$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: /GLeocyX8PFmxCqITHK/v/141rDmUUgpf9PuCLuuEcM= Subject key identifier: 85:3B:B9:58:80:FD:AE:F6:5C:80:B7:D2:32:99:53:1B:A6:DB:A8:3B Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B1C Signing time: Tue 10 Jun 2025 19:08:12 +0000 Manifest this update: Tue 10 Jun 2025 19:08:12 +0000 Manifest next update: Tue 17 Jun 2025 19:08:12 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: ojoI4WiNi3CLsvw3l/qey4kUHPEhz9XzhA0BidbtaJY=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Jun 10 19:08:12 2025 GMT Not After : Jun 17 19:08:12 2025 GMT Subject: CN=6848829c-455a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:31:f7:48:a0:98:12:28:60:c3:cb:ad:ff: ec:2f:87:a7:87:42:32:7e:27:be:f6:07:77:3e:3c: 57:90:a3:67:f2:1b:5e:6f:9d:e9:72:52:9d:91:9f: 4a:85:11:0d:85:6b:42:6d:4d:da:97:c7:2b:05:aa: 6b:2d:c8:86:7e:a9:10:b9:64:d9:cf:98:43:52:65: 5c:17:2c:b4:f3:d6:b1:97:d1:48:ae:07:fd:29:89: 77:34:db:b0:f2:b9:97:d1:f7:cb:91:26:80:f9:bd: 56:65:90:9d:5a:41:19:e9:36:4e:f2:1f:16:21:a4: 68:68:94:ce:df:10:b2:b5:ab:c5:df:d1:d7:79:43: 98:51:8a:b3:95:74:72:bd:3c:80:b5:8a:14:c7:2a: 19:09:dd:30:a6:ac:9e:af:e2:aa:c5:ab:d8:a2:47: 8b:57:4a:c7:b2:8b:26:d2:0b:cd:3e:5a:74:cf:9c: 3d:63:b7:65:80:86:e7:65:32:61:2b:38:7d:72:9d: a3:a0:4d:65:2a:07:37:5b:66:61:2f:ae:62:fa:e9: fa:86:6b:a5:08:0f:72:2c:ad:48:68:81:9d:50:e2: 74:ed:b9:5a:da:bb:4c:23:48:38:03:2f:d5:a7:df: bd:7a:bb:9c:f4:e1:95:5a:74:47:b4:ce:92:56:fe: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:B9:58:80:FD:AE:F6:5C:80:B7:D2:32:99:53:1B:A6:DB:A8:3B X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:22:e8:a3:55:a1:f3:dd:00:86:a3:58:a2:de:bf:32:58:ad: 63:ed:b5:00:d5:02:5f:c8:0e:19:3c:c3:cd:bf:ae:96:65:32: b0:6e:95:86:cf:e3:5d:dd:e0:79:49:f4:d3:1f:db:7f:4b:38: fe:3c:99:76:cd:3a:8f:b7:4e:81:a0:2d:38:9f:01:f5:8f:ac: 7f:17:e4:fa:d0:f1:d3:08:33:c0:77:a5:9c:94:e9:0f:c5:c6: 29:70:2e:29:6b:e6:40:2c:1d:e8:e0:ca:03:9c:93:b7:fd:f2: 4e:1a:f8:d5:a9:74:70:84:5d:58:df:90:e5:48:9d:23:df:af: c9:08:9f:61:56:5a:7b:3c:18:e7:03:a4:5e:d2:ec:6a:ee:19: e9:d6:a0:55:84:3c:f5:f4:08:f8:1c:d3:96:be:95:74:70:9c: 86:77:a3:66:40:45:56:f8:a8:a2:9b:7e:a6:6a:13:51:d8:e1: dc:54:45:fe:f5:af:4c:38:f3:20:de:5a:c9:ae:bc:91:22:7a: b0:1c:a9:25:22:34:32:57:c1:81:bb:2f:c3:9e:34:84:78:ce: 34:4d:0d:da:75:d7:c4:ff:19:e2:64:33:81:4e:9a:a5:df:3f: 1f:a4:62:0f:4a:6f:40:49:72:96:58:82:6f:f3:c4:f3:e4:5d: ba:b9:51:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwNjEwMTkwODEyWhcNMjUwNjE3MTkwODEyWjAYMRYwFAYD VQQDEw02ODQ4ODI5Yy00NTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNQx90igmBIoYMPLrf/sL4enh0Iyfie+9gd3PjxXkKNn8hteb53pclKdkZ9K hRENhWtCbU3al8crBaprLciGfqkQuWTZz5hDUmVcFyy089axl9FIrgf9KYl3NNuw 8rmX0ffLkSaA+b1WZZCdWkEZ6TZO8h8WIaRoaJTO3xCytavF39HXeUOYUYqzlXRy vTyAtYoUxyoZCd0wpqyer+KqxavYokeLV0rHsosm0gvNPlp0z5w9Y7dlgIbnZTJh Kzh9cp2joE1lKgc3W2ZhL65i+un6hmulCA9yLK1IaIGdUOJ07bla2rtMI0g4Ay/V p9+9eruc9OGVWnRHtM6SVv48BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU7uViA /a72XIC30jKZUxum26g7MB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/IuijVaHz3QCGo1ii3r8yWK1j7bUA1QJfyA4ZPMPNv66WZTKwbpWG z+Nd3eB5SfTTH9t/Szj+PJl2zTqPt06BoC04nwH1j6x/F+T60PHTCDPAd6WclOkP xcYpcC4pa+ZALB3o4MoDnJO3/fJOGvjVqXRwhF1Y35DlSJ0j36/JCJ9hVlp7PBjn A6Re0uxq7hnp1qBVhDz19Aj4HNOWvpV0cJyGd6NmQEVW+Kiim36mahNR2OHcVEX+ 9a9MOPMg3lrJrryRInqwHKklIjQyV8GBuy/DnjSEeM40TQ3addfE/xniZDOBTpql 3z8fpGIPSm9ASXKWWIJv88Tz5F26uVFa -----END CERTIFICATE-----Generated at Thu Jun 12 04:50:51 2025 by rpki-client