$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json) Hash identifier: SsP9I7ZobI4ek3tWGXHfEE2H2pRxOMX21F+dA6fUMm8= Subject key identifier: 45:BC:E8:9A:D6:DC:71:C6:60:35:28:BA:37:6C:AF:DA:68:92:56:0C Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft Manifest number: 0C6A Signing time: Thu 24 Apr 2025 18:13:46 +0000 Manifest this update: Thu 24 Apr 2025 18:13:46 +0000 Manifest next update: Thu 01 May 2025 18:13:46 +0000 Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: 6UJtBNpqvrO7wHpl5Q1PtuwxPYm3uWI912pPIuTSxuM=) 2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: X1xqnsDeKiYFNZzPlE2ipd+1nyq5hczEhn+2xy3Ueek=) 3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: 0z+i+4vthBs6NB0pezbuWjdQZaTf8bIramKuukDFfac=) 4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: hblfjzPWasNtpADbdsOw1dGYyCGY0w4Yc79CNFuqVAM=) 5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: ADe9L/tWZxeDvJ5H88vxtwP6nXlOTUD9jAUEB3y68Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Apr 24 18:13:46 2025 GMT Not After : May 1 18:13:46 2025 GMT Subject: CN=680a7f5a-cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:2b:32:43:83:9c:90:06:95:e2:b0:1b:9e: a6:d0:f8:65:c9:70:97:5a:05:f2:4b:bc:ee:c3:37: 8a:65:bd:b2:58:e6:2e:65:82:78:3f:9a:82:5a:09: 7d:fe:38:b0:b0:b1:e9:6a:1d:f6:79:f0:fd:9b:6a: e5:20:81:f9:06:1e:2a:7a:87:a3:f9:a2:0a:9a:68: 0d:24:3e:74:a7:04:0e:e6:df:d6:5f:81:9f:be:5c: 05:49:da:ac:2a:27:d6:6c:66:85:f2:98:59:d8:dd: 82:7a:0b:8e:f1:c2:2b:25:09:52:ae:0f:37:99:22: ab:0b:4a:73:d1:77:2e:5b:8c:d2:ed:9b:c5:59:b6: 9a:ce:aa:6b:49:39:3f:58:ba:9d:af:2e:cf:62:ba: a2:9e:80:56:4c:46:1b:ad:d1:38:ea:a2:e9:b2:b4: 1e:37:44:2d:44:5b:7e:67:8d:4b:e1:87:1c:16:25: 61:6e:8a:4f:df:18:8b:6c:0f:44:20:78:18:28:91: 27:b7:0e:72:97:42:d4:a0:27:56:fd:fd:7a:3c:52: bb:1b:7a:ab:41:cc:66:8d:c1:e5:73:34:85:b5:8d: 30:45:7d:74:40:da:71:dc:40:a0:41:e9:86:d3:2f: ae:16:8d:b7:23:a4:97:f4:32:04:7c:52:bd:03:c0: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:E8:9A:D6:DC:71:C6:60:35:28:BA:37:6C:AF:DA:68:92:56:0C X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b2:73:06:6c:1d:a4:79:9c:5c:79:20:74:3d:37:c8:f0:b9: 4c:bb:53:58:0e:25:45:4c:e2:95:b4:93:c0:01:a2:d2:dd:e6: 5d:39:d3:2a:6e:2b:2b:2e:6c:1c:36:39:fc:31:51:c5:d5:ef: 99:04:69:f5:01:0b:52:90:7e:f9:72:38:e7:e2:8d:e9:ce:e2: e0:c0:cc:f6:2b:ea:49:8f:27:d7:10:f2:a5:2d:6b:04:04:3f: d4:44:fb:da:ab:8a:d2:48:ff:8c:18:bc:91:c6:4d:a0:f8:e4: 85:fb:8e:16:a3:cf:12:f2:93:2c:69:c2:c6:ab:f0:a1:59:c3: a3:8e:60:68:88:83:d3:e8:d6:52:cf:09:b9:47:4e:c7:a3:c5: a1:0f:1e:e3:88:18:3c:5c:40:35:24:b7:14:5f:02:28:8d:25: 6d:98:1f:a4:3a:d8:59:f6:97:c5:e6:34:fb:73:67:71:54:3c: f4:38:76:2f:1d:a2:0a:d2:ea:f7:4d:a2:9b:fc:c9:ec:c1:07: 54:2a:69:e5:a5:bc:84:9d:bf:ad:d2:f8:5b:88:27:2d:55:f1: 0d:b9:9c:1a:28:36:66:ef:7f:7a:ee:03:fa:6a:3e:32:3b:8c: 4b:40:d7:ee:40:be:ce:4e:1c:21:5e:e7:83:23:bd:40:3d:f1: c6:9b:45:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjUwNDI0MTgxMzQ2WhcNMjUwNTAxMTgxMzQ2WjAYMRYwFAYD VQQDEw02ODBhN2Y1YS1jZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6srMkODnJAGleKwG56m0PhlyXCXWgXyS7zuwzeKZb2yWOYuZYJ4P5qCWgl9 /jiwsLHpah32efD9m2rlIIH5Bh4qeoej+aIKmmgNJD50pwQO5t/WX4GfvlwFSdqs KifWbGaF8phZ2N2CeguO8cIrJQlSrg83mSKrC0pz0XcuW4zS7ZvFWbaazqprSTk/ WLqdry7PYrqinoBWTEYbrdE46qLpsrQeN0QtRFt+Z41L4YccFiVhbopP3xiLbA9E IHgYKJEntw5yl0LUoCdW/f16PFK7G3qrQcxmjcHlczSFtY0wRX10QNpx3ECgQemG 0y+uFo23I6SX9DIEfFK9A8BIqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW86JrW 3HHGYDUoujdsr9poklYMMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBsnMGbB2keZxceSB0PTfI8LlMu1NYDiVFTOKVtJPAAaLS3eZdOdMq bisrLmwcNjn8MVHF1e+ZBGn1AQtSkH75cjjn4o3pzuLgwMz2K+pJjyfXEPKlLWsE BD/URPvaq4rSSP+MGLyRxk2g+OSF+44Wo88S8pMsacLGq/ChWcOjjmBoiIPT6NZS zwm5R07Ho8WhDx7jiBg8XEA1JLcUXwIojSVtmB+kOthZ9pfF5jT7c2dxVDz0OHYv HaIK0ur3TaKb/MnswQdUKmnlpbyEnb+t0vhbiCctVfENuZwaKDZm73967gP6aj4y O4xLQNfuQL7OThwhXueDI71APfHGm0X+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:35 2025 by rpki-client