$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: by8zhww76nohR6oXS2FmNJPyswA1MBN4KSgQp2FBG1A= Subject key identifier: 0A:0D:78:B3:61:4A:17:81:C9:3D:71:7C:44:0D:4F:05:54:12:EC:2F Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 09FF Signing time: Sat 18 Oct 2025 20:52:47 +0000 Manifest this update: Sat 18 Oct 2025 20:52:46 +0000 Manifest next update: Sat 25 Oct 2025 20:52:46 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: hw2Nmnzs22/ITMCDimSFya2mJg6M04MdJK+bGf0+odo=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=) 3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=) 4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=) 5: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Oct 18 20:52:46 2025 GMT Not After : Oct 25 20:52:46 2025 GMT Subject: CN=68f3fe1e-02ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:6a:9f:40:d2:8a:21:db:67:67:a4:10:9f: de:9c:80:75:50:b8:ee:e2:5f:9e:e0:1a:c4:76:f8: 2d:16:e9:13:59:99:0a:24:88:fe:4e:3e:aa:83:c0: 24:da:48:f4:f9:5c:03:ea:54:6a:f9:af:61:b3:6f: 49:60:a9:ab:43:ef:69:76:3c:9e:df:11:99:30:6f: 09:07:9a:2b:a9:a0:45:0e:cf:a6:dc:e0:a8:55:c5: 5d:15:e7:80:6f:b4:b0:7c:57:0b:7e:4f:5e:47:72: a6:2c:3c:2c:19:65:f7:38:30:41:d1:3a:a3:79:ad: cf:3b:d1:8b:13:fd:24:1a:54:4b:9d:d7:85:fa:b7: 80:2d:02:dc:04:29:27:d9:0b:43:9b:0e:21:6d:a5: 2f:20:98:9b:08:2c:dd:01:bf:c8:2a:14:b2:2b:f0: 5f:54:e7:eb:fe:bd:ba:77:8d:11:f3:1a:37:f4:3f: ac:55:30:bf:d1:7f:f3:f1:8d:3e:8c:56:27:8b:8b: ae:dd:07:42:1a:11:0d:76:cf:72:ac:67:92:6e:d5: 5b:15:c5:9d:13:c5:ef:62:c8:c4:26:e1:1c:a8:e5: 1c:23:21:93:8c:cd:65:61:e5:7b:fc:1e:4f:9c:a2: 4d:ed:e3:ce:5f:fe:6a:e2:37:61:ef:c2:c0:e3:24: c4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:78:B3:61:4A:17:81:C9:3D:71:7C:44:0D:4F:05:54:12:EC:2F X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:50:5c:9c:98:6d:46:1c:9c:e0:c6:f5:b2:96:55:1d:47:3c: de:f2:ec:c2:5f:a4:1e:88:5f:62:60:95:52:93:2e:eb:b7:1b: 9f:b4:72:d3:da:dc:49:52:44:a9:b8:23:8b:37:43:7f:30:c4: d0:2c:e8:30:58:35:7c:4a:18:35:02:b9:89:99:40:57:52:98: 55:d0:01:a5:b4:35:85:df:cd:f7:4e:5f:d9:d4:a8:bc:de:78: c6:ea:79:15:31:c9:d1:7b:5e:62:7f:47:47:5c:b1:10:f8:e4: 97:0f:0f:73:5e:1b:86:6a:fd:ca:0e:43:b0:31:e1:2f:76:18: 77:15:84:b4:a0:ac:e2:53:89:0d:bf:c1:83:0d:4c:e0:5b:ca: cb:64:1a:f2:07:3e:dd:75:80:e5:5a:ab:5e:78:04:9f:fd:5b: 6e:aa:a5:cd:bf:5e:7c:1a:4e:56:77:be:84:f1:0b:98:69:ab: 6f:50:e4:c3:7b:30:ac:96:6e:96:c7:00:2e:8d:e3:4a:79:50: 2f:3e:b9:aa:aa:b2:af:e2:55:76:09:ab:7f:8d:44:89:f8:f5: ca:18:37:52:bb:5b:b6:74:cc:85:c1:7e:c9:70:68:a1:f6:07: a5:e1:ec:60:d8:b9:a5:00:58:b1:31:9d:7f:91:42:17:b3:56: 60:10:51:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjUxMDE4MjA1MjQ2WhcNMjUxMDI1MjA1MjQ2WjAYMRYwFAYD VQQDEw02OGYzZmUxZS0wMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj5qn0DSiiHbZ2ekEJ/enIB1ULju4l+e4BrEdvgtFukTWZkKJIj+Tj6qg8Ak 2kj0+VwD6lRq+a9hs29JYKmrQ+9pdjye3xGZMG8JB5orqaBFDs+m3OCoVcVdFeeA b7SwfFcLfk9eR3KmLDwsGWX3ODBB0Tqjea3PO9GLE/0kGlRLndeF+reALQLcBCkn 2QtDmw4hbaUvIJibCCzdAb/IKhSyK/BfVOfr/r26d40R8xo39D+sVTC/0X/z8Y0+ jFYni4uu3QdCGhENds9yrGeSbtVbFcWdE8XvYsjEJuEcqOUcIyGTjM1lYeV7/B5P nKJN7ePOX/5q4jdh78LA4yTEowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoNeLNh SheByT1xfEQNTwVUEuwvMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiUFycmG1GHJzgxvWyllUdRzze8uzCX6QeiF9iYJVSky7rtxuftHLT 2txJUkSpuCOLN0N/MMTQLOgwWDV8Shg1ArmJmUBXUphV0AGltDWF3833Tl/Z1Ki8 3njG6nkVMcnRe15if0dHXLEQ+OSXDw9zXhuGav3KDkOwMeEvdhh3FYS0oKziU4kN v8GDDUzgW8rLZBryBz7ddYDlWqteeASf/VtuqqXNv158Gk5Wd76E8QuYaatvUOTD ezCslm6WxwAujeNKeVAvPrmqqrKv4lV2Cat/jUSJ+PXKGDdSu1u2dMyFwX7JcGih 9gel4exg2LmlAFixMZ1/kUIXs1ZgEFHd -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:22 2025 by rpki-client