$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: QOultasr3wnPlB7n87chfsqnybJs/zm3mAg3ZxP5Qs4= Subject key identifier: FB:72:9B:FE:A7:B8:91:6F:E2:3D:87:EC:30:D7:6D:61:08:88:84:98 Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 0599 Signing time: Sun 19 Oct 2025 00:51:43 +0000 Manifest this update: Sun 19 Oct 2025 00:51:42 +0000 Manifest next update: Sun 26 Oct 2025 00:51:42 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: k8l8LGZp49X2EE3cC8iF5IXqar0tpC0CtEtcRcQh9YY=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Oct 19 00:51:42 2025 GMT Not After : Oct 26 00:51:42 2025 GMT Subject: CN=68f4361f-93dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:14:db:06:75:ca:4d:65:51:ee:56:0c:9e: d1:08:49:18:a1:e3:fe:18:49:df:70:ea:67:9e:79: a0:ae:21:26:1b:d3:5d:5d:e9:7f:51:ca:bb:d6:4e: d6:de:cc:f0:06:a2:9b:94:63:07:02:28:71:44:0f: e5:1b:77:4c:a1:87:ef:7f:5a:04:28:52:ee:d3:3a: b9:5d:71:63:fb:30:6b:d8:4a:35:aa:db:9b:ca:f9: 28:ba:7d:a6:8e:5a:cd:dd:ed:92:42:9e:62:e1:58: 2c:3d:72:b6:fe:25:2a:a1:85:bd:61:68:12:63:3f: c7:94:64:e1:19:ac:d2:d0:4f:ef:aa:15:76:06:fb: 23:94:02:06:e4:a4:d3:4d:64:62:3a:9a:c0:84:10: e6:46:68:59:6b:dd:71:fd:6b:03:4e:4f:f8:2f:02: 5b:67:ef:e1:d9:ff:6b:06:d1:fc:98:cc:d8:78:51: c4:cb:5a:a4:33:c9:74:b5:c9:3b:24:7d:28:ac:ce: d6:cd:fc:d2:7e:5a:37:62:6f:9a:b0:b7:36:c5:a1: 36:9a:47:23:f9:4b:a2:65:6c:43:e2:29:74:36:16: 5e:bc:56:6d:86:e0:a2:57:40:f7:40:7a:3c:86:61: 05:ba:96:1f:58:65:f9:b8:6b:df:6d:2b:5b:42:fe: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:72:9B:FE:A7:B8:91:6F:E2:3D:87:EC:30:D7:6D:61:08:88:84:98 X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1f:64:95:9d:02:be:dd:6c:eb:26:7c:58:81:1f:68:e1:42: 05:a8:03:9f:e3:f6:30:60:ac:d1:95:03:2b:f8:8f:25:4b:a8: 5c:b1:7d:74:38:3f:3a:da:c7:3b:60:c8:fa:89:dd:d6:f2:14: 71:ce:cf:a8:dd:5e:dd:0f:2e:a4:4c:d5:51:b4:ce:a0:3e:be: 10:a1:2d:04:da:c1:ef:6a:8b:c0:d0:11:03:ac:e5:e4:38:45: c2:40:6b:0d:35:bb:63:84:7a:ba:81:f5:f1:15:af:7f:52:f5: 75:14:d2:32:4b:83:5a:ea:7e:1f:f1:51:d6:4e:a7:de:04:1d: 53:d2:db:6e:46:ba:1e:27:f9:90:d7:62:52:58:56:1f:dd:4f: 74:9d:a2:0a:6f:c3:8b:9c:a3:59:c7:72:e0:73:00:6b:ea:9a: 1c:d7:83:ad:47:36:19:ce:58:6d:e2:29:7a:01:87:dc:f0:ab: 77:a2:88:c5:d5:6e:7e:95:c6:95:75:45:34:e3:a8:2f:6d:0a: 95:28:fe:3e:0e:0f:8f:1a:db:a5:be:f2:33:2d:f3:28:8d:80: da:78:f7:ec:e3:9f:e8:fb:07:d8:16:63:b7:55:77:dc:f4:d5: bc:f1:d5:e5:a0:6f:a9:f4:d4:2a:85:01:42:29:dd:d7:18:b6: e3:09:67:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUxMDE5MDA1MTQyWhcNMjUxMDI2MDA1MTQyWjAYMRYwFAYD VQQDEw02OGY0MzYxZi05M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHMU2wZ1yk1lUe5WDJ7RCEkYoeP+GEnfcOpnnnmgriEmG9NdXel/Ucq71k7W 3szwBqKblGMHAihxRA/lG3dMoYfvf1oEKFLu0zq5XXFj+zBr2Eo1qtubyvkoun2m jlrN3e2SQp5i4VgsPXK2/iUqoYW9YWgSYz/HlGThGazS0E/vqhV2BvsjlAIG5KTT TWRiOprAhBDmRmhZa91x/WsDTk/4LwJbZ+/h2f9rBtH8mMzYeFHEy1qkM8l0tck7 JH0orM7WzfzSflo3Ym+asLc2xaE2mkcj+UuiZWxD4il0NhZevFZthuCiV0D3QHo8 hmEFupYfWGX5uGvfbStbQv4rqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtym/6n uJFv4j2H7DDXbWEIiISYMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/H2SVnQK+3WzrJnxYgR9o4UIFqAOf4/YwYKzRlQMr+I8lS6hcsX10 OD862sc7YMj6id3W8hRxzs+o3V7dDy6kTNVRtM6gPr4QoS0E2sHvaovA0BEDrOXk OEXCQGsNNbtjhHq6gfXxFa9/UvV1FNIyS4Na6n4f8VHWTqfeBB1T0ttuRroeJ/mQ 12JSWFYf3U90naIKb8OLnKNZx3LgcwBr6poc14OtRzYZzlht4il6AYfc8Kt3oojF 1W5+lcaVdUU046gvbQqVKP4+Dg+PGtulvvIzLfMojYDaePfs45/o+wfYFmO3VXfc 9NW88dXloG+p9NQqhQFCKd3XGLbjCWf1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:54 2025 by rpki-client