$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: ar8RV++wZd6tLwLIW+7q9t+wLL0AO74w/ohl/ksRjZw= Subject key identifier: 3C:3B:BD:30:4A:13:16:B2:9A:20:57:03:A8:38:BC:CB:0A:6F:4E:D6 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09BA Signing time: Sun 08 Jun 2025 19:44:35 +0000 Manifest this update: Sun 08 Jun 2025 19:44:35 +0000 Manifest next update: Sun 15 Jun 2025 19:44:35 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: F66cfiN5CaSsBeeQUkZTgKbRtTvrXYMLW3PJ5hU/2H0=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: lxvvRyia+dYG/RTAnw/MyHDAYp9brSQqhqi6+EJeU3U=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: aB1LCPCRJW8naYfEVIp9CRNODKyzFCft7X+l6mgKlac=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: kihUyOia/OlzOx1JrMGlIb7lrdnflQKggA5rPkjNfOc=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: N0OOA+uslC7QKkvKNK3g9YnyrlYLfa1CA2I9hSYLybA=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: iZ1z0mVjP4+uINPpX+HQ1Uw4sB1ID9JJcxPvuUt2mzU=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: EBnXmNp6pTupj85+HC37Errz7xWTGrLIfMOv4d/yBFo=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Jun 8 19:44:35 2025 GMT Not After : Jun 15 19:44:35 2025 GMT Subject: CN=6845e823-b059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:93:69:80:82:62:4e:45:5a:9b:b9:11:9f: 6f:6a:5a:84:df:57:72:4a:e4:c0:c5:20:d5:ff:2a: 80:af:70:22:fd:a6:56:3b:50:09:77:88:b0:f2:20: bc:21:18:db:89:d2:5b:43:80:04:c3:7c:0f:7a:49: b6:b8:8b:80:7d:50:86:56:82:8c:c0:92:ce:10:75: b3:f9:8c:59:64:e4:b0:c8:bb:1d:68:59:2e:05:ad: 1d:30:8a:a4:6f:a9:15:91:03:d7:58:2f:16:1f:68: e3:bb:7b:52:64:65:ab:cb:e7:70:dd:9f:b7:38:59: 31:52:d5:c6:31:6e:5e:d5:d5:30:0e:e2:c9:29:3e: 1e:f7:6e:5e:d5:f6:7f:e5:4a:3c:64:6f:99:45:aa: 0c:3b:53:03:e8:fb:b7:52:40:5b:7e:75:37:cd:bb: 55:9e:62:5d:94:0b:74:7e:3f:ac:a1:97:ba:36:09: ad:41:cc:8d:2b:5e:59:a6:95:1f:e5:63:bf:73:9e: af:33:ac:5a:73:d8:d1:6d:0a:85:ff:2b:8b:ed:b4: db:ec:bb:07:35:15:87:ee:5c:93:96:5f:9d:05:45: 54:db:8a:04:d4:98:f7:87:56:a5:36:bb:ba:ea:09: f1:df:60:0d:f4:52:18:a5:e8:02:73:83:a0:41:a7: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3B:BD:30:4A:13:16:B2:9A:20:57:03:A8:38:BC:CB:0A:6F:4E:D6 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4f:ee:ad:f7:3f:d5:28:37:92:e1:52:48:f0:2d:46:20:82: 92:a0:ab:58:c0:6f:e8:6c:50:73:c3:93:f2:2b:7f:7e:54:43: e8:3d:2b:80:fd:7d:14:44:4e:62:c2:00:5d:9b:c9:2b:72:c1: cf:ea:05:71:a2:ee:f5:a4:2f:8d:cf:6e:f5:ee:70:fb:b4:c7: 02:87:83:c1:f6:4e:9e:a1:26:54:44:2a:5b:07:9a:87:93:51: 9b:5f:bd:2a:db:88:62:25:7f:4d:ac:00:55:e3:97:70:29:ae: 3e:ec:bd:bf:a5:d0:05:d2:3a:cb:dc:6d:15:bb:f0:8a:5e:0f: c4:75:9b:c6:9d:1c:de:bb:af:95:da:f3:16:b4:97:ea:9d:43: 8f:14:8d:a7:7d:0e:9a:e1:89:f3:95:38:66:f9:f9:c3:31:61: 26:f0:bf:15:00:fd:29:be:6e:1e:30:41:dc:7b:24:8d:ae:13: e1:93:c8:32:55:ce:b6:a9:8e:ce:09:20:75:d5:5b:6c:a8:ca: 33:de:cc:14:a4:ce:49:0a:a3:15:80:01:88:bb:10:99:ea:d1: 39:18:0b:ee:dd:4b:ba:03:f6:56:94:18:ee:a1:9f:f7:21:49: fb:e3:65:c6:40:75:77:a0:8a:65:ac:8b:81:02:24:83:c7:c8: 9c:06:a0:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwNjA4MTk0NDM1WhcNMjUwNjE1MTk0NDM1WjAYMRYwFAYD VQQDEw02ODQ1ZTgyMy1iMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DWTaYCCYk5FWpu5EZ9valqE31dySuTAxSDV/yqAr3Ai/aZWO1AJd4iw8iC8 IRjbidJbQ4AEw3wPekm2uIuAfVCGVoKMwJLOEHWz+YxZZOSwyLsdaFkuBa0dMIqk b6kVkQPXWC8WH2jju3tSZGWry+dw3Z+3OFkxUtXGMW5e1dUwDuLJKT4e925e1fZ/ 5Uo8ZG+ZRaoMO1MD6Pu3UkBbfnU3zbtVnmJdlAt0fj+soZe6NgmtQcyNK15ZppUf 5WO/c56vM6xac9jRbQqF/yuL7bTb7LsHNRWH7lyTll+dBUVU24oE1Jj3h1alNru6 6gnx32AN9FIYpegCc4OgQafXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw7vTBK ExaymiBXA6g4vMsKb07WMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7T+6t9z/VKDeS4VJI8C1GIIKSoKtYwG/obFBzw5PyK39+VEPoPSuA /X0URE5iwgBdm8krcsHP6gVxou71pC+Nz2717nD7tMcCh4PB9k6eoSZURCpbB5qH k1GbX70q24hiJX9NrABV45dwKa4+7L2/pdAF0jrL3G0Vu/CKXg/EdZvGnRzeu6+V 2vMWtJfqnUOPFI2nfQ6a4YnzlThm+fnDMWEm8L8VAP0pvm4eMEHceySNrhPhk8gy Vc62qY7OCSB11VtsqMoz3swUpM5JCqMVgAGIuxCZ6tE5GAvu3Uu6A/ZWlBjuoZ/3 IUn742XGQHV3oIplrIuBAiSDx8icBqAk -----END CERTIFICATE-----Generated at Mon Jun 9 07:04:24 2025 by rpki-client