$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: +90kklNAdeoN/j1zUqoZizwMgyA8Z2FqiAHgW4HPrDM= Subject key identifier: 4E:56:36:16:C4:C9:E8:BA:DC:FD:AC:F9:70:29:57:AC:EB:80:66:71 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B27 Signing time: Wed 02 Jul 2025 19:26:06 +0000 Manifest this update: Wed 02 Jul 2025 19:26:05 +0000 Manifest next update: Wed 09 Jul 2025 19:26:05 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: zByg0cJoZUFxzlVwzy/zPhhDZYN4X3zNJ+q7kGHD+fw=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Jul 2 19:26:05 2025 GMT Not After : Jul 9 19:26:05 2025 GMT Subject: CN=686587cd-7b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:98:1d:76:b1:35:ae:5a:b6:77:ff:81:e2: ba:c2:8a:c5:71:ca:b7:9c:34:5e:b0:ff:62:fa:4e: 1a:e2:f3:14:57:70:71:2d:5f:af:c0:8a:be:62:db: e1:8d:56:55:5d:c9:38:d5:18:de:4c:78:3c:eb:ab: fa:89:d4:82:b9:28:01:e4:75:6b:68:c3:54:f5:4b: 0f:88:67:01:c4:2a:ab:e7:8f:6b:ee:a5:86:da:7d: 2c:f4:a8:35:f9:f2:50:54:bb:dd:3e:dd:1d:48:19: 22:6e:19:8f:78:ff:f2:d5:cc:08:31:b7:2d:fd:17: 81:a8:9d:e3:2d:53:da:6a:48:12:2e:5a:a7:2c:4b: 3d:e8:4e:bf:60:c7:11:67:cb:ed:85:63:ae:da:1e: 98:9e:27:0d:8f:fd:f5:17:4a:03:1f:78:45:68:22: 95:f9:83:55:59:12:60:55:a4:43:b9:0d:47:65:60: fb:3d:f2:27:46:5e:31:45:47:4f:85:10:93:80:ee: 28:6b:29:bc:43:38:ea:a8:37:33:6c:70:8c:77:10: 34:f3:59:f7:ca:fe:29:26:ec:7f:10:06:2f:b0:13: 0b:da:f7:77:1d:85:76:45:a7:f2:13:01:0d:e8:cf: 25:10:b8:29:de:56:df:99:2d:be:3e:47:f9:bb:38: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:36:16:C4:C9:E8:BA:DC:FD:AC:F9:70:29:57:AC:EB:80:66:71 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:eb:09:75:54:fa:0a:49:59:f2:e8:ba:82:4d:c1:55:5d: 06:f2:ca:72:7e:27:82:0c:a5:42:15:2d:bf:ab:17:cd:25:39: 74:d2:75:8f:b6:10:92:a2:39:58:fe:b8:50:1a:e2:92:27:c4: e9:3d:4a:71:72:d0:cd:3c:34:08:e5:00:97:41:40:5a:22:23: 0a:3c:44:60:e4:1e:1a:1f:05:fc:ee:99:9b:fc:99:fd:07:c9: 53:9f:2b:38:97:72:4c:3c:2f:27:9b:86:5f:29:eb:69:a4:d7: cd:a2:94:04:c8:a9:c1:22:c8:f2:22:88:53:51:93:f0:65:5a: f2:09:ed:f0:b2:3d:a4:d6:66:ec:d9:90:68:43:23:21:ea:ec: d4:84:2f:49:09:b6:df:ca:8e:00:55:6c:a0:ec:1f:bf:a5:58: af:70:ec:22:a2:e4:ac:c4:9c:d9:6c:09:5d:4e:2c:ec:fd:64: 99:60:aa:e2:ae:32:37:38:83:f3:2f:27:4b:ed:13:55:61:1b: 4f:9b:5c:0e:6b:af:04:11:c2:89:01:8b:b9:e4:cb:41:cc:4d: a1:4f:bb:f5:cb:30:f8:9e:b5:2d:24:7e:a0:76:84:0a:4d:79: 65:2c:53:42:30:91:cc:53:71:5d:49:9f:f5:a8:fa:f5:f7:b9: 8d:d4:3d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwNzAyMTkyNjA1WhcNMjUwNzA5MTkyNjA1WjAYMRYwFAYD VQQDEw02ODY1ODdjZC03YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHyYHXaxNa5atnf/geK6worFccq3nDResP9i+k4a4vMUV3BxLV+vwIq+Ytvh jVZVXck41RjeTHg866v6idSCuSgB5HVraMNU9UsPiGcBxCqr549r7qWG2n0s9Kg1 +fJQVLvdPt0dSBkibhmPeP/y1cwIMbct/ReBqJ3jLVPaakgSLlqnLEs96E6/YMcR Z8vthWOu2h6YnicNj/31F0oDH3hFaCKV+YNVWRJgVaRDuQ1HZWD7PfInRl4xRUdP hRCTgO4oaym8QzjqqDczbHCMdxA081n3yv4pJux/EAYvsBML2vd3HYV2RafyEwEN 6M8lELgp3lbfmS2+Pkf5uzio1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5WNhbE yei63P2s+XApV6zrgGZxMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnaOsJdVT6CklZ8ui6gk3BVV0G8spyfieCDKVCFS2/qxfNJTl00nWP thCSojlY/rhQGuKSJ8TpPUpxctDNPDQI5QCXQUBaIiMKPERg5B4aHwX87pmb/Jn9 B8lTnys4l3JMPC8nm4ZfKetppNfNopQEyKnBIsjyIohTUZPwZVryCe3wsj2k1mbs 2ZBoQyMh6uzUhC9JCbbfyo4AVWyg7B+/pVivcOwiouSsxJzZbAldTizs/WSZYKri rjI3OIPzLydL7RNVYRtPm1wOa68EEcKJAYu55MtBzE2hT7v1yzD4nrUtJH6gdoQK TXllLFNCMJHMU3FdSZ/1qPr197mN1D0/ -----END CERTIFICATE-----Generated at Fri Jul 4 00:33:14 2025 by rpki-client