$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: Wh21ryTqaSYb7Yfz12qmB4GaMJ31ueRyZu0hGH8LOs4= Subject key identifier: 41:9E:0E:6D:F5:25:13:98:99:C9:E6:93:60:9B:40:29:0A:68:30:53 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 09B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 098E Signing time: Wed 12 Mar 2025 19:51:14 +0000 Manifest this update: Wed 12 Mar 2025 19:51:14 +0000 Manifest next update: Wed 19 Mar 2025 19:51:14 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: qpsOClk7niWBFuxONbmWiWP0MXM6LKwHeQ5AREih7tg=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: lxvvRyia+dYG/RTAnw/MyHDAYp9brSQqhqi6+EJeU3U=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: u0fp80nox7dAn7Yiu1ux22mPDrzXc3m+LvRefa9Vt4o=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: aB1LCPCRJW8naYfEVIp9CRNODKyzFCft7X+l6mgKlac=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: kihUyOia/OlzOx1JrMGlIb7lrdnflQKggA5rPkjNfOc=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: N0OOA+uslC7QKkvKNK3g9YnyrlYLfa1CA2I9hSYLybA=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: iZ1z0mVjP4+uINPpX+HQ1Uw4sB1ID9JJcxPvuUt2mzU=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: EBnXmNp6pTupj85+HC37Errz7xWTGrLIfMOv4d/yBFo=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 19:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2483 (0x9b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2 Validity Not Before: Mar 12 19:51:14 2025 GMT Not After : Mar 19 19:51:14 2025 GMT Subject: CN=67d1e5b2-7d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:df:9d:a6:51:54:33:16:94:99:e3:00:82: 48:01:95:cf:d9:a5:d5:7f:ce:2b:ce:00:c0:66:48: 72:df:13:ef:d4:4a:30:3a:b1:7d:2d:00:8b:ab:13: 47:c6:f9:a5:04:0e:85:9b:c1:da:d3:51:89:dc:66: ab:88:91:e2:e7:77:b0:43:58:48:66:80:51:1a:b7: 68:06:fb:4e:b7:9d:28:01:56:bf:da:8e:d6:6b:38: f0:24:b7:bf:b4:9d:0d:d6:2a:96:53:20:95:9e:84: dd:02:26:fc:f7:32:95:a0:2f:fd:97:ad:06:0a:9e: 11:6c:ef:10:4d:0c:ea:bf:2d:88:ab:da:bf:0f:7a: cf:96:d0:bc:28:37:fa:06:09:6e:72:50:75:71:6a: 22:66:a2:ac:a4:c3:cb:99:9f:3d:ab:70:37:6c:ae: 81:db:aa:95:b6:c8:27:57:9a:07:6a:14:e8:f8:62: 9d:93:be:0f:f2:18:80:f2:5f:a4:ef:5c:93:4c:8f: 02:94:5c:18:68:59:5e:54:95:fd:cd:8e:a9:e5:a1: ba:a7:ea:d7:d6:32:e1:1c:fc:46:70:59:43:44:88: 48:55:36:bc:7d:67:79:68:a5:db:c2:8c:1f:36:12: fd:5f:26:64:c5:52:43:08:12:4f:a6:70:55:88:33: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:0E:6D:F5:25:13:98:99:C9:E6:93:60:9B:40:29:0A:68:30:53 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:30:c3:91:77:dd:16:67:8a:eb:a3:08:52:67:70:be:54: 44:3b:af:15:af:f6:18:8f:41:3c:12:b9:ed:56:df:25:ed:c8: 73:7b:a1:73:c3:cf:f2:99:b7:9e:14:ab:8f:8d:63:41:2b:b0: 44:34:ea:7d:d1:c5:57:99:5f:0f:cb:c6:45:cb:67:42:c9:a2: 1e:5e:5c:b3:82:5b:b3:5c:f6:a2:ea:a2:62:c2:e0:73:3c:cf: 5e:eb:19:0b:28:89:04:9a:f4:73:ce:fd:5b:52:06:9c:18:35: 50:20:0b:b3:82:14:b9:ec:f7:6f:03:20:78:a0:db:a3:a5:1b: b9:23:31:82:85:43:3b:ee:01:b4:d5:d4:2c:88:c1:89:a8:f9: 5a:04:a1:09:b8:f9:75:ae:61:b6:10:ef:58:c3:eb:fd:68:0f: 67:73:5a:db:9d:fb:42:2a:e2:41:99:42:19:21:1f:09:6a:48: 66:2f:d0:45:30:b5:a9:c7:fd:63:d0:d9:a2:9d:5e:da:c8:61: 44:9b:b4:e7:b2:bd:6a:c7:d7:de:e2:92:b0:db:2f:eb:0d:4f: 07:bc:10:2a:66:2e:55:3b:7a:b1:50:68:8e:97:7f:0c:12:72: 69:39:be:ca:15:2a:3a:7a:d4:2f:99:2f:5a:02:28:2d:9d:b7: b4:0b:a5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwMzEyMTk1MTE0WhcNMjUwMzE5MTk1MTE0WjAYMRYwFAYD VQQDEw02N2QxZTViMi03ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p3fnaZRVDMWlJnjAIJIAZXP2aXVf84rzgDAZkhy3xPv1EowOrF9LQCLqxNH xvmlBA6Fm8Ha01GJ3GariJHi53ewQ1hIZoBRGrdoBvtOt50oAVa/2o7WazjwJLe/ tJ0N1iqWUyCVnoTdAib89zKVoC/9l60GCp4RbO8QTQzqvy2Iq9q/D3rPltC8KDf6 BgluclB1cWoiZqKspMPLmZ89q3A3bK6B26qVtsgnV5oHahTo+GKdk74P8hiA8l+k 71yTTI8ClFwYaFleVJX9zY6p5aG6p+rX1jLhHPxGcFlDRIhIVTa8fWd5aKXbwowf NhL9XyZkxVJDCBJPpnBViDPNAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGeDm31 JROYmcnmk2CbQCkKaDBTMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIvDDDkXfdFmeK66MIUmdwvlREO68Vr/YYj0E8ErntVt8l7chze6Fz w8/ymbeeFKuPjWNBK7BENOp90cVXmV8Py8ZFy2dCyaIeXlyzgluzXPai6qJiwuBz PM9e6xkLKIkEmvRzzv1bUgacGDVQIAuzghS57PdvAyB4oNujpRu5IzGChUM77gG0 1dQsiMGJqPlaBKEJuPl1rmG2EO9Yw+v9aA9nc1rbnftCKuJBmUIZIR8JakhmL9BF MLWpx/1j0NminV7ayGFEm7Tnsr1qx9fe4pKw2y/rDU8HvBAqZi5VO3qxUGiOl38M EnJpOb7KFSo6etQvmS9aAigtnbe0C6WT -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:54 2025 by rpki-client