$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: lIyFMflKao0tF2aDtWyAj5tQYKeAX/PFnyHfrn1AG4c= Subject key identifier: A9:66:9B:03:A1:19:09:ED:E9:60:2E:C5:BE:B7:06:D7:F9:FE:EA:7B Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09BE Signing time: Mon 16 Jun 2025 19:50:10 +0000 Manifest this update: Mon 16 Jun 2025 19:50:10 +0000 Manifest next update: Mon 23 Jun 2025 19:50:10 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: 2q5fF/trqQe3ec4ZA24P//jQ7xFhCnQIujjWt0o2zZs=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: lxvvRyia+dYG/RTAnw/MyHDAYp9brSQqhqi6+EJeU3U=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: aB1LCPCRJW8naYfEVIp9CRNODKyzFCft7X+l6mgKlac=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: kihUyOia/OlzOx1JrMGlIb7lrdnflQKggA5rPkjNfOc=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: N0OOA+uslC7QKkvKNK3g9YnyrlYLfa1CA2I9hSYLybA=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: iZ1z0mVjP4+uINPpX+HQ1Uw4sB1ID9JJcxPvuUt2mzU=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: EBnXmNp6pTupj85+HC37Errz7xWTGrLIfMOv4d/yBFo=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Jun 16 19:50:10 2025 GMT Not After : Jun 23 19:50:10 2025 GMT Subject: CN=68507572-542d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:e0:e1:5a:4b:26:40:43:b3:b9:09:8c:fd: 4f:97:e7:c9:fb:b7:e1:3a:26:4d:18:23:30:a4:ad: 4a:e2:fc:88:a8:25:f5:0d:32:29:57:5d:bf:b8:a9: 00:b9:f0:72:7d:ad:53:2b:13:8d:3a:87:c5:bd:a0: c3:18:41:6b:46:95:e2:fe:cd:92:4e:54:f8:cc:74: 01:3e:49:ec:d3:ae:85:3c:a3:89:25:c3:a8:8e:6a: bd:27:77:71:9e:c3:fe:cb:4d:5b:6d:02:d3:e6:3b: 4d:d3:02:92:90:c5:2c:73:ff:63:f4:45:71:fe:2f: 81:cc:62:1c:f9:d6:32:a8:dd:33:d6:f0:2b:19:1b: 58:80:b8:de:b6:50:64:df:cb:85:d2:80:6f:9a:69: eb:c8:0e:47:ca:72:a2:af:0c:f3:24:9a:27:7e:5e: 8c:c5:76:a7:b6:30:f7:8c:4c:f0:ca:ba:c0:27:5c: 3d:a2:3c:9a:e0:69:d6:a3:74:a4:34:d0:f2:d3:eb: c5:e9:b8:16:a8:6e:c3:31:5d:fd:ff:b6:c4:18:30: 8f:34:fc:b8:f9:3e:1d:41:60:5a:6e:49:73:f3:11: 77:2e:18:4a:3b:e8:29:a3:0c:99:11:c5:99:e5:b2: a4:eb:02:4f:d9:14:2b:25:9c:d3:cb:3b:ec:18:4d: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:66:9B:03:A1:19:09:ED:E9:60:2E:C5:BE:B7:06:D7:F9:FE:EA:7B X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:83:06:c6:04:d4:d9:ae:05:61:b7:56:ab:8d:e5:f6:d1: 1a:48:9c:45:97:b5:dd:e1:90:33:4e:12:e5:fc:00:de:68:df: 38:a5:4f:b5:ce:2d:3a:32:8d:76:04:38:f1:54:35:77:97:f1: 85:65:08:ac:45:20:36:9a:c7:ef:61:b1:b4:85:17:23:25:75: f6:84:cd:73:93:50:6b:9b:ab:dd:b6:8f:ce:bb:7c:15:39:06: 75:50:bc:75:d6:e2:88:1e:76:2e:68:9c:46:0a:7d:db:46:b8: cf:91:e4:8e:1f:ba:f5:04:11:68:0e:c2:dc:d1:17:7b:91:00: 79:d4:4b:b0:52:ac:fc:2b:7e:e4:48:28:97:3e:fc:c6:11:55: a2:5d:53:15:34:06:8a:4a:ea:49:da:9d:68:e6:22:b1:47:03: ef:48:6b:47:d4:fe:13:45:91:09:84:fb:fb:86:44:ba:91:e8: 59:f0:ac:e9:d7:1b:4d:fb:bf:7f:f8:16:56:bc:0b:78:2d:54: 8b:49:61:a0:eb:c6:a0:7d:fa:c0:2f:3a:f8:7a:71:f4:27:95: 9a:ca:24:2e:c6:69:8b:23:bc:76:8a:dd:dd:77:0c:1f:8c:04: af:82:90:ed:83:39:17:5c:45:71:75:ec:6c:64:aa:06:17:a1: 01:88:ef:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwNjE2MTk1MDEwWhcNMjUwNjIzMTk1MDEwWjAYMRYwFAYD VQQDEw02ODUwNzU3Mi01NDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Wfg4VpLJkBDs7kJjP1Pl+fJ+7fhOiZNGCMwpK1K4vyIqCX1DTIpV12/uKkA ufByfa1TKxONOofFvaDDGEFrRpXi/s2STlT4zHQBPkns066FPKOJJcOojmq9J3dx nsP+y01bbQLT5jtN0wKSkMUsc/9j9EVx/i+BzGIc+dYyqN0z1vArGRtYgLjetlBk 38uF0oBvmmnryA5HynKirwzzJJonfl6MxXantjD3jEzwyrrAJ1w9ojya4GnWo3Sk NNDy0+vF6bgWqG7DMV39/7bEGDCPNPy4+T4dQWBabklz8xF3LhhKO+gpowyZEcWZ 5bKk6wJP2RQrJZzTyzvsGE3bgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlmmwOh GQnt6WAuxb63Btf5/up7MB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXh4MGxgTU2a4FYbdWq43l9tEaSJxFl7Xd4ZAzThLl/ADeaN84pU+1 zi06Mo12BDjxVDV3l/GFZQisRSA2msfvYbG0hRcjJXX2hM1zk1Brm6vdto/Ou3wV OQZ1ULx11uKIHnYuaJxGCn3bRrjPkeSOH7r1BBFoDsLc0Rd7kQB51EuwUqz8K37k SCiXPvzGEVWiXVMVNAaKSupJ2p1o5iKxRwPvSGtH1P4TRZEJhPv7hkS6kehZ8Kzp 1xtN+79/+BZWvAt4LVSLSWGg68agffrALzr4enH0J5WayiQuxmmLI7x2it3ddwwf jASvgpDtgzkXXEVxdexsZKoGF6EBiO9q -----END CERTIFICATE-----Generated at Wed Jun 18 08:17:27 2025 by rpki-client