$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: snCozUN9tyenvlJN90tvtcWoaYE+S6hmbUoo8PyA1kQ= Subject key identifier: 4D:D7:06:A2:F7:8D:8F:A8:5E:77:79:BA:DF:58:9D:D4:23:93:5E:B0 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09D4 Signing time: Sat 26 Jul 2025 20:06:52 +0000 Manifest this update: Sat 26 Jul 2025 20:06:51 +0000 Manifest next update: Sat 02 Aug 2025 20:06:51 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: vOhAkbCPW4bUQYvbW5bcWP7mGH6nCIYSvGo30gIMoi4=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 20:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Jul 26 20:06:51 2025 GMT Not After : Aug 2 20:06:51 2025 GMT Subject: CN=6885355c-bab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:a0:ad:8d:fb:c7:42:19:6d:bf:82:ed:33: c6:4c:a2:4d:a1:92:42:47:ea:c2:8a:11:44:97:fd: 24:35:22:86:17:4f:e6:38:14:de:77:f2:68:63:6a: 5d:17:34:19:8f:49:32:c5:09:08:8d:b2:18:1c:31: 9f:5c:60:df:3a:e0:a1:2d:5a:80:30:62:d4:6a:39: 4a:7e:12:0b:63:ef:e1:fc:9f:d6:d3:3b:c5:c0:e6: 4a:41:c9:ff:5a:96:93:b5:12:81:ad:3e:7f:20:88: 04:0c:23:13:2f:92:91:34:6a:3c:89:c3:52:d8:8d: f1:2e:08:2c:c2:49:5d:7d:1d:40:eb:e6:fd:89:7e: 12:09:3b:5d:74:00:96:7e:7d:ff:32:78:06:e7:42: c9:82:c7:f3:fb:2e:a7:fb:b6:1a:8c:1f:a1:d2:e4: b2:1c:b8:ba:21:d2:19:ed:14:b6:7e:fb:db:b8:16: 9c:77:45:24:9c:c7:32:36:8f:eb:1a:b9:be:38:4c: 76:20:7c:56:f4:ad:a8:ee:98:e0:fa:1d:13:96:0e: fc:03:78:ae:89:80:68:ca:be:d6:97:f4:b2:6d:3c: 5e:a6:90:fb:67:bc:7b:ed:b5:31:81:d5:97:29:e4: 3d:a0:b3:6f:f2:60:ae:76:4b:14:c1:b3:aa:42:91: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D7:06:A2:F7:8D:8F:A8:5E:77:79:BA:DF:58:9D:D4:23:93:5E:B0 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2d:eb:d6:fb:e4:64:d2:9a:61:2a:55:7d:9f:28:01:2f:6e: f7:f6:c0:b7:34:53:95:a6:09:0d:c7:eb:97:94:eb:ab:37:45: 8b:ee:c8:74:e0:8e:cc:b4:d1:7c:55:03:d2:ea:35:82:b4:be: 25:31:dc:17:0b:13:e0:e1:12:c6:ac:c3:78:f4:97:2b:26:2d: b8:89:ee:8a:a9:65:2d:34:d9:10:b6:24:d0:0d:73:e8:7a:47: 2f:69:4f:6e:87:11:75:b8:dc:6d:5c:63:e5:6c:68:86:52:09: 2b:45:f7:a5:cc:3f:ed:5a:e1:03:6b:fb:37:ab:19:b6:ef:bd: 01:af:94:60:ab:26:a2:fb:bb:66:ab:b0:1a:ab:34:e3:63:2c: 7f:71:40:fd:ab:75:96:f5:7d:f7:1b:5f:a1:44:0d:16:99:4c: 25:e5:54:86:1a:39:18:68:1a:cc:c0:5f:bc:16:f9:6d:6e:9c: 09:ff:6b:28:f8:4f:25:ba:b2:2e:a6:f9:f5:37:e2:11:7d:5b: 55:35:d5:40:6e:3f:1d:8b:46:ed:e9:2e:c0:ad:11:5e:fb:e3: a7:05:ee:ea:25:2b:71:1b:fc:e3:28:06:cc:bf:83:f0:f4:04: 5e:81:ce:d7:07:5e:64:a4:1e:b5:69:25:53:44:0e:c1:41:a1: ef:11:68:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwNzI2MjAwNjUxWhcNMjUwODAyMjAwNjUxWjAYMRYwFAYD VQQDEw02ODg1MzU1Yy1iYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D+grY37x0IZbb+C7TPGTKJNoZJCR+rCihFEl/0kNSKGF0/mOBTed/JoY2pd FzQZj0kyxQkIjbIYHDGfXGDfOuChLVqAMGLUajlKfhILY+/h/J/W0zvFwOZKQcn/ WpaTtRKBrT5/IIgEDCMTL5KRNGo8icNS2I3xLggswkldfR1A6+b9iX4SCTtddACW fn3/MngG50LJgsfz+y6n+7YajB+h0uSyHLi6IdIZ7RS2fvvbuBacd0UknMcyNo/r Grm+OEx2IHxW9K2o7pjg+h0Tlg78A3iuiYBoyr7Wl/SybTxeppD7Z7x77bUxgdWX KeQ9oLNv8mCudksUwbOqQpEn4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3XBqL3 jY+oXnd5ut9YndQjk16wMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqLevW++Rk0pphKlV9nygBL2739sC3NFOVpgkNx+uXlOurN0WL7sh0 4I7MtNF8VQPS6jWCtL4lMdwXCxPg4RLGrMN49JcrJi24ie6KqWUtNNkQtiTQDXPo ekcvaU9uhxF1uNxtXGPlbGiGUgkrRfelzD/tWuEDa/s3qxm2770Br5Rgqyai+7tm q7AaqzTjYyx/cUD9q3WW9X33G1+hRA0WmUwl5VSGGjkYaBrMwF+8FvltbpwJ/2so +E8lurIupvn1N+IRfVtVNdVAbj8di0bt6S7ArRFe++OnBe7qJStxG/zjKAbMv4Pw 9ARegc7XB15kpB61aSVTRA7BQaHvEWjW -----END CERTIFICATE-----Generated at Sun Jul 27 13:55:56 2025 by rpki-client