$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: uHm5JcxYXHJjeCJH6HmP5YH/x7H9pnVggsTcdK6/frk= Subject key identifier: 62:42:8B:0E:CC:2F:8D:F9:00:8E:61:F5:46:3D:E9:33:AC:4E:0F:EB Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0B42 Signing time: Sun 24 Aug 2025 19:09:48 +0000 Manifest this update: Sun 24 Aug 2025 19:09:47 +0000 Manifest next update: Sun 31 Aug 2025 19:09:47 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: eeS9wW1j8PfrjZRe+Mrcl3GFw73bo1W8dHjAKDJ295E=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Aug 24 19:09:47 2025 GMT Not After : Aug 31 19:09:47 2025 GMT Subject: CN=68ab637b-167f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:55:a3:e0:c7:32:19:08:fd:89:65:57:24:8e: a2:05:29:31:e9:73:aa:83:9a:54:4a:69:0d:98:b2: dc:0b:04:57:73:e8:bf:1a:18:48:10:0e:83:eb:f0: 9a:3a:43:ac:0a:ed:75:b0:8f:f8:b6:b6:1f:59:d0: 24:bf:6a:95:f5:33:c6:ed:e2:52:e2:89:ef:37:c3: 4e:11:3a:15:ea:5e:d6:db:08:2c:fd:f7:73:c2:2c: e8:92:07:2a:1a:e1:b4:d6:c3:91:82:37:48:c4:01: 80:30:76:60:fa:0a:3a:ea:b2:1a:16:67:f4:30:4d: cb:84:d8:63:ea:71:44:9b:4c:83:7a:ec:ec:e2:4e: df:b9:d0:9a:9e:b9:04:e0:52:4f:4c:06:4f:2d:75: 7b:35:d1:0a:b4:4f:f0:eb:bb:e5:24:f3:d6:34:a1: 96:85:49:b3:5e:9b:5e:4b:c9:23:4b:ed:73:33:f5: 50:65:ad:60:71:77:12:b5:08:51:d7:17:f6:49:85: ae:33:77:c0:c0:01:65:6a:e2:e9:54:d8:ae:50:e2: 5f:53:cb:08:75:f8:07:5c:87:bd:39:3e:d1:7f:0e: dd:0d:b2:fa:63:6a:38:22:c1:5d:a3:56:2a:cf:47: c3:21:a8:3f:14:fe:3d:e7:4b:0b:ba:88:7c:47:19: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:8B:0E:CC:2F:8D:F9:00:8E:61:F5:46:3D:E9:33:AC:4E:0F:EB X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:dd:b3:0a:b0:3a:24:05:71:10:72:ac:f3:7c:db:ef:a4:ef: d2:d1:39:30:1d:1b:47:1d:8c:5d:92:0d:6c:e1:2c:7f:02:63: db:44:bf:e4:22:f6:c1:ff:6c:4c:85:47:18:b4:a5:23:4f:3e: de:4c:a7:48:9f:e6:42:1a:d4:f5:75:f1:8b:88:eb:98:47:04: 7d:ba:c1:10:50:35:be:e0:f0:a5:00:57:48:21:94:d0:e3:4e: 86:bf:cd:39:a8:d1:83:d2:a0:76:74:4e:e5:b5:15:ed:34:2b: 2a:cf:e2:fc:21:8c:0d:a6:68:c9:9d:d5:3c:ea:a6:63:fa:1e: 0e:bb:8f:4c:03:e2:40:dd:75:3c:69:1a:57:46:09:88:a4:db: 86:e8:e1:58:26:7c:5b:a3:05:e2:62:25:b9:16:e9:5a:19:91: 64:04:d1:41:4a:d0:5f:22:7e:6e:14:70:d2:7d:16:15:b2:08: ab:c8:84:9a:18:95:32:a0:15:d6:ee:bb:57:7e:db:7b:16:9a: a9:c6:68:ef:15:b0:a3:d6:14:5b:fd:7f:56:17:bf:ae:3f:ca: ed:e4:53:75:1e:c0:f3:15:73:cf:4b:e4:59:3d:f4:d8:d0:98: e0:5d:95:68:8b:b7:bd:93:df:33:ad:fa:d3:66:bf:cd:ed:53: fe:b8:1b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjUwODI0MTkwOTQ3WhcNMjUwODMxMTkwOTQ3WjAYMRYwFAYD VQQDEw02OGFiNjM3Yi0xNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1Wj4McyGQj9iWVXJI6iBSkx6XOqg5pUSmkNmLLcCwRXc+i/GhhIEA6D6/Ca OkOsCu11sI/4trYfWdAkv2qV9TPG7eJS4onvN8NOEToV6l7W2wgs/fdzwizokgcq GuG01sORgjdIxAGAMHZg+go66rIaFmf0ME3LhNhj6nFEm0yDeuzs4k7fudCanrkE 4FJPTAZPLXV7NdEKtE/w67vlJPPWNKGWhUmzXpteS8kjS+1zM/VQZa1gcXcStQhR 1xf2SYWuM3fAwAFlauLpVNiuUOJfU8sIdfgHXIe9OT7Rfw7dDbL6Y2o4IsFdo1Yq z0fDIag/FP4950sLuoh8RxmQYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJCiw7M L435AI5h9UY96TOsTg/rMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB3bMKsDokBXEQcqzzfNvvpO/S0TkwHRtHHYxdkg1s4Sx/AmPbRL/k IvbB/2xMhUcYtKUjTz7eTKdIn+ZCGtT1dfGLiOuYRwR9usEQUDW+4PClAFdIIZTQ 406Gv805qNGD0qB2dE7ltRXtNCsqz+L8IYwNpmjJndU86qZj+h4Ou49MA+JA3XU8 aRpXRgmIpNuG6OFYJnxbowXiYiW5FulaGZFkBNFBStBfIn5uFHDSfRYVsgiryISa GJUyoBXW7rtXftt7FpqpxmjvFbCj1hRb/X9WF7+uP8rt5FN1HsDzFXPPS+RZPfTY 0JjgXZVoi7e9k98zrfrTZr/N7VP+uBuB -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:05 2025 by rpki-client