$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: m/kCRZ/UJi+4vDuyyhbRuApODYMn0so93AMEAaWaIhY= Subject key identifier: 10:42:BF:5B:4A:85:66:A8:53:D5:3A:16:AF:2B:CC:2B:B6:CF:F6:16 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09DB Signing time: Fri 08 Aug 2025 20:15:55 +0000 Manifest this update: Fri 08 Aug 2025 20:15:54 +0000 Manifest next update: Fri 15 Aug 2025 20:15:54 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: fS/XJW1xmIG6fzXfvazieSeOHDJcap5jUrV+IRBjSO0=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Aug 8 20:15:54 2025 GMT Not After : Aug 15 20:15:54 2025 GMT Subject: CN=68965afb-cb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4c:9c:34:26:61:b3:84:02:c6:c3:8c:bf:ff: 56:95:16:d8:0b:01:13:e3:12:d8:af:68:b9:8d:0f: d9:05:a6:4a:22:07:25:c7:21:47:37:2e:16:58:47: 26:3e:8d:4b:67:63:d7:44:cc:e9:13:13:dd:c7:fe: b5:fd:dd:1e:7b:c2:56:4e:80:0c:d0:6c:82:bf:c8: 1f:5d:4a:31:40:5f:86:f9:bd:85:5c:03:85:be:08: d0:c9:bb:ee:e6:5f:df:fb:b9:bc:ac:d6:b5:02:bb: 11:5e:d0:4e:e4:38:68:d0:39:e2:e7:c9:3c:e4:4a: 98:1a:2a:de:81:6d:79:f7:25:c9:84:aa:ea:d8:30: 4f:23:6e:99:ff:91:34:25:a9:53:fd:a8:1d:44:b5: ee:96:6f:30:cb:70:f7:5a:ef:41:56:11:81:f2:79: 14:44:00:9d:24:00:a3:91:65:bd:87:25:8b:71:65: e7:1b:af:e4:fa:5b:2b:01:ff:e5:f6:8d:30:38:76: 91:7f:6b:ef:28:25:94:35:63:5e:99:40:5f:51:3a: 32:46:ab:12:6d:2a:c5:d0:38:19:0b:06:1f:25:19: 3c:2b:a9:ce:b5:ad:fa:50:a6:57:33:d3:ba:a3:dc: 8f:8b:1b:17:8a:95:b9:b5:54:40:76:3e:02:65:4a: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:42:BF:5B:4A:85:66:A8:53:D5:3A:16:AF:2B:CC:2B:B6:CF:F6:16 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:c5:f9:25:b7:1a:f9:c7:cb:5c:84:97:e8:61:a8:10:f6: 3f:79:b9:4b:8f:f1:cd:65:8e:44:24:98:45:9c:50:46:ad:6e: 1d:c2:f7:2e:8d:bf:7f:58:08:ed:93:37:29:22:fe:44:17:60: 43:b0:97:5e:6b:c0:ba:2d:07:4e:85:6c:4b:4c:b9:7f:96:2a: 3e:5c:85:3e:7f:83:51:93:8c:d3:a8:f2:f0:83:f3:1d:60:a2: d7:1a:4f:75:7d:c2:05:39:d6:c0:d6:30:73:ff:2b:a0:52:1e: 11:22:9d:a3:68:ce:52:64:0f:56:e3:a4:ca:2c:1f:e2:b7:a4: 22:8a:82:f6:f3:0b:58:30:15:e8:0f:ef:f6:f0:b1:38:80:b7: 85:a1:24:f2:42:f9:62:99:24:67:b8:aa:bc:fa:75:b9:93:1f: 35:b8:6a:72:7f:e6:00:3a:e3:a4:25:ac:43:d5:d9:9b:eb:51: ea:03:94:8a:d1:f9:a0:b6:7e:02:9c:0c:ce:87:89:70:aa:9b: fd:58:08:4e:ca:40:43:35:6a:97:e0:24:da:e5:87:bd:72:e5: fc:f4:69:b6:45:0c:bb:50:40:11:a0:03:f2:39:29:7b:e6:0c: f1:04:64:6f:86:2d:6e:ab:8a:c2:87:c3:77:38:b6:10:94:68: 55:93:dd:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwODA4MjAxNTU0WhcNMjUwODE1MjAxNTU0WjAYMRYwFAYD VQQDEw02ODk2NWFmYi1jYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50ycNCZhs4QCxsOMv/9WlRbYCwET4xLYr2i5jQ/ZBaZKIgclxyFHNy4WWEcm Po1LZ2PXRMzpExPdx/61/d0ee8JWToAM0GyCv8gfXUoxQF+G+b2FXAOFvgjQybvu 5l/f+7m8rNa1ArsRXtBO5Dho0Dni58k85EqYGiregW159yXJhKrq2DBPI26Z/5E0 JalT/agdRLXulm8wy3D3Wu9BVhGB8nkURACdJACjkWW9hyWLcWXnG6/k+lsrAf/l 9o0wOHaRf2vvKCWUNWNemUBfUToyRqsSbSrF0DgZCwYfJRk8K6nOta36UKZXM9O6 o9yPixsXipW5tVRAdj4CZUobPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBCv1tK hWaoU9U6Fq8rzCu2z/YWMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfocX5Jbca+cfLXISX6GGoEPY/eblLj/HNZY5EJJhFnFBGrW4dwvcu jb9/WAjtkzcpIv5EF2BDsJdea8C6LQdOhWxLTLl/lio+XIU+f4NRk4zTqPLwg/Md YKLXGk91fcIFOdbA1jBz/yugUh4RIp2jaM5SZA9W46TKLB/it6QiioL28wtYMBXo D+/28LE4gLeFoSTyQvlimSRnuKq8+nW5kx81uGpyf+YAOuOkJaxD1dmb61HqA5SK 0fmgtn4CnAzOh4lwqpv9WAhOykBDNWqX4CTa5Ye9cuX89Gm2RQy7UEARoAPyOSl7 5gzxBGRvhi1uq4rCh8N3OLYQlGhVk90d -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:42 2025 by rpki-client