$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json) Hash identifier: rNkxsulngVgppxI8QRkW+WSfoK2OJSz+qxkjO734BJU= Subject key identifier: 38:EB:50:A0:5F:10:FB:51:76:34:72:9D:91:09:2F:66:B7:81:0E:38 Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft Manifest number: 0C97 Signing time: Fri 18 Jul 2025 18:23:25 +0000 Manifest this update: Fri 18 Jul 2025 18:23:24 +0000 Manifest next update: Fri 25 Jul 2025 18:23:24 +0000 Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: qpVLn49oMng+HaCxZM6qFogCGfUYuiKKPXzazx5eAco=) 2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=) 3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=) 4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=) 5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Jul 18 18:23:24 2025 GMT Not After : Jul 25 18:23:24 2025 GMT Subject: CN=687a911c-d77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:01:d8:6d:79:a6:e9:31:01:aa:d5:9f:9b: aa:dc:3d:76:aa:82:c4:18:ad:20:3f:86:d9:da:ae: f4:62:27:ce:42:8d:b6:af:94:32:4a:05:40:e8:33: 15:45:47:45:76:48:8f:c7:d6:db:d0:60:f0:cd:03: 79:5e:4e:34:cb:b2:5c:b6:8a:6e:91:24:33:c4:a6: f6:3f:a3:60:36:a2:b2:8e:52:1c:f9:f0:8a:21:e8: 8d:58:ec:2d:38:cc:c5:bd:84:02:69:47:15:da:0d: 72:ab:1a:02:f9:94:58:f2:67:9b:4a:e7:dd:1f:db: 22:35:60:79:aa:cf:43:7a:58:47:85:1c:97:58:db: a9:5f:94:0d:7c:51:8b:d2:50:28:03:7f:59:a4:cc: 9b:5c:30:e5:1a:16:be:e9:b0:dd:45:a2:f0:b2:79: 84:31:2b:ce:34:8b:02:9d:1f:6f:7b:9e:7a:1f:83: a9:11:c4:93:58:b2:88:5a:d8:6f:89:85:bb:d3:b6: 5a:10:b7:7e:a0:0e:30:ca:b1:33:27:1b:96:57:ba: 7f:d7:14:8d:59:b3:6f:51:71:8b:8b:8f:67:0a:14: be:18:6f:85:03:01:7a:bc:43:42:0e:a5:70:ad:63: a6:1b:49:93:33:84:f5:05:25:1b:a5:17:11:bb:c7: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EB:50:A0:5F:10:FB:51:76:34:72:9D:91:09:2F:66:B7:81:0E:38 X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c9:6d:9b:c4:a0:03:54:10:02:26:02:13:c6:02:31:2d:1d: c4:1c:f7:87:31:e3:2b:d5:9e:83:46:d3:69:7e:b7:e1:79:72: cb:86:3e:63:14:54:e7:f0:85:e4:8a:84:8b:4b:b9:5c:1c:bc: 14:be:a5:4a:79:f1:7d:84:35:97:7d:48:46:f7:02:18:f9:9f: f4:7d:10:f8:43:f1:26:1a:fb:c4:f8:1a:2f:b3:66:85:68:3d: 57:9a:0d:f3:f8:aa:50:2a:d0:0f:9b:24:5b:eb:17:04:aa:2a: ed:d2:fd:21:46:24:39:0e:c6:30:a2:11:3a:4e:21:26:98:78: 7b:01:8d:ca:02:5d:77:47:b1:53:bd:de:1b:66:61:be:f3:bd: b1:8c:ee:0d:88:e8:20:ad:17:12:fd:0d:f7:7b:fe:a1:16:0f: 29:86:04:4e:aa:4a:1e:f9:7f:27:48:6b:5c:80:4d:a3:5f:ae: f4:8c:67:fd:3e:ac:b0:6c:8f:83:d1:92:08:69:16:57:6c:8c: 85:a0:4b:33:e3:c6:e7:8f:65:11:8a:33:39:d2:64:f8:d6:23: 3b:dd:57:4c:e6:63:54:82:aa:89:ac:b2:d5:6a:fd:7e:89:0f: 4f:7d:d7:b8:53:9a:4c:53:5b:72:81:44:ba:11:ce:e5:94:fa: db:d7:ff:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjUwNzE4MTgyMzI0WhcNMjUwNzI1MTgyMzI0WjAYMRYwFAYD VQQDEw02ODdhOTExYy1kNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1AB2G15pukxAarVn5uq3D12qoLEGK0gP4bZ2q70YifOQo22r5QySgVA6DMV RUdFdkiPx9bb0GDwzQN5Xk40y7JctopukSQzxKb2P6NgNqKyjlIc+fCKIeiNWOwt OMzFvYQCaUcV2g1yqxoC+ZRY8mebSufdH9siNWB5qs9DelhHhRyXWNupX5QNfFGL 0lAoA39ZpMybXDDlGha+6bDdRaLwsnmEMSvONIsCnR9ve556H4OpEcSTWLKIWthv iYW707ZaELd+oA4wyrEzJxuWV7p/1xSNWbNvUXGLi49nChS+GG+FAwF6vENCDqVw rWOmG0mTM4T1BSUbpRcRu8fA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjrUKBf EPtRdjRynZEJL2a3gQ44MB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3yW2bxKADVBACJgITxgIxLR3EHPeHMeMr1Z6DRtNpfrfheXLLhj5j FFTn8IXkioSLS7lcHLwUvqVKefF9hDWXfUhG9wIY+Z/0fRD4Q/EmGvvE+Bovs2aF aD1Xmg3z+KpQKtAPmyRb6xcEqirt0v0hRiQ5DsYwohE6TiEmmHh7AY3KAl13R7FT vd4bZmG+872xjO4NiOggrRcS/Q33e/6hFg8phgROqkoe+X8nSGtcgE2jX670jGf9 PqywbI+D0ZIIaRZXbIyFoEsz48bnj2URijM50mT41iM73VdM5mNUgqqJrLLVav1+ iQ9Pfde4U5pMU1tygUS6Ec7llPrb1/8g -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:14 2025 by rpki-client