$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: gZAgqI8kGwdtrF6HItReyPQRg7xWo4xpurB1gcxUCy0= Subject key identifier: A6:F3:29:CC:63:BD:D7:DE:D6:99:5E:78:8C:CB:2B:40:EF:4D:DA:8F Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 05A1 Signing time: Tue 04 Nov 2025 23:14:26 +0000 Manifest this update: Tue 04 Nov 2025 23:14:25 +0000 Manifest next update: Tue 11 Nov 2025 23:14:25 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: xcwkVLnSUmfv7vbbTHtZIRXMi7opzItt06e4+YsRYtQ=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Nov 4 23:14:25 2025 GMT Not After : Nov 11 23:14:25 2025 GMT Subject: CN=690a88d2-1019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:b9:69:17:38:5e:12:fd:23:3f:cf:31:cf: a6:e1:d4:ed:18:92:5e:98:2a:60:b4:60:00:32:70: 6c:b2:96:09:97:57:eb:f0:eb:20:10:b0:4c:25:84: 2b:26:b5:3f:e0:55:52:64:b0:55:d8:6c:a3:2b:58: 4f:5c:8f:78:20:de:28:8a:bb:29:a8:da:83:e2:ff: d7:24:5a:52:6f:37:4d:11:08:59:40:00:8a:cb:e0: f3:4e:3e:fb:d1:cb:82:fe:7c:63:05:21:0d:48:9b: c5:34:7d:e3:9c:a8:cd:32:2d:cc:b5:34:e1:a0:10: 61:c6:6d:95:21:1d:e5:66:9f:77:0c:9f:f1:10:a5: 27:20:ba:f0:42:bc:0c:0f:e4:39:ed:48:cb:89:07: 12:2a:df:8b:57:8f:59:99:03:83:7c:a4:4f:c9:e5: 49:3f:f5:d9:22:cd:06:f4:51:4e:0b:14:7b:02:d7: 51:aa:26:57:82:cb:dd:ae:f8:9e:ec:a5:48:b7:0d: f1:de:fb:6f:4b:33:81:40:b4:2a:f8:8b:10:62:0e: 51:4f:1b:d1:d1:37:59:dd:a3:53:5b:63:73:a7:aa: 6d:82:88:1e:70:35:96:13:4d:1c:d4:32:c4:71:87: df:14:c2:22:40:74:1c:35:c1:2b:22:cc:e7:54:85: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:29:CC:63:BD:D7:DE:D6:99:5E:78:8C:CB:2B:40:EF:4D:DA:8F X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:72:93:86:80:2d:ce:2e:9f:1e:f3:ab:76:c1:6e:8b:53:f6: 45:2d:44:50:3c:6b:a4:2a:09:36:fc:98:0f:80:ba:ca:5e:de: 63:6a:d3:e1:29:ac:fe:dd:a7:77:17:47:6a:c9:fa:b6:9a:0a: 9a:f0:f8:75:89:26:fc:12:5e:2b:8c:e7:b2:6a:1e:cf:0f:cb: 15:b7:a9:e0:f6:6c:72:28:9d:e9:dc:a7:c5:5f:db:5b:2a:5b: 5c:c4:65:0a:9b:e8:e1:a6:f8:b6:b3:f7:53:e9:01:29:9e:75: 88:85:7a:8a:76:3d:0a:e5:ca:f1:bb:a0:cc:65:f4:21:22:ba: da:76:ce:5b:ec:58:73:2b:ef:ed:06:6e:3b:e3:fe:6a:ee:ee: 45:d9:8a:7f:29:dc:c4:4a:5d:8d:fd:92:ee:2b:d8:f7:64:6d: dc:e5:27:c3:2f:41:ff:ee:69:66:bb:ec:d1:79:6d:c9:c9:b7: b9:a2:13:44:e7:54:23:f6:11:28:5a:7a:82:1e:47:dd:57:1d: 61:07:43:be:a5:62:db:56:30:02:27:8b:f5:85:c4:5f:e6:ae: 5f:5d:4e:a8:88:f9:ae:bd:7e:07:fa:c6:79:11:c3:5c:b2:fb: e1:37:15:67:74:2f:d2:f1:59:60:03:d5:51:81:23:f7:9b:24: eb:a7:fa:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUxMTA0MjMxNDI1WhcNMjUxMTExMjMxNDI1WjAYMRYwFAYD VQQDEw02OTBhODhkMi0xMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGW5aRc4XhL9Iz/PMc+m4dTtGJJemCpgtGAAMnBsspYJl1fr8OsgELBMJYQr JrU/4FVSZLBV2GyjK1hPXI94IN4oirspqNqD4v/XJFpSbzdNEQhZQACKy+DzTj77 0cuC/nxjBSENSJvFNH3jnKjNMi3MtTThoBBhxm2VIR3lZp93DJ/xEKUnILrwQrwM D+Q57UjLiQcSKt+LV49ZmQODfKRPyeVJP/XZIs0G9FFOCxR7AtdRqiZXgsvdrvie 7KVItw3x3vtvSzOBQLQq+IsQYg5RTxvR0TdZ3aNTW2Nzp6ptgogecDWWE00c1DLE cYffFMIiQHQcNcErIsznVIUTuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbzKcxj vdfe1pleeIzLK0DvTdqPMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4cpOGgC3OLp8e86t2wW6LU/ZFLURQPGukKgk2/JgPgLrKXt5jatPh Kaz+3ad3F0dqyfq2mgqa8Ph1iSb8El4rjOeyah7PD8sVt6ng9mxyKJ3p3KfFX9tb KltcxGUKm+jhpvi2s/dT6QEpnnWIhXqKdj0K5crxu6DMZfQhIrrads5b7FhzK+/t Bm474/5q7u5F2Yp/KdzESl2N/ZLuK9j3ZG3c5SfDL0H/7mlmu+zReW3Jybe5ohNE 51Qj9hEoWnqCHkfdVx1hB0O+pWLbVjACJ4v1hcRf5q5fXU6oiPmuvX4H+sZ5EcNc svvhNxVndC/S8VlgA9VRgSP3myTrp/qE -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:28 2025 by rpki-client