$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: UjKXY3TAa48FV9XxwwdOprgwTazhqgVBMPvHaUPgPrY= Subject key identifier: 8D:F6:73:16:C5:67:3F:21:0C:7F:A1:32:95:68:44:EF:63:C9:48:06 Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 0547 Signing time: Mon 12 May 2025 23:13:15 +0000 Manifest this update: Mon 12 May 2025 23:13:14 +0000 Manifest next update: Mon 19 May 2025 23:13:14 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 8TEZF6rpzjYn35irS7O9MY3zO8hehpk5Hb7g0ptCNTg=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: Jf8QtUinuXEmxe7plhHtwAZrMyKb/TssbL3bZiwtCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: May 12 23:13:14 2025 GMT Not After : May 19 23:13:14 2025 GMT Subject: CN=6822808b-ee97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:f6:1d:d5:42:8a:7e:ce:9e:23:25:9a:82: 9e:03:28:9f:16:df:f4:85:14:2d:fc:10:09:f9:f7: 35:38:e3:9b:a0:97:2a:db:fd:a0:77:c8:3e:32:d5: 5b:d2:1c:34:fa:71:52:5e:44:65:c4:9a:db:38:d0: f8:c3:c5:c8:05:db:14:0c:9f:cc:8c:5a:be:b2:3e: e1:12:b9:ea:96:7a:02:29:95:92:8b:38:46:ca:36: 7d:de:16:81:51:71:75:76:d2:fb:8f:ab:50:46:8f: c8:4e:be:de:05:6f:1e:f7:8f:46:f2:96:67:27:27: 45:43:59:11:9c:f7:3f:a4:81:8b:2c:fd:7c:61:50: df:12:91:73:95:e8:ee:e9:7d:d3:fc:3b:76:6a:8a: 1b:ea:34:ed:f7:2a:4d:27:f5:e0:c0:24:95:0d:1a: 19:02:98:cb:0a:6e:e9:42:e2:d3:fd:26:4e:7c:a9: 5d:22:01:7d:d4:87:40:79:d5:a1:9b:45:34:b9:07: 86:3d:bf:e1:55:34:44:c6:fa:2a:5a:a6:79:35:c2: af:f2:6e:07:48:3a:cb:19:11:9b:82:16:89:2a:d7: 5e:67:7b:e5:4e:bb:71:30:5e:c5:df:ee:35:fa:9b: 61:70:73:b1:30:73:3e:ec:dd:d7:eb:44:63:55:f4: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F6:73:16:C5:67:3F:21:0C:7F:A1:32:95:68:44:EF:63:C9:48:06 X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c6:23:51:de:05:39:79:c5:1d:97:ea:17:0b:b1:ce:04:df: 00:95:39:0e:51:fc:e5:77:9e:44:2e:98:91:c5:b0:25:74:f2: 4c:d9:e7:5e:92:84:ab:00:b4:64:36:83:d3:6f:18:c8:09:3e: a6:27:76:18:df:5c:e1:ca:20:3d:a3:f6:69:23:55:e2:72:df: af:04:51:76:5c:83:f2:b1:21:26:e9:4a:75:23:7c:28:cd:50: f7:d0:fc:e2:2f:a1:3b:c6:93:49:b5:98:68:fb:5f:97:ed:52: 42:32:dc:15:a7:19:71:ec:af:64:f9:4b:c3:4d:f9:47:cf:af: af:44:0a:9e:5e:72:0a:1a:47:97:9f:4f:3c:d5:2d:d8:a0:dd: 56:ce:80:6a:c7:31:bb:f9:31:43:89:b8:bf:3a:13:40:1d:c5: a3:69:2c:bf:d7:06:33:40:97:73:d4:65:bd:64:a4:19:1a:65: 8c:eb:92:a0:d1:ab:a6:33:20:2d:9f:67:46:11:44:c1:39:9a: fd:d9:46:3f:4d:a5:62:de:c2:1c:5f:f3:6a:7f:d5:2e:54:7c: 93:f5:8c:13:1e:f3:c7:53:60:08:f5:80:0f:76:68:cc:2d:d5: 1e:fe:2e:4b:94:78:b5:34:92:c7:8b:49:bd:0f:cc:2a:70:26: 77:59:9b:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwNTEyMjMxMzE0WhcNMjUwNTE5MjMxMzE0WjAYMRYwFAYD VQQDEw02ODIyODA4Yi1lZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPf2HdVCin7OniMlmoKeAyifFt/0hRQt/BAJ+fc1OOOboJcq2/2gd8g+MtVb 0hw0+nFSXkRlxJrbOND4w8XIBdsUDJ/MjFq+sj7hErnqlnoCKZWSizhGyjZ93haB UXF1dtL7j6tQRo/ITr7eBW8e949G8pZnJydFQ1kRnPc/pIGLLP18YVDfEpFzleju 6X3T/Dt2aoob6jTt9ypNJ/XgwCSVDRoZApjLCm7pQuLT/SZOfKldIgF91IdAedWh m0U0uQeGPb/hVTRExvoqWqZ5NcKv8m4HSDrLGRGbghaJKtdeZ3vlTrtxMF7F3+41 +pthcHOxMHM+7N3X60RjVfSoyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI32cxbF Zz8hDH+hMpVoRO9jyUgGMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5xiNR3gU5ecUdl+oXC7HOBN8AlTkOUfzld55ELpiRxbAldPJM2ede koSrALRkNoPTbxjICT6mJ3YY31zhyiA9o/ZpI1Xict+vBFF2XIPysSEm6Up1I3wo zVD30PziL6E7xpNJtZho+1+X7VJCMtwVpxlx7K9k+UvDTflHz6+vRAqeXnIKGkeX n0881S3YoN1WzoBqxzG7+TFDibi/OhNAHcWjaSy/1wYzQJdz1GW9ZKQZGmWM65Kg 0aumMyAtn2dGEUTBOZr92UY/TaVi3sIcX/Nqf9UuVHyT9YwTHvPHU2AI9YAPdmjM LdUe/i5LlHi1NJLHi0m9D8wqcCZ3WZvc -----END CERTIFICATE-----Generated at Wed May 14 17:42:48 2025 by rpki-client