$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: SOPKav0HW81eV0Vm/HZTtD+vi+2J79fkkI791Sk8l3U= Subject key identifier: D6:51:22:58:D9:BE:CC:F1:02:B8:2A:00:41:D4:50:D0:1B:C6:C4:97 Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: 0114 Signing time: Mon 03 Nov 2025 04:53:03 +0000 Manifest this update: Mon 03 Nov 2025 04:53:02 +0000 Manifest next update: Mon 10 Nov 2025 04:53:02 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: FjIC65HQATo1hWaO6vVdzWmgNLrTCgNUqq4ljPAxFdk=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: 0tGMxqd+nrlGxUWseUpDWpwKJjNQ5GQu0j7Ro3HieYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Nov 3 04:53:02 2025 GMT Not After : Nov 10 04:53:02 2025 GMT Subject: CN=6908352e-a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:d5:44:3a:c4:b6:0e:13:49:03:5f:d1:07: 63:7c:21:41:02:1e:0e:9f:ae:32:8a:ba:10:58:ac: dc:cc:e1:ea:6f:0f:c0:8c:1f:c7:e6:df:7f:25:0e: b8:44:6c:43:55:04:41:fe:e4:81:1d:37:1d:9b:64: a2:a6:62:42:c4:8f:e4:8b:35:a6:a5:1a:e5:1c:e0: 3d:7f:b2:57:64:b0:94:3f:e6:0a:ad:1b:7a:da:4b: df:80:4b:94:d9:df:c7:a3:71:9c:31:0d:e1:73:cd: ed:72:2e:20:7c:58:60:36:49:a4:02:bb:dc:ed:85: 35:dd:9a:e3:d9:80:d3:6d:12:ed:37:52:18:de:64: ee:c8:16:d2:ab:42:2a:f6:ff:58:8f:4f:93:39:70: 19:cb:e3:7e:c3:bf:78:93:8e:18:ce:75:68:ae:87: 2b:c7:de:03:ab:07:c6:6e:2a:07:fa:6e:ab:a0:4f: 0f:e2:7e:9f:07:6f:8a:42:96:fb:7a:52:f4:97:10: 18:e4:33:bf:51:d1:56:80:60:8e:40:00:ff:eb:0d: 3f:1c:9a:24:24:56:3b:b6:be:08:5a:99:e9:53:da: 7b:e2:11:35:da:bc:dd:dc:6f:61:58:9e:4f:f2:c9: 35:15:63:e8:8a:24:a0:12:32:4f:91:66:a7:39:44: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:22:58:D9:BE:CC:F1:02:B8:2A:00:41:D4:50:D0:1B:C6:C4:97 X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:af:a4:39:ec:26:f4:ef:aa:1c:7e:d3:fa:0c:c1:67:61: 70:ef:53:b3:83:ad:61:39:14:74:5a:55:c2:e6:60:d2:98:cb: 4c:ea:0c:47:3d:6a:ff:41:38:b1:f4:8b:90:e9:48:f2:af:70: 45:e2:bc:13:93:ae:ff:61:33:75:ef:41:a2:85:c1:87:68:81: ca:c8:16:cc:53:f3:93:e6:d2:2a:9a:90:51:38:ae:b7:d5:24: e2:d2:45:65:6d:15:00:f1:9c:04:a1:b7:02:b5:02:b9:cf:18: e7:80:48:6c:cf:35:c0:c9:f5:40:cc:b0:49:f8:d3:db:5a:96: 59:6e:72:12:51:2b:3f:c4:ff:11:75:90:d0:a5:a9:76:b6:bc: 9a:b1:ab:82:02:39:4f:6c:af:61:52:d4:b0:ae:2e:d1:6f:f2: d2:bb:8e:fe:56:73:b3:97:a7:c6:2e:c4:af:08:1e:05:dc:20: 64:b2:f9:30:95:5a:13:44:30:38:7c:8e:6a:f6:68:90:d6:ae: be:15:1f:53:43:9d:66:94:85:f2:2f:f1:9a:62:3c:78:34:e9: e6:6d:c0:a9:24:6e:d4:07:b0:23:bd:4b:9e:d5:23:a1:4b:d5: 17:62:08:97:5f:82:86:25:a0:06:43:6b:e3:92:72:20:ae:6c: 6f:b2:d4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKEI3OEU3RkUzQ0IyRDRCNUExRUI5MjhBNjkwQkM2NTc5 REY4ODFCRTkwHhcNMjUxMTAzMDQ1MzAyWhcNMjUxMTEwMDQ1MzAyWjAYMRYwFAYD VQQDEw02OTA4MzUyZS1hMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TDVRDrEtg4TSQNf0QdjfCFBAh4On64yiroQWKzczOHqbw/AjB/H5t9/JQ64 RGxDVQRB/uSBHTcdm2SipmJCxI/kizWmpRrlHOA9f7JXZLCUP+YKrRt62kvfgEuU 2d/Ho3GcMQ3hc83tci4gfFhgNkmkArvc7YU13Zrj2YDTbRLtN1IY3mTuyBbSq0Iq 9v9Yj0+TOXAZy+N+w794k44YznVorocrx94DqwfGbioH+m6roE8P4n6fB2+KQpb7 elL0lxAY5DO/UdFWgGCOQAD/6w0/HJokJFY7tr4IWpnpU9p74hE12rzd3G9hWJ5P 8sk1FWPoiiSgEjJPkWanOUQo1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZRIljZ vszxArgqAEHUUNAbxsSXMB8GA1UdIwQYMBaAFLeOf+PLLUtaHrkoppC8ZXnfiBvp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy83QUE4OTQzRTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMxb2V1U2lta0x4bGVkLUlH LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUctay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy83QUE4OTQzRTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi90NDVfNDhzdFMx b2V1U2lta0x4bGVkLUlHLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApoq+kOewm9O+qHH7T+gzBZ2Fw71Ozg61hORR0WlXC5mDSmMtM6gxH PWr/QTix9IuQ6Ujyr3BF4rwTk67/YTN170GihcGHaIHKyBbMU/OT5tIqmpBROK63 1STi0kVlbRUA8ZwEobcCtQK5zxjngEhszzXAyfVAzLBJ+NPbWpZZbnISUSs/xP8R dZDQpal2tryasauCAjlPbK9hUtSwri7Rb/LSu47+VnOzl6fGLsSvCB4F3CBksvkw lVoTRDA4fI5q9miQ1q6+FR9TQ51mlIXyL/GaYjx4NOnmbcCpJG7UB7AjvUue1SOh S9UXYgiXX4KGJaAGQ2vjknIgrmxvstSJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:34 2025 by rpki-client