$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: zSjwJrvTAVAfjNGM5ip5zKYbclwbFvUo6AM69od5Ehs= Subject key identifier: 98:37:7F:86:3C:C3:2F:AE:B8:F5:C1:D9:81:22:B9:D0:EC:24:84:38 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B68 Signing time: Sun 02 Nov 2025 19:04:44 +0000 Manifest this update: Sun 02 Nov 2025 19:04:44 +0000 Manifest next update: Sun 09 Nov 2025 19:04:44 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: KBCj1PIAkLPwgTAVMpsNEXFeocsenNchbj9GhB/KEIY=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Nov 2 19:04:44 2025 GMT Not After : Nov 9 19:04:44 2025 GMT Subject: CN=6907ab4c-ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:f2:79:ce:56:7e:3b:da:7e:1d:74:16:c7: 55:ff:02:1d:48:8b:0d:5a:e8:9d:75:72:c3:f5:9e: 33:94:32:67:68:2f:98:32:bf:e9:c1:32:b0:50:65: 5b:27:f1:0b:f2:4d:77:53:b1:7e:79:dc:16:4e:38: b8:e6:6e:60:c5:92:4f:f9:7a:56:1f:a3:f7:59:cd: 83:42:1d:f6:73:74:91:4f:81:52:0a:2c:ff:42:d4: 32:b8:23:98:04:d4:3d:4f:36:09:8e:54:d3:43:f4: 37:fc:03:9d:6e:80:9d:ff:4d:c5:5c:05:d2:b3:cd: df:eb:d1:b1:49:2a:ec:33:19:38:f5:de:af:f5:09: 02:f0:69:89:63:6a:8d:23:30:6a:c7:30:40:02:cd: f4:ca:23:1a:9d:40:45:55:cf:f9:32:9a:50:9f:cb: 96:97:ab:b1:7a:62:94:80:2b:49:20:1b:89:8c:bf: a2:fb:c0:5d:8e:66:68:93:93:27:bc:a3:bc:bb:75: 34:fe:fc:d4:3e:dc:ed:98:20:d8:64:ef:b5:29:a3: 01:03:52:e8:77:a5:86:9b:87:e1:e6:fa:d7:36:95: 77:cf:92:99:f0:f6:36:df:98:be:bc:49:f4:3e:66: c1:4c:ce:ad:82:70:33:c3:29:97:69:a0:de:9c:cc: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:7F:86:3C:C3:2F:AE:B8:F5:C1:D9:81:22:B9:D0:EC:24:84:38 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:2a:21:98:b0:0e:8e:70:4e:65:3c:fc:ea:c6:49:ed:20:20: ff:fc:bc:eb:f8:d5:c0:6a:c1:1b:b7:d8:57:47:15:40:df:7c: 72:62:3a:62:54:e5:ce:5a:ee:1f:b8:66:22:7f:e6:93:05:1d: 53:2c:8c:96:3f:64:8d:18:8e:c8:ea:55:b6:99:50:63:56:1d: 20:8e:1e:bb:b9:fd:40:36:0e:3b:10:44:49:82:f5:85:05:b8: eb:a7:4a:3a:24:8c:eb:bc:27:ac:cf:81:a3:68:be:0c:4d:9e: de:80:db:21:21:91:64:96:56:b7:3b:fc:75:51:7f:d5:a2:1d: ff:c4:f7:e6:a8:e8:7e:03:ba:b0:06:af:2c:48:ef:10:ab:e3: d4:f2:83:92:8d:75:b5:cc:c3:0e:60:b0:66:4e:4c:2c:4e:2a: df:64:08:f5:66:b5:2b:54:30:b8:f8:13:2c:d6:8a:bc:2c:e4: 76:cb:de:24:b0:e6:b1:72:1a:ed:60:58:2f:38:85:e8:60:f9: 85:02:17:e4:d9:44:8e:f6:12:89:ce:5c:88:56:09:21:61:97: 0b:f3:ac:1c:24:63:f1:7e:08:06:b2:2f:23:0f:3a:0b:52:19: d3:e2:27:76:5e:67:01:bd:71:52:23:26:2f:a7:f9:12:78:36: 24:c3:82:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUxMTAyMTkwNDQ0WhcNMjUxMTA5MTkwNDQ0WjAYMRYwFAYD VQQDEw02OTA3YWI0Yy1hYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN/yec5Wfjvafh10FsdV/wIdSIsNWuiddXLD9Z4zlDJnaC+YMr/pwTKwUGVb J/EL8k13U7F+edwWTji45m5gxZJP+XpWH6P3Wc2DQh32c3SRT4FSCiz/QtQyuCOY BNQ9TzYJjlTTQ/Q3/AOdboCd/03FXAXSs83f69GxSSrsMxk49d6v9QkC8GmJY2qN IzBqxzBAAs30yiManUBFVc/5MppQn8uWl6uxemKUgCtJIBuJjL+i+8BdjmZok5Mn vKO8u3U0/vzUPtztmCDYZO+1KaMBA1Lod6WGm4fh5vrXNpV3z5KZ8PY235i+vEn0 PmbBTM6tgnAzwymXaaDenMxaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg3f4Y8 wy+uuPXB2YEiudDsJIQ4MB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApKiGYsA6OcE5lPPzqxkntICD//Lzr+NXAasEbt9hXRxVA33xyYjpi VOXOWu4fuGYif+aTBR1TLIyWP2SNGI7I6lW2mVBjVh0gjh67uf1ANg47EERJgvWF Bbjrp0o6JIzrvCesz4GjaL4MTZ7egNshIZFklla3O/x1UX/Voh3/xPfmqOh+A7qw Bq8sSO8Qq+PU8oOSjXW1zMMOYLBmTkwsTirfZAj1ZrUrVDC4+BMs1oq8LOR2y94k sOaxchrtYFgvOIXoYPmFAhfk2USO9hKJzlyIVgkhYZcL86wcJGPxfggGsi8jDzoL UhnT4id2XmcBvXFSIyYvp/kSeDYkw4Jd -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:30 2025 by rpki-client