$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: oZBjL8bfNPiWm71B6sBo4Ykitq6dLQkPL/0o7pTX5qM= Subject key identifier: 30:BB:D4:EE:89:5C:9A:20:21:90:D5:EF:9E:27:01:1B:CF:5C:04:45 Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 0562 Signing time: Wed 02 Jul 2025 23:40:14 +0000 Manifest this update: Wed 02 Jul 2025 23:40:13 +0000 Manifest next update: Wed 09 Jul 2025 23:40:13 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: CadFW1cWgq+3XqnW/EpeV1PVDUeY75NNb22NgNPGKdw=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Jul 2 23:40:13 2025 GMT Not After : Jul 9 23:40:13 2025 GMT Subject: CN=6865c35e-4feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:49:68:57:6d:be:f3:68:28:c6:31:4d:64: 39:0d:96:b9:b9:d1:ec:f3:84:29:34:b4:0d:5b:1a: 80:5e:7a:36:2b:6f:15:75:5e:9d:6b:27:73:02:e2: 02:82:0f:c0:f7:07:9f:5c:46:58:5e:aa:13:98:75: 27:fc:43:b2:cf:da:ec:ef:4b:31:22:15:c2:4e:71: 7e:f3:3d:c6:f0:df:97:a8:64:ea:60:f0:67:8d:64: ef:fd:4b:83:8d:97:a7:07:f1:82:3e:33:06:55:50: 19:00:85:8b:d3:bb:48:e6:5c:4b:2a:0c:a9:b1:c6: 2d:6d:67:63:48:a0:ed:f0:33:80:82:c4:f0:e3:3b: 1d:96:a1:89:e2:38:0d:8f:e9:7b:eb:09:3d:69:32: f5:d6:fd:6c:f4:35:0c:00:61:72:7c:83:6f:d4:80: 9c:10:df:8f:7a:81:21:e1:41:01:da:6c:80:70:59: 46:1d:fd:3c:f1:e3:5a:c2:b7:dc:45:0c:5a:3c:9d: 4b:91:60:39:9c:f6:6c:e0:8c:d0:41:ef:4e:ef:98: e3:58:38:76:80:0a:b8:7e:71:12:5d:05:3f:9c:70: fa:0a:ce:4f:44:f0:a9:3d:58:bb:90:24:36:c2:b3: 8e:9c:d4:69:ab:63:57:51:e2:e0:90:2d:61:22:29: ff:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:D4:EE:89:5C:9A:20:21:90:D5:EF:9E:27:01:1B:CF:5C:04:45 X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:10:24:b8:88:19:27:d2:06:31:ed:9d:7a:83:81:8d:85:5e: 29:1c:2e:26:46:8c:c1:94:2f:54:70:7d:32:e7:f8:42:11:6c: df:2b:19:86:16:e5:d9:0b:04:75:58:ef:ee:7b:70:58:7a:10: 88:cd:be:54:be:48:5f:98:b7:74:89:88:9f:41:ac:20:67:eb: 5c:0b:64:24:03:f4:2c:1e:1b:ef:a1:07:d7:d6:22:a6:31:3b: 28:e3:a9:f8:22:34:04:de:9c:de:45:70:86:9e:be:5e:49:1a: 52:c7:d6:56:13:ff:91:be:58:5b:e4:c3:2c:1e:98:27:28:87: 5f:9b:db:ce:04:e6:46:01:2a:a0:55:50:a4:00:6c:3f:56:00: f9:6e:b8:84:a4:a2:f9:e5:b6:29:e0:b3:bb:94:e9:bc:1f:3c: 20:8f:55:72:4d:80:20:f2:20:db:3f:fb:87:d4:e5:fa:e5:ca: d2:01:67:18:01:9a:5b:87:67:5f:3f:4e:82:10:65:dc:aa:c8: 38:45:27:c5:a1:ed:37:be:0b:c8:7f:4d:85:7f:c7:9b:4a:32: e7:56:35:92:ef:d4:64:dd:17:b6:7d:21:ef:eb:23:48:95:e9: 23:19:56:b5:cd:76:19:c4:84:15:35:cd:91:3a:6a:7c:00:86: fc:55:7c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwNzAyMjM0MDEzWhcNMjUwNzA5MjM0MDEzWjAYMRYwFAYD VQQDEw02ODY1YzM1ZS00ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dZJaFdtvvNoKMYxTWQ5DZa5udHs84QpNLQNWxqAXno2K28VdV6daydzAuIC gg/A9wefXEZYXqoTmHUn/EOyz9rs70sxIhXCTnF+8z3G8N+XqGTqYPBnjWTv/UuD jZenB/GCPjMGVVAZAIWL07tI5lxLKgypscYtbWdjSKDt8DOAgsTw4zsdlqGJ4jgN j+l76wk9aTL11v1s9DUMAGFyfINv1ICcEN+PeoEh4UEB2myAcFlGHf088eNawrfc RQxaPJ1LkWA5nPZs4IzQQe9O75jjWDh2gAq4fnESXQU/nHD6Cs5PRPCpPVi7kCQ2 wrOOnNRpq2NXUeLgkC1hIin/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC71O6J XJogIZDV754nARvPXARFMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxECS4iBkn0gYx7Z16g4GNhV4pHC4mRozBlC9UcH0y5/hCEWzfKxmG FuXZCwR1WO/ue3BYehCIzb5UvkhfmLd0iYifQawgZ+tcC2QkA/QsHhvvoQfX1iKm MTso46n4IjQE3pzeRXCGnr5eSRpSx9ZWE/+Rvlhb5MMsHpgnKIdfm9vOBOZGASqg VVCkAGw/VgD5briEpKL55bYp4LO7lOm8Hzwgj1VyTYAg8iDbP/uH1OX65crSAWcY AZpbh2dfP06CEGXcqsg4RSfFoe03vgvIf02Ff8ebSjLnVjWS79Rk3Re2fSHv6yNI lekjGVa1zXYZxIQVNc2ROmp8AIb8VXyy -----END CERTIFICATE-----Generated at Thu Jul 3 06:00:44 2025 by rpki-client