$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: GfSH2bQ9VxUS2ggub3L55KRap3ejWy+tsly9KUWKCL0= Subject key identifier: 01:4C:2E:92:75:61:1E:F7:C6:09:DB:AA:96:53:DF:63:71:32:9A:CD Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 057B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 0575 Signing time: Fri 08 Aug 2025 23:44:42 +0000 Manifest this update: Fri 08 Aug 2025 23:44:42 +0000 Manifest next update: Fri 15 Aug 2025 23:44:42 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: Ej6QChaEIL47Nuy4MYazJHT3rjzr3hfOkAFK3xwLYDc=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Aug 8 23:44:42 2025 GMT Not After : Aug 15 23:44:42 2025 GMT Subject: CN=68968bea-510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:6a:70:57:3c:d8:b4:ae:6c:67:86:28:1d: e4:d5:ae:88:16:07:0f:c7:64:a4:49:f9:df:f6:79: 09:bc:55:14:21:54:7d:95:25:49:6a:2d:33:71:3d: d2:7f:68:e2:dd:d4:45:dc:da:5f:fd:f8:e0:b6:e4: 97:72:3d:6a:2a:c8:17:15:2d:89:28:e7:2c:5d:73: 88:9d:60:68:ac:e2:1e:84:99:f4:0e:4b:13:a8:f6: aa:7d:6f:ce:92:b9:ec:c0:08:0c:b3:c4:51:3c:3e: 19:da:6e:b8:17:af:93:d9:4f:b9:d5:57:30:0d:96: a8:8a:22:1a:97:a2:8e:20:a7:d7:7c:45:14:c7:d6: ac:9e:d5:7c:ac:a7:29:49:39:88:ee:32:19:1a:b2: 1f:13:5b:5a:be:27:ce:0d:b9:53:4f:f9:c9:3f:a8: b4:93:aa:5f:99:11:89:12:43:0c:4b:4e:bc:33:5e: 46:7f:71:4c:74:50:1c:65:6f:e9:23:ef:44:13:b5: 46:20:61:e4:b0:6a:f5:66:ec:69:cd:13:c5:b4:a5: e6:c3:83:80:7b:76:3d:38:c1:9a:ba:ba:d3:4f:42: 67:c2:2b:f6:1d:d9:ef:50:b8:1e:85:6c:b0:67:79: 6e:9e:e8:8a:58:27:9d:32:8c:47:16:dc:1b:96:88: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:2E:92:75:61:1E:F7:C6:09:DB:AA:96:53:DF:63:71:32:9A:CD X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c1:33:37:7e:bc:6a:6f:28:5e:7c:65:49:2b:1d:4f:ec:84: 5a:9c:98:84:5f:5d:42:cd:6f:a9:32:3e:e5:c5:c0:0e:48:7b: dd:8b:bc:42:33:07:70:da:dd:67:cf:0b:46:a6:78:e1:73:fc: 57:7f:77:c7:80:9f:4d:98:be:0c:d7:d8:fe:dc:d5:92:94:27: a0:67:ea:74:4b:ca:be:53:40:19:b2:8b:f8:6a:9d:23:0f:17: f2:5b:dc:ae:53:bb:d9:9d:0b:fa:e4:c8:2b:cf:f5:e4:37:cd: 58:99:85:2d:02:ad:f8:26:56:a0:71:96:ff:ae:10:d9:ae:9f: f4:15:8d:05:e6:a4:83:8b:b3:87:e5:74:84:ea:85:b8:6d:fc: d4:7d:7c:7d:d4:6d:c2:a9:b2:f2:b7:99:b3:4d:37:5f:7b:54: 5e:b5:e6:a6:58:b2:65:cb:ce:e7:65:e9:5f:36:c6:9f:54:6e: 5e:f2:c9:07:e3:52:1b:26:8f:7b:b7:32:c4:61:fa:c4:b0:95: 53:d6:37:3d:6f:99:01:37:67:55:7c:3e:86:0e:0f:e8:d7:6f: bf:c3:cf:be:fd:75:d6:55:85:e8:20:72:1b:0c:60:20:b5:a8: 52:83:de:33:12:fd:9c:a1:93:39:d8:75:08:e1:22:ac:d7:75: 60:7a:c8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwODA4MjM0NDQyWhcNMjUwODE1MjM0NDQyWjAYMRYwFAYD VQQDEw02ODk2OGJlYS01MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXpqcFc82LSubGeGKB3k1a6IFgcPx2SkSfnf9nkJvFUUIVR9lSVJai0zcT3S f2ji3dRF3Npf/fjgtuSXcj1qKsgXFS2JKOcsXXOInWBorOIehJn0DksTqPaqfW/O krnswAgMs8RRPD4Z2m64F6+T2U+51VcwDZaoiiIal6KOIKfXfEUUx9asntV8rKcp STmI7jIZGrIfE1tavifODblTT/nJP6i0k6pfmRGJEkMMS068M15Gf3FMdFAcZW/p I+9EE7VGIGHksGr1ZuxpzRPFtKXmw4OAe3Y9OMGaurrTT0Jnwiv2HdnvULgehWyw Z3lunuiKWCedMoxHFtwblojjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFMLpJ1 YR73xgnbqpZT32NxMprNMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGwTM3frxqbyhefGVJKx1P7IRanJiEX11CzW+pMj7lxcAOSHvdi7xC Mwdw2t1nzwtGpnjhc/xXf3fHgJ9NmL4M19j+3NWSlCegZ+p0S8q+U0AZsov4ap0j DxfyW9yuU7vZnQv65Mgrz/XkN81YmYUtAq34JlagcZb/rhDZrp/0FY0F5qSDi7OH 5XSE6oW4bfzUfXx91G3CqbLyt5mzTTdfe1ReteamWLJly87nZelfNsafVG5e8skH 41IbJo97tzLEYfrEsJVT1jc9b5kBN2dVfD6GDg/o12+/w8++/XXWVYXoIHIbDGAg tahSg94zEv2coZM52HUI4SKs13VgesgV -----END CERTIFICATE-----Generated at Sun Aug 10 04:54:16 2025 by rpki-client