$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: 0rq5YggQWrttl7vuP9xlGpvS5my/d+BE3slQltgren4= Subject key identifier: 2D:21:72:52:E7:FF:BD:B3:15:E0:DA:64:A8:04:70:0E:72:F8:02:C7 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09E2 Signing time: Fri 22 Aug 2025 20:03:49 +0000 Manifest this update: Fri 22 Aug 2025 20:03:49 +0000 Manifest next update: Fri 29 Aug 2025 20:03:49 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: QSqP+nEWT1C4LKZvlxbVkDkGg7oJHQkrNh7WGVXBsLE=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Aug 22 20:03:49 2025 GMT Not After : Aug 29 20:03:49 2025 GMT Subject: CN=68a8cd25-311c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:47:59:f2:94:3a:d8:2b:d2:67:c2:d6:6d: 92:29:8d:fe:c0:d0:dd:6c:b2:bb:16:d0:41:af:a1: 56:d1:6b:a9:99:d1:da:05:ad:23:6e:52:4a:6b:73: b5:7c:05:1f:23:50:b6:89:83:3e:39:31:a3:18:b2: 68:fc:49:93:b9:ce:67:b1:d4:89:2f:81:4a:4c:48: 4d:31:76:e0:2e:3c:f0:e3:2c:77:22:cc:db:62:d5: 5d:5d:4c:17:d3:58:06:3b:5a:ac:04:ef:89:6d:b4: d6:e3:1a:31:0f:1e:e6:ba:35:db:10:32:58:a2:a0: 73:58:c8:9d:e0:1d:0e:1a:6f:b8:43:27:8a:34:f4: 86:55:2f:e6:2e:03:6f:23:25:05:10:66:f4:19:f6: 65:d1:1f:2e:14:d6:da:d8:63:c2:a6:3b:fe:f0:5a: 6e:70:63:07:c3:97:75:0e:79:74:c8:0e:f1:4c:2b: 3d:d6:fd:19:fb:40:4a:a0:72:bf:36:a5:7b:5c:b3: d8:82:86:6d:8d:ba:63:2b:ab:3b:0a:d4:fa:de:88: 57:f1:d1:3a:ec:d3:a3:87:3f:83:f7:2f:8e:93:03: 82:65:a0:10:a9:fb:4c:d6:7f:cb:23:8a:e0:52:a2: c0:7b:79:2d:b5:1d:c7:9a:0f:e3:3d:c8:95:4c:f7: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:72:52:E7:FF:BD:B3:15:E0:DA:64:A8:04:70:0E:72:F8:02:C7 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:eb:f3:65:6a:3b:ab:1d:37:0c:ce:5c:62:3e:1b:27:44:2c: 36:85:1f:02:8d:0e:40:07:07:3e:12:42:89:07:1e:0a:01:7a: 85:b2:6c:71:65:21:11:85:8c:7b:84:43:70:32:98:2c:06:6c: 81:9e:f9:c0:36:1e:b9:ba:f8:35:e5:30:f9:60:a7:18:85:89: 5d:72:c8:42:3a:b9:4f:b2:68:95:df:00:eb:47:eb:bf:8e:bb: 60:b1:29:8e:dd:87:96:32:b0:3e:e3:47:93:c0:1d:8f:5f:74: a9:2e:fe:cd:00:dc:c5:b5:1b:d2:e1:6a:73:dd:a9:74:25:4e: f4:51:fb:d8:09:e3:0a:bc:9d:64:72:6d:27:1c:7f:5d:32:86: d0:9d:de:42:de:0c:3d:c5:c7:b0:ab:d5:54:2c:c3:dc:27:ed: cb:a5:a2:7b:aa:77:c9:b6:52:57:72:26:54:aa:20:66:88:62: 14:d5:8c:5f:93:7c:9f:60:d1:8f:68:72:f2:4f:1e:b2:4a:05: e1:f5:15:64:f6:16:7e:d7:0b:f7:d6:49:6a:a1:55:45:d3:1a: 1d:e7:13:c1:be:73:71:3f:61:15:e4:85:fa:91:66:f8:1a:15: fe:fa:ee:b4:91:d7:ea:7f:c3:66:7d:86:d0:e9:9a:40:a9:c2: 24:93:b6:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUwODIyMjAwMzQ5WhcNMjUwODI5MjAwMzQ5WjAYMRYwFAYD VQQDEw02OGE4Y2QyNS0zMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb5HWfKUOtgr0mfC1m2SKY3+wNDdbLK7FtBBr6FW0WupmdHaBa0jblJKa3O1 fAUfI1C2iYM+OTGjGLJo/EmTuc5nsdSJL4FKTEhNMXbgLjzw4yx3IszbYtVdXUwX 01gGO1qsBO+JbbTW4xoxDx7mujXbEDJYoqBzWMid4B0OGm+4QyeKNPSGVS/mLgNv IyUFEGb0GfZl0R8uFNba2GPCpjv+8FpucGMHw5d1Dnl0yA7xTCs91v0Z+0BKoHK/ NqV7XLPYgoZtjbpjK6s7CtT63ohX8dE67NOjhz+D9y+OkwOCZaAQqftM1n/LI4rg UqLAe3kttR3Hmg/jPciVTPd4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0hclLn /72zFeDaZKgEcA5y+ALHMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF6/NlajurHTcMzlxiPhsnRCw2hR8CjQ5ABwc+EkKJBx4KAXqFsmxx ZSERhYx7hENwMpgsBmyBnvnANh65uvg15TD5YKcYhYldcshCOrlPsmiV3wDrR+u/ jrtgsSmO3YeWMrA+40eTwB2PX3SpLv7NANzFtRvS4Wpz3al0JU70UfvYCeMKvJ1k cm0nHH9dMobQnd5C3gw9xcewq9VULMPcJ+3LpaJ7qnfJtlJXciZUqiBmiGIU1Yxf k3yfYNGPaHLyTx6ySgXh9RVk9hZ+1wv31klqoVVF0xod5xPBvnNxP2EV5IX6kWb4 GhX++u60kdfqf8NmfYbQ6ZpAqcIkk7ZT -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:39 2025 by rpki-client