR7EgQNnOYOikKQQmLFKqI8ehhipEv7l8dOEp/clu 77aQRcTfFy9iH4+664CtFNUREwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA54XlS oqBqxx2Pxnt/vareBy1KMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSo0k7+PzVTeQS1TTky/YQhgMEq76eqMKv0PzjR8N2efyd4N9VESYf WM9aM933xFs0cJN0T557LyZH3Jvy4NoNnNZf/q9NgeedUw7KSFFWJNUkItJaPeRV MgaZ6gRMzO3wGRAM9IGs52M1lc5J2l7/kDq6rVrm/GQcEiOcLtsxkzTxrV6TvMo2 EjNtXMAhf0QWabsVk6icQ475TTi0KDjRzeUCfpEo2iNwDK2GqnnrB/U/Pgixb8HP caUz/UT8/CBRtPu2Utqjl7om5ngl6ZNlwu+ZIYmdJRb+FCe9OPQvkUpbMnUewnqE 85lBNxAN1iiNfxiL74OVlzB2+Ae6SkXS -----END CERTIFICATE-----Generated at Sun Aug 24 00:40:05 2025 by rpki-client