$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: nXMVcsiYLJPB0aZDztk6y3l7hPeog8I6UcpeIRbAgYA= Subject key identifier: 26:50:3B:11:CC:33:18:EB:93:22:E4:9F:73:04:A4:F2:DC:DE:9F:7F Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 09C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09A0 Signing time: Wed 16 Apr 2025 19:52:11 +0000 Manifest this update: Wed 16 Apr 2025 19:52:11 +0000 Manifest next update: Wed 23 Apr 2025 19:52:11 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: wmyxN1co0shguKi08wGQuqabfj3tkEHZkJPVQOKDbNk=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: lxvvRyia+dYG/RTAnw/MyHDAYp9brSQqhqi6+EJeU3U=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: aB1LCPCRJW8naYfEVIp9CRNODKyzFCft7X+l6mgKlac=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: kihUyOia/OlzOx1JrMGlIb7lrdnflQKggA5rPkjNfOc=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: N0OOA+uslC7QKkvKNK3g9YnyrlYLfa1CA2I9hSYLybA=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: iZ1z0mVjP4+uINPpX+HQ1Uw4sB1ID9JJcxPvuUt2mzU=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: EBnXmNp6pTupj85+HC37Errz7xWTGrLIfMOv4d/yBFo=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2501 (0x9c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Apr 16 19:52:11 2025 GMT Not After : Apr 23 19:52:11 2025 GMT Subject: CN=68000a6b-db57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:73:05:2e:83:69:cb:db:ec:b6:0a:9f:74: 30:0a:16:1f:eb:1d:a5:e4:a5:91:9a:be:20:7f:b6: 50:0b:cb:ea:f2:bd:32:1a:2b:0b:67:25:e7:c7:91: 46:2e:ae:c7:ab:8b:fb:d8:75:50:a8:3c:4e:53:a3: 7b:50:9b:42:9d:bd:6b:da:eb:a0:d3:b1:c1:12:53: 27:7d:91:83:eb:ce:e8:34:06:8e:c9:57:5f:5c:e6: 13:b1:2a:24:7e:2d:5d:a0:45:2f:c9:df:6a:b6:43: b2:5a:7d:46:43:cd:09:b5:d6:c3:cf:5a:b3:25:97: 7e:08:5b:b1:b7:9f:fc:5e:69:9e:4b:0e:c8:66:b5: c9:55:f7:3d:48:1d:74:10:ba:25:e5:9d:40:0d:f7: 5b:d3:a6:72:ac:3e:4b:c2:c6:cf:cd:38:70:85:e1: 0b:37:78:43:b6:e4:dd:7e:f0:cf:aa:55:58:c3:fb: 4c:27:d2:6b:31:f7:ac:a8:59:2b:ce:05:62:8b:77: 3b:60:36:40:0e:2e:93:b2:15:0c:d6:af:61:7e:08: 4d:3f:4e:6f:dc:d7:8f:36:4f:ad:47:78:d3:16:14: 60:cf:4e:d2:38:25:c9:33:42:0d:58:97:e6:23:6c: a6:e1:60:fa:8a:49:56:48:01:87:8d:71:1b:5f:6f: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:50:3B:11:CC:33:18:EB:93:22:E4:9F:73:04:A4:F2:DC:DE:9F:7F X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:0a:32:f1:74:48:f4:bc:51:a0:cb:d9:3e:8e:69:b3:59: 33:d2:f3:9e:18:b9:75:6c:cf:0c:9c:fc:5b:a8:9a:70:19:c9: f5:15:4e:bd:a3:cd:21:64:df:1f:dc:b8:d7:d5:21:fc:b7:4a: 61:ce:97:db:01:7d:20:ce:5a:51:f0:61:4a:56:55:ff:21:95: a5:53:c5:93:17:7f:3c:c8:4d:50:1e:dd:6b:3d:4a:f0:02:3d: 81:9b:2e:2d:88:7a:d7:2b:ee:3b:cb:9a:31:ea:70:91:2b:f6: d9:e8:15:6f:8d:fa:4c:4f:66:d0:35:a5:5f:c2:b0:b4:29:1e: f8:f9:93:d0:0e:cb:f1:c6:4a:4d:d9:53:a6:52:9f:13:09:19: 68:c3:e5:68:f6:ff:bb:dd:2c:b9:a0:c0:30:22:98:b3:b5:00: 87:9a:72:89:c5:25:8d:ae:3e:3d:0e:8b:6b:2d:23:53:f7:42: c7:e0:13:9b:84:3f:71:b9:e9:f2:d5:54:aa:31:2d:e6:49:30: 01:d9:43:1b:3b:b0:39:d1:bb:a0:76:de:64:0e:ca:3e:29:43: e5:33:7d:90:af:c4:c7:2c:4f:eb:a7:c0:3d:23:8a:c7:00:36: 77:7a:87:11:bd:6e:e6:39:3f:d6:7e:95:b1:f8:36:69:ac:4a: 04:27:91:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwNDE2MTk1MjExWhcNMjUwNDIzMTk1MjExWjAYMRYwFAYD VQQDEw02ODAwMGE2Yi1kYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gpzBS6Dacvb7LYKn3QwChYf6x2l5KWRmr4gf7ZQC8vq8r0yGisLZyXnx5FG Lq7Hq4v72HVQqDxOU6N7UJtCnb1r2uug07HBElMnfZGD687oNAaOyVdfXOYTsSok fi1doEUvyd9qtkOyWn1GQ80JtdbDz1qzJZd+CFuxt5/8XmmeSw7IZrXJVfc9SB10 ELol5Z1ADfdb06ZyrD5LwsbPzThwheELN3hDtuTdfvDPqlVYw/tMJ9JrMfesqFkr zgVii3c7YDZADi6TshUM1q9hfghNP05v3NePNk+tR3jTFhRgz07SOCXJM0INWJfm I2ym4WD6iklWSAGHjXEbX28LIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZQOxHM MxjrkyLkn3MEpPLc3p9/MB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARcgoy8XRI9LxRoMvZPo5ps1kz0vOeGLl1bM8MnPxbqJpwGcn1FU69 o80hZN8f3LjX1SH8t0phzpfbAX0gzlpR8GFKVlX/IZWlU8WTF388yE1QHt1rPUrw Aj2Bmy4tiHrXK+47y5ox6nCRK/bZ6BVvjfpMT2bQNaVfwrC0KR74+ZPQDsvxxkpN 2VOmUp8TCRlow+Vo9v+73Sy5oMAwIpiztQCHmnKJxSWNrj49DotrLSNT90LH4BOb hD9xueny1VSqMS3mSTAB2UMbO7A50bugdt5kDso+KUPlM32Qr8THLE/rp8A9I4rH ADZ3eocRvW7mOT/WfpWx+DZprEoEJ5Fi -----END CERTIFICATE-----Generated at Fri Apr 18 16:30:07 2025 by rpki-client