
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier: 6m3A6XZRj80R2blB3Wlm21sj9zs7hlfQKzAKmojpY+k=
Subject key identifier: B4:F1:0C:A0:76:26:32:4A:33:32:2C:3B:4D:F1:7C:58:89:E3:EB:3B
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial: 0CE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number: 0CC9
Signing time: Fri 24 Oct 2025 18:43:14 +0000
Manifest this update: Fri 24 Oct 2025 18:43:14 +0000
Manifest next update: Fri 31 Oct 2025 18:43:14 +0000
Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: 6lcZYMBL32/607awcu+zuua5v0Q4TpT98lVytsjjk24=)
2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 18:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Validity
Not Before: Oct 24 18:43:14 2025 GMT
Not After : Oct 31 18:43:14 2025 GMT
Subject: CN=68fbc8c2-2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:74:30:eb:a3:c2:f9:22:11:f4:72:41:f2:
1a:52:f8:16:16:6c:69:69:d9:df:e9:0e:6a:5b:c9:
ce:e8:ae:8e:44:9a:cf:72:a3:14:01:dc:d3:df:79:
d6:94:d8:44:6c:ff:c6:dc:6e:82:1a:54:15:bc:72:
d7:0c:d6:74:38:a0:f6:97:60:52:cb:0e:bf:35:dc:
8c:61:c6:7a:68:48:6a:7a:da:94:9d:51:de:e0:a1:
0e:d6:a0:5a:4d:9d:5b:90:fd:ba:16:e6:56:44:4d:
2c:90:c0:9a:05:6f:d8:9f:38:34:79:75:35:24:a0:
2e:42:65:04:a7:cd:d3:3c:e2:bb:66:57:1f:da:0c:
aa:81:75:ac:9a:24:c3:1f:2d:c6:14:17:0f:e2:a5:
56:4f:b6:56:e0:67:89:f1:de:48:6d:3e:c9:5f:d1:
8c:c0:c9:dc:75:05:89:95:9d:52:a8:4d:dc:56:55:
1c:83:c9:7e:93:b2:f4:b0:06:1a:de:b0:b3:64:b2:
e6:07:91:8e:8c:30:91:12:41:13:af:f2:89:d9:39:
48:b4:65:fc:13:af:42:ce:9f:7b:10:55:af:d3:60:
0a:cd:66:5f:23:ee:20:cc:d2:10:15:90:a3:36:51:
de:33:11:26:fc:ee:cc:12:99:11:8c:1a:3e:95:3d:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:0C:A0:76:26:32:4A:33:32:2C:3B:4D:F1:7C:58:89:E3:EB:3B
X509v3 Authority Key Identifier:
keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:94:bf:2b:f0:1a:ff:80:19:7c:15:f1:05:d5:11:eb:f1:
8d:3c:41:76:dd:a7:11:b3:4b:c5:3d:be:8d:bd:9d:c4:bf:a9:
14:ac:80:a1:de:1d:57:ee:bb:2b:aa:65:ec:cb:d3:56:d8:36:
67:fc:be:82:7f:eb:fe:41:34:38:70:2c:16:8b:bb:c8:b7:e2:
3e:6f:09:2e:5f:77:22:f3:9a:ae:ed:8b:4c:64:67:e8:ac:fd:
a3:1c:e2:c4:41:87:58:2e:87:b1:66:fd:27:4e:aa:95:f8:45:
e3:91:b6:7f:1f:d8:51:4d:33:c3:f7:45:5c:cf:74:2c:ea:fc:
4f:22:bd:6b:72:ff:b0:11:d2:87:9f:f9:41:2a:d9:90:f1:86:
13:05:12:77:eb:52:45:5b:2c:94:a3:aa:7b:81:19:32:51:56:
e2:2c:da:8a:00:80:f6:7e:b3:41:17:7d:21:45:7e:3e:f5:2b:
6f:30:ba:1e:7f:88:d4:26:a6:99:1c:12:97:1e:37:d5:a8:c8:
f1:8c:c6:72:ab:2f:a9:5c:64:c3:a5:5a:a3:00:29:c8:c0:20:
7a:e8:8e:cb:df:bd:25:1f:78:de:10:40:a7:5b:76:e0:e1:bd:
a8:71:c7:8e:80:a1:51:3c:9a:21:44:ce:77:16:89:34:d6:73:
47:9a:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:39:08 2025 by rpki-client