$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json) Hash identifier: Iu62eq7kDq2p44xAkrAiksBzouFUafGt71in2ldaIRM= Subject key identifier: F3:60:FF:6F:F3:08:3D:C5:56:7A:D1:A8:BF:4B:43:84:1B:D0:C9:EB Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft Manifest number: 0C7C Signing time: Fri 30 May 2025 18:27:25 +0000 Manifest this update: Fri 30 May 2025 18:27:24 +0000 Manifest next update: Fri 06 Jun 2025 18:27:24 +0000 Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: cv0vCjF7HTu6qAFiHLikaCV9hC7QE0sxjFsu7RV08/s=) 2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: X1xqnsDeKiYFNZzPlE2ipd+1nyq5hczEhn+2xy3Ueek=) 3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: 0z+i+4vthBs6NB0pezbuWjdQZaTf8bIramKuukDFfac=) 4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: hblfjzPWasNtpADbdsOw1dGYyCGY0w4Yc79CNFuqVAM=) 5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: ADe9L/tWZxeDvJ5H88vxtwP6nXlOTUD9jAUEB3y68Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: May 30 18:27:24 2025 GMT Not After : Jun 6 18:27:24 2025 GMT Subject: CN=6839f88d-6838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:c2:12:d3:78:eb:55:7f:30:4b:ea:e6:ca: 38:72:52:60:c9:21:4f:e1:de:96:e9:d9:e8:a7:75: 4e:5b:bb:9e:86:11:82:0b:dc:20:96:b4:b7:96:3c: 5c:a5:09:16:72:82:fc:35:8a:11:53:6f:54:91:5a: 57:57:b2:83:75:f0:fb:4e:71:32:9c:41:e0:a2:1c: 30:57:a5:b4:32:8b:c8:2b:32:3f:fc:60:fd:fb:45: 25:cd:0f:6a:b4:ed:e7:a3:d7:69:5a:de:8f:ca:b5: 1d:b9:f6:90:db:6d:f5:5d:15:17:8a:48:66:95:85: 12:35:c4:65:9c:c3:d8:54:7a:6c:d7:41:e9:fa:c4: f3:44:37:b2:99:80:b7:76:0d:ba:3e:34:20:0f:20: 38:3a:80:e7:87:03:f3:0e:e9:23:21:55:ef:40:2a: 28:16:e5:46:ae:0c:00:a4:b9:db:8c:90:70:ec:e7: 62:04:4b:0c:39:15:f7:0f:5f:c0:5f:3b:1e:86:21: 17:07:d7:44:3b:97:0e:22:3f:ae:00:5f:b9:68:0f: 1a:3a:62:bb:a0:4b:e3:aa:79:6f:18:c6:6c:8a:fb: a1:4d:c8:49:23:2c:83:d1:88:66:92:84:9c:c0:79: 23:4c:14:4c:d6:23:84:3a:a0:9b:fd:c1:5b:ed:82: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:FF:6F:F3:08:3D:C5:56:7A:D1:A8:BF:4B:43:84:1B:D0:C9:EB X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:af:a4:3f:06:08:25:a2:e7:7d:12:42:aa:96:fc:51:9d:bd: f0:05:38:4b:01:be:66:07:3a:a4:31:1d:12:bf:17:da:4c:7f: 8f:09:81:b2:ce:c0:92:09:93:f4:fe:f8:54:ab:63:0c:78:6b: ff:1f:49:7e:0d:70:39:9e:ca:d0:df:4c:6c:ed:c0:85:da:dc: 37:bc:0d:bf:c0:75:8f:cd:1c:15:c6:42:34:cb:8c:5b:29:8f: 9d:fb:60:c3:6d:70:d0:1b:ab:0d:1a:ef:6c:9c:a1:75:53:77: b8:25:9f:a2:55:81:f0:b0:6b:09:a4:4b:db:a3:b5:dd:10:87: 59:59:f1:3f:86:1b:e3:e1:8a:0f:c2:fb:ee:b3:b0:fa:8f:a9: 4d:f7:05:86:e7:53:4b:1f:20:88:2e:d1:52:74:09:82:5d:28: 9f:47:d9:a0:ff:17:31:b3:82:28:47:fe:8b:d7:c7:54:20:c4: d6:0b:96:2c:a6:f9:4d:d2:c4:60:f9:b6:37:6c:70:64:94:b5: 85:5f:42:28:7b:bc:88:1b:3c:c2:e0:1e:d3:92:17:e0:e1:69: ff:34:a9:62:a7:61:b7:08:56:10:63:8f:ba:37:f3:d2:cb:3d: 7a:74:c8:f9:b4:4a:29:54:d9:55:8d:53:34:8e:b1:34:3f:fd: 3f:45:4f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjUwNTMwMTgyNzI0WhcNMjUwNjA2MTgyNzI0WjAYMRYwFAYD VQQDEw02ODM5Zjg4ZC02ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoF3CEtN461V/MEvq5so4clJgySFP4d6W6dnop3VOW7uehhGCC9wglrS3ljxc pQkWcoL8NYoRU29UkVpXV7KDdfD7TnEynEHgohwwV6W0MovIKzI//GD9+0UlzQ9q tO3no9dpWt6PyrUdufaQ2231XRUXikhmlYUSNcRlnMPYVHps10Hp+sTzRDeymYC3 dg26PjQgDyA4OoDnhwPzDukjIVXvQCooFuVGrgwApLnbjJBw7OdiBEsMORX3D1/A XzsehiEXB9dEO5cOIj+uAF+5aA8aOmK7oEvjqnlvGMZsivuhTchJIyyD0YhmkoSc wHkjTBRM1iOEOqCb/cFb7YJaDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNg/2/z CD3FVnrRqL9LQ4Qb0MnrMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgr6Q/Bggloud9EkKqlvxRnb3wBThLAb5mBzqkMR0SvxfaTH+PCYGy zsCSCZP0/vhUq2MMeGv/H0l+DXA5nsrQ30xs7cCF2tw3vA2/wHWPzRwVxkI0y4xb KY+d+2DDbXDQG6sNGu9snKF1U3e4JZ+iVYHwsGsJpEvbo7XdEIdZWfE/hhvj4YoP wvvus7D6j6lN9wWG51NLHyCILtFSdAmCXSifR9mg/xcxs4IoR/6L18dUIMTWC5Ys pvlN0sRg+bY3bHBklLWFX0Ioe7yIGzzC4B7Tkhfg4Wn/NKlip2G3CFYQY4+6N/PS yz16dMj5tEopVNlVjVM0jrE0P/0/RU8X -----END CERTIFICATE-----Generated at Sat May 31 17:41:04 2025 by rpki-client