$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: J8WGlUdJHuCUwY4JQc2Vx6wEoDjEJXF/lYr/0HANi8k= Subject key identifier: 88:DA:71:F4:FA:E7:B0:91:2C:77:5C:B0:50:AC:8B:CF:DF:E5:65:7C Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 057C Signing time: Fri 22 Aug 2025 23:27:38 +0000 Manifest this update: Fri 22 Aug 2025 23:27:37 +0000 Manifest next update: Fri 29 Aug 2025 23:27:37 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 5cSQfBGCiVdgrr8JBsu0grH3SH3nAXx8NmBJwEmCe3U=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Aug 22 23:27:37 2025 GMT Not After : Aug 29 23:27:37 2025 GMT Subject: CN=68a8fcea-0d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a5:3c:92:f3:6d:90:0f:3a:71:a1:03:5f:2d: 73:6e:c3:89:28:2e:39:e0:2b:8d:94:23:a8:f3:60: e7:74:f1:f6:70:6d:f4:77:fb:10:3b:48:16:6a:31: 8c:c3:ae:08:eb:37:e4:67:30:4a:cc:7c:e5:d5:ee: 26:94:a0:e8:3e:86:86:f8:04:d5:b3:61:9e:a3:25: 3c:8c:f2:a1:0b:f1:96:f6:d7:de:bb:8d:ed:ee:19: 95:e8:5f:97:03:50:bf:e2:d1:ed:fd:e2:f6:d2:d3: 56:76:e7:fa:4e:a6:00:fd:49:d5:45:e2:5e:94:03: 41:a4:3c:b2:e7:48:48:9a:a5:17:1a:91:19:4b:ae: e8:50:d8:bc:0f:11:4b:55:68:ce:a5:21:d4:9a:89: ed:cc:6f:c3:96:a3:93:79:cb:92:5b:00:d0:56:99: b9:9e:76:63:74:c5:9c:14:4a:35:be:cd:39:ed:83: 8a:c2:29:3e:ec:ad:f7:d8:f3:d5:2f:a6:d6:86:89: d6:46:3a:21:2f:77:79:1c:65:8e:2a:5d:f8:f2:fb: 89:8e:36:64:b4:20:bc:84:35:52:57:53:2e:6d:3b: 22:ea:28:4c:c0:2e:b2:03:c0:54:4b:d3:23:53:fe: 2a:13:0c:a7:b0:7f:aa:77:89:a2:ea:96:99:65:87: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DA:71:F4:FA:E7:B0:91:2C:77:5C:B0:50:AC:8B:CF:DF:E5:65:7C X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:42:3d:0d:4e:91:53:3e:9e:02:2e:e5:ac:cc:43:4b:44:77: e3:68:48:40:23:e8:80:6e:7e:23:91:ab:b7:27:40:83:e2:14: f0:78:8a:2c:1d:01:83:83:df:05:52:bd:e2:85:0d:d7:6e:4f: 12:0d:65:dc:c2:38:d9:4a:01:5a:e5:4e:ca:71:8a:62:f8:fd: 52:05:af:5e:fd:e5:ad:ec:26:3e:20:3d:cf:6a:cb:0e:e4:63: 0e:24:2d:15:37:86:e4:ea:09:d5:af:37:e8:30:81:a6:6f:55: f8:96:0f:bc:28:31:f0:23:a1:5b:7f:c8:a5:f2:4c:96:19:bb: c5:bb:b9:87:a2:fb:8f:1b:06:88:f4:5b:16:46:27:7b:8f:e4: 23:d7:32:f8:e9:3d:f6:40:76:ec:59:9f:f9:5e:1d:c9:3e:30: ac:9a:70:b8:f0:41:44:a5:78:24:b6:58:b9:16:0f:65:9c:73: 46:42:92:41:93:f8:80:38:b5:15:3a:9a:1d:80:93:04:bc:e8: 5b:dc:f0:f3:dc:40:86:29:eb:83:f7:f6:6d:5e:a2:da:40:4c: 21:79:17:5e:9b:ee:8a:4b:a8:f0:55:8c:93:3b:3d:af:6e:d9: 51:04:02:69:f7:76:14:d9:00:0f:ba:e4:1a:61:b6:0f:99:58: 7b:39:39:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwODIyMjMyNzM3WhcNMjUwODI5MjMyNzM3WjAYMRYwFAYD VQQDEw02OGE4ZmNlYS0wZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76U8kvNtkA86caEDXy1zbsOJKC454CuNlCOo82DndPH2cG30d/sQO0gWajGM w64I6zfkZzBKzHzl1e4mlKDoPoaG+ATVs2GeoyU8jPKhC/GW9tfeu43t7hmV6F+X A1C/4tHt/eL20tNWduf6TqYA/UnVReJelANBpDyy50hImqUXGpEZS67oUNi8DxFL VWjOpSHUmontzG/DlqOTecuSWwDQVpm5nnZjdMWcFEo1vs057YOKwik+7K332PPV L6bWhonWRjohL3d5HGWOKl348vuJjjZktCC8hDVSV1MubTsi6ihMwC6yA8BUS9Mj U/4qEwynsH+qd4mi6paZZYeNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjacfT6 57CRLHdcsFCsi8/f5WV8MB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Qj0NTpFTPp4CLuWszENLRHfjaEhAI+iAbn4jkau3J0CD4hTweIos HQGDg98FUr3ihQ3Xbk8SDWXcwjjZSgFa5U7KcYpi+P1SBa9e/eWt7CY+ID3PassO 5GMOJC0VN4bk6gnVrzfoMIGmb1X4lg+8KDHwI6Fbf8il8kyWGbvFu7mHovuPGwaI 9FsWRid7j+Qj1zL46T32QHbsWZ/5Xh3JPjCsmnC48EFEpXgktli5Fg9lnHNGQpJB k/iAOLUVOpodgJMEvOhb3PDz3ECGKeuD9/ZtXqLaQEwheRdem+6KS6jwVYyTOz2v btlRBAJp93YU2QAPuuQaYbYPmVh7OTkN -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:15 2025 by rpki-client