$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: u90UAgMaBfM0ihTuRiLdLpCqn1K5W4/BGBXnElo39ho= Subject key identifier: 97:79:B4:CD:88:C4:0E:F7:FF:39:DB:0F:F7:3A:B8:C5:60:98:55:7C Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 053E Signing time: Thu 24 Apr 2025 23:14:30 +0000 Manifest this update: Thu 24 Apr 2025 23:14:30 +0000 Manifest next update: Thu 01 May 2025 23:14:30 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: fBj/CjmAGaAdBPhcWQ752lzSZSaJ43w9bTkGC3nKmkY=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: Jf8QtUinuXEmxe7plhHtwAZrMyKb/TssbL3bZiwtCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Apr 24 23:14:30 2025 GMT Not After : May 1 23:14:30 2025 GMT Subject: CN=680ac5d6-1dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:30:f1:0c:b2:17:0e:51:b4:8e:4a:47:c2: 7f:7a:22:ed:e3:c6:67:0c:01:18:73:0d:6d:91:a3: 43:b1:74:31:ec:d2:e6:4b:9d:48:3a:73:ff:25:ad: a3:12:9e:5c:71:18:02:2a:52:96:f5:22:6a:9a:d8: 9f:e8:ac:35:63:13:a0:4e:67:9d:f1:7a:d5:46:37: 93:83:bd:c9:91:4c:62:fc:4b:fe:27:27:ad:14:95: d2:5b:46:79:40:6e:af:12:eb:32:af:b7:78:dd:8e: 90:f8:8d:b7:d8:9a:86:67:74:e6:86:be:33:be:88: 35:88:eb:80:98:37:72:e8:bb:a9:32:50:9e:a9:bc: 9f:85:3c:5d:18:09:90:ba:64:56:96:5a:aa:a1:9d: e5:7d:22:28:53:50:db:da:50:d1:2a:ba:da:c3:93: f2:3e:4f:c3:c7:a5:78:cd:3e:04:9a:95:a7:53:5a: 26:2a:09:b9:c1:de:7a:87:8f:92:db:c0:09:65:33: c7:c2:4c:1f:b1:c4:ca:58:b2:a4:56:ab:c5:42:b2: d3:a2:24:1b:6e:e3:6a:f6:40:94:44:af:a7:4f:49: 20:8b:46:3d:ff:cc:c1:74:e9:7a:69:d2:0a:62:a7: 7d:d8:79:9f:5e:de:69:30:b6:a4:c5:e5:6d:42:81: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:79:B4:CD:88:C4:0E:F7:FF:39:DB:0F:F7:3A:B8:C5:60:98:55:7C X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0e:35:2a:83:e1:b9:a2:a3:32:cb:7a:80:7f:a5:21:90:f2: 35:88:4a:19:ff:2a:51:99:cc:8e:3b:f8:fa:d1:ee:98:e9:e9: 4e:f2:1b:db:20:7a:8e:25:03:a1:42:26:31:4e:c3:c1:14:26: cf:37:91:6a:e5:17:c4:c4:92:db:4f:f0:95:89:24:08:76:d6: aa:b5:54:a6:4f:d4:81:32:85:d2:e4:77:ad:e7:c0:69:8d:66: 4b:de:a3:fe:1b:eb:d2:39:a8:57:2e:ab:87:56:2c:f6:f7:4b: 54:d7:c3:31:21:37:fb:5b:dc:53:b8:04:ba:27:1c:5d:8c:e2: ba:3c:b8:30:76:7f:e1:68:7f:45:47:ab:11:1a:93:b3:05:2b: 13:44:8f:35:3a:8e:c0:da:2d:e5:70:d4:9b:58:15:3e:ff:a7: 90:d8:35:19:eb:9d:5b:dc:47:54:57:b4:41:f9:b4:95:83:0a: 38:fc:42:ab:fd:65:3e:92:c6:09:8f:98:3a:d2:07:20:9f:b3: 04:aa:d5:04:7c:f3:0d:8f:25:1f:ea:9f:f7:dd:04:1a:87:ac: 39:72:f1:39:a1:b5:a1:f4:27:a1:e1:12:1e:45:6f:d6:ec:75: 1d:18:e2:6d:2f:02:fb:93:70:81:f4:91:82:a0:6d:fc:f0:2f: ad:de:12:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjUwNDI0MjMxNDMwWhcNMjUwNTAxMjMxNDMwWjAYMRYwFAYD VQQDEw02ODBhYzVkNi0xZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3Qw8QyyFw5RtI5KR8J/eiLt48ZnDAEYcw1tkaNDsXQx7NLmS51IOnP/Ja2j Ep5ccRgCKlKW9SJqmtif6Kw1YxOgTmed8XrVRjeTg73JkUxi/Ev+JyetFJXSW0Z5 QG6vEusyr7d43Y6Q+I232JqGZ3Tmhr4zvog1iOuAmDdy6LupMlCeqbyfhTxdGAmQ umRWllqqoZ3lfSIoU1Db2lDRKrraw5PyPk/Dx6V4zT4EmpWnU1omKgm5wd56h4+S 28AJZTPHwkwfscTKWLKkVqvFQrLToiQbbuNq9kCURK+nT0kgi0Y9/8zBdOl6adIK Yqd92HmfXt5pMLakxeVtQoGttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJd5tM2I xA73/znbD/c6uMVgmFV8MB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoDjUqg+G5oqMyy3qAf6UhkPI1iEoZ/ypRmcyOO/j60e6Y6elO8hvb IHqOJQOhQiYxTsPBFCbPN5Fq5RfExJLbT/CViSQIdtaqtVSmT9SBMoXS5Het58Bp jWZL3qP+G+vSOahXLquHViz290tU18MxITf7W9xTuAS6JxxdjOK6PLgwdn/haH9F R6sRGpOzBSsTRI81Oo7A2i3lcNSbWBU+/6eQ2DUZ651b3EdUV7RB+bSVgwo4/EKr /WU+ksYJj5g60gcgn7MEqtUEfPMNjyUf6p/33QQah6w5cvE5obWh9Ceh4RIeRW/W 7HUdGOJtLwL7k3CB9JGCoG388C+t3hIT -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:14 2025 by rpki-client