$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: 4Od0kBbyT9/e2b0nKCN2lZLnxUPhXqCESQ8PuxlEaFk= Subject key identifier: C1:68:6C:49:5A:4D:AA:07:AE:65:A9:69:66:4A:22:E8:B5:01:E7:12 Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0F46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0F2D Signing time: Tue 04 Nov 2025 17:41:26 +0000 Manifest this update: Tue 04 Nov 2025 17:41:25 +0000 Manifest next update: Tue 11 Nov 2025 17:41:25 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: kMJlGaAOEyGMgJb7wR7hYtHqP6RCMovhXy59xqs6LCs=) 2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: TN0DQj5Vs5ytuH5F5DVzodkfR9FeIuALNCosaZRkbvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3910 (0xf46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Nov 4 17:41:25 2025 GMT Not After : Nov 11 17:41:25 2025 GMT Subject: CN=690a3ac6-461d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:0c:3d:fd:31:46:90:e4:f6:33:2e:e6:e6: 70:a6:73:5d:ea:55:3a:18:d5:fc:38:4b:23:4e:35: 3b:e6:6f:1d:32:19:de:fd:8c:55:0d:d4:74:fa:5a: e2:71:83:04:81:7f:e8:be:fd:24:36:6b:df:eb:52: cf:46:18:e3:89:50:14:37:ca:81:95:d6:65:a3:bd: 03:33:db:4a:f2:06:0d:f5:5e:4e:65:6d:d9:15:af: 5d:23:94:3a:1f:6e:1d:6c:6e:78:5a:f7:8d:fe:68: e2:d6:d0:32:b2:f4:e2:86:19:44:49:90:65:4e:f1: b6:af:7a:32:11:32:9f:84:1a:57:0e:b1:3e:cb:a3: a8:00:b8:6b:0a:60:1e:a9:8d:10:f0:d0:be:58:d3: c8:43:47:e0:8b:b2:ca:a5:8c:12:c9:94:a3:e9:64: 60:2e:b5:b1:12:69:60:43:c5:32:1b:cf:14:01:20: da:95:13:50:13:a2:12:6b:1c:db:8b:17:5f:b9:fc: 60:4f:91:39:45:e4:56:8d:44:da:a0:a9:63:d0:8c: 16:66:b9:3e:7c:be:6a:e7:7f:94:13:b5:b7:94:b0: 12:df:49:54:f1:58:4d:3f:d0:07:22:b0:c0:91:5b: 02:a7:2d:e9:0d:64:97:55:d9:55:9d:5f:ba:ce:b5: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:6C:49:5A:4D:AA:07:AE:65:A9:69:66:4A:22:E8:B5:01:E7:12 X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:26:fe:6d:3b:d4:2f:f5:57:2a:a9:47:24:49:2b:61:ef:b2: 14:6c:82:ad:89:91:16:60:0d:7f:ea:91:f9:69:ae:86:d4:db: 42:d0:ac:86:5c:d4:f0:12:7e:da:9b:01:ef:c5:de:e8:73:5e: af:83:13:6e:78:a6:59:c8:a1:40:47:55:37:69:24:c2:0e:7f: ce:ec:95:83:b3:ef:68:bd:52:20:74:7c:23:60:69:eb:a2:2c: d2:29:16:26:61:f2:4e:e8:9e:61:66:11:4f:b5:fc:2d:9f:64: e0:37:2f:17:12:18:b3:24:04:20:8c:99:cb:cd:92:59:f8:7b: 57:14:34:4a:c0:c1:17:db:97:42:99:b8:33:97:dc:5f:43:fb: 38:f2:cd:85:34:5c:e8:62:0d:0b:54:7e:42:47:62:ec:d3:ea: c2:dc:87:32:22:1f:01:de:89:47:99:7e:97:dc:79:96:ee:fa: ee:01:c8:7b:0f:06:16:99:e8:83:ab:4b:c5:bc:20:27:ea:be: 00:08:11:bc:1c:c2:83:20:87:68:3f:ff:a6:a5:9c:bb:be:ab: 2f:af:8a:f4:fc:08:dc:a8:7f:85:0b:f2:39:d9:b0:08:0a:d5: 1e:e9:38:6c:d5:51:8d:95:75:69:c0:ec:dc:64:4e:7c:e0:23: 81:2e:21:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjUxMTA0MTc0MTI1WhcNMjUxMTExMTc0MTI1WjAYMRYwFAYD VQQDEw02OTBhM2FjNi00NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLUMPf0xRpDk9jMu5uZwpnNd6lU6GNX8OEsjTjU75m8dMhne/YxVDdR0+lri cYMEgX/ovv0kNmvf61LPRhjjiVAUN8qBldZlo70DM9tK8gYN9V5OZW3ZFa9dI5Q6 H24dbG54WveN/mji1tAysvTihhlESZBlTvG2r3oyETKfhBpXDrE+y6OoALhrCmAe qY0Q8NC+WNPIQ0fgi7LKpYwSyZSj6WRgLrWxEmlgQ8UyG88UASDalRNQE6ISaxzb ixdfufxgT5E5ReRWjUTaoKlj0IwWZrk+fL5q53+UE7W3lLAS30lU8VhNP9AHIrDA kVsCpy3pDWSXVdlVnV+6zrXnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFobEla TaoHrmWpaWZKIui1AecSMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIJv5tO9Qv9VcqqUckSSth77IUbIKtiZEWYA1/6pH5aa6G1NtC0KyG XNTwEn7amwHvxd7oc16vgxNueKZZyKFAR1U3aSTCDn/O7JWDs+9ovVIgdHwjYGnr oizSKRYmYfJO6J5hZhFPtfwtn2TgNy8XEhizJAQgjJnLzZJZ+HtXFDRKwMEX25dC mbgzl9xfQ/s48s2FNFzoYg0LVH5CR2Ls0+rC3IcyIh8B3olHmX6X3HmW7vruAch7 DwYWmeiDq0vFvCAn6r4ACBG8HMKDIIdoP/+mpZy7vqsvr4r0/AjcqH+FC/I52bAI CtUe6Ths1VGNlXVpwOzcZE584COBLiGe -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:08 2025 by rpki-client