$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json) Hash identifier: wN9EXrocDtgmjr9R9yDqYfdA5xLmXaDGzsm4dbmeYTs= Subject key identifier: 3D:80:DF:63:75:AC:D5:BF:FA:AF:8A:09:4B:DF:B2:5E:C8:56:24:BB Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft Manifest number: 0BB1 Signing time: Tue 30 Apr 2024 19:28:32 +0000 Manifest this update: Tue 30 Apr 2024 19:28:31 +0000 Manifest next update: Tue 07 May 2024 19:28:31 +0000 Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: Snkuj91gEYUUvQwWXYM8K9ZNHVtJw7qXD8AaymhHk2c=) 2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: SiYgwC+PUmmba0EBPwfjQr39jpSXM2qs2QlF2h+k8fg=) 3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: gQ2RtZpWPlovg7N/uEHLLhHiSN0PO8n4u3Zg3YIvRHQ=) 4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: q1ApTHxLsyicIuq74JapzwARIYHL5ZRNFnIa8LoI33Q=) 5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: Z57Sbh4HWIN+PQjDm3HyruQP/XjN2v9fE96VdjP9ZaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Apr 30 19:28:31 2024 GMT Not After : May 7 19:28:31 2024 GMT Subject: CN=6631465f-7aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:f2:8a:b4:54:35:b4:c1:32:49:ba:67:d3: 82:76:0f:f8:da:55:70:bc:35:58:aa:7a:87:48:30: bd:5d:e8:90:fb:56:74:a5:e6:32:e4:87:a8:53:b1: ef:e7:19:29:23:7c:49:32:0d:27:68:ae:97:3c:3a: 9e:b3:46:4c:58:82:f1:a2:13:7a:2f:39:e5:68:c3: 99:f6:c1:8f:ac:c9:c4:56:2d:38:c8:c2:c7:8e:15: e4:18:fe:44:2b:81:ad:99:b0:28:34:cc:0f:fc:7c: 18:71:5f:74:7f:08:3e:75:7e:14:fe:e3:40:ef:1c: 8c:77:f8:1a:de:cf:2c:06:92:13:7e:5a:58:a1:25: ff:d6:e3:d2:ba:c0:64:0a:90:ba:c5:0d:b4:b2:a2: be:18:10:6a:f2:ef:bf:e3:52:dd:fb:28:25:77:26: 08:7a:a0:dd:1c:3b:27:b6:8b:ae:80:8b:cb:d9:a3: 77:fc:c8:90:b1:c1:4a:24:f1:c5:2b:17:c0:a9:8a: e4:38:85:32:52:79:26:31:bd:1b:b6:1d:a5:22:72: 85:3a:d3:1b:b4:77:eb:b5:ba:51:25:22:b8:4e:2f: 0f:9f:6e:9d:c5:f2:ff:a1:26:04:2d:ec:28:91:88: e9:b0:20:2b:d4:53:40:d6:d9:d9:c7:c5:cb:73:94: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:DF:63:75:AC:D5:BF:FA:AF:8A:09:4B:DF:B2:5E:C8:56:24:BB X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1c:bd:86:5f:79:ab:39:04:73:29:38:c0:ea:e3:cf:02:f2: 72:35:f3:cb:7c:2e:ea:7f:d4:ad:a3:fb:5f:64:02:92:72:ec: ac:20:5f:dc:4f:fd:ed:d3:f2:00:25:ab:fe:ac:c1:81:ee:39: c5:26:2c:49:df:53:60:b8:4b:c5:d9:a1:43:b2:89:0c:72:eb: d4:a8:76:ac:73:4f:1e:dc:60:a5:ff:78:7d:01:9d:cf:14:8a: 6d:a7:d3:2d:f4:bf:76:de:e8:04:b4:f0:19:57:aa:b3:5b:7f: 32:df:ea:7a:4f:9c:83:78:59:92:a4:45:f3:ec:00:6f:a0:5f: 87:54:19:60:a9:4e:60:ab:f8:b9:31:79:6b:c1:b5:a9:85:64: 02:0c:4e:10:fc:ca:80:fe:e9:69:19:de:7b:89:fc:5a:aa:cb: 82:58:bd:54:42:8d:09:06:28:26:57:76:1e:10:92:cb:6c:39: a4:e6:e9:09:30:9c:63:a1:83:9d:f6:56:43:9e:07:7b:e5:76: 50:56:08:75:53:ec:34:b7:8a:75:6b:63:30:77:d5:cb:5c:3f: aa:a1:51:64:f2:89:1b:6d:a1:7c:37:bc:9c:5c:bd:2d:9b:f6: 12:1f:86:d5:39:11:21:b0:41:b5:bf:f8:25:4c:ea:72:0c:5e: 5e:e0:63:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjQwNDMwMTkyODMxWhcNMjQwNTA3MTkyODMxWjAYMRYwFAYD VQQDEw02NjMxNDY1Zi03YWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxnyirRUNbTBMkm6Z9OCdg/42lVwvDVYqnqHSDC9XeiQ+1Z0peYy5IeoU7Hv 5xkpI3xJMg0naK6XPDqes0ZMWILxohN6LznlaMOZ9sGPrMnEVi04yMLHjhXkGP5E K4GtmbAoNMwP/HwYcV90fwg+dX4U/uNA7xyMd/ga3s8sBpITflpYoSX/1uPSusBk CpC6xQ20sqK+GBBq8u+/41Ld+ygldyYIeqDdHDsntouugIvL2aN3/MiQscFKJPHF KxfAqYrkOIUyUnkmMb0bth2lInKFOtMbtHfrtbpRJSK4Ti8Pn26dxfL/oSYELewo kYjpsCAr1FNA1tnZx8XLc5R71wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2A32N1 rNW/+q+KCUvfsl7IViS7MB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuHL2GX3mrOQRzKTjA6uPPAvJyNfPLfC7qf9Sto/tfZAKScuysIF/c T/3t0/IAJav+rMGB7jnFJixJ31NguEvF2aFDsokMcuvUqHasc08e3GCl/3h9AZ3P FIptp9Mt9L923ugEtPAZV6qzW38y3+p6T5yDeFmSpEXz7ABvoF+HVBlgqU5gq/i5 MXlrwbWphWQCDE4Q/MqA/ulpGd57ifxaqsuCWL1UQo0JBigmV3YeEJLLbDmk5ukJ MJxjoYOd9lZDngd75XZQVgh1U+w0t4p1a2Mwd9XLXD+qoVFk8okbbaF8N7ycXL0t m/YSH4bVOREhsEG1v/glTOpyDF5e4GMF -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:58 2024 by rpki-client on console-ams.rpki-client.org