$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft File: fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json) Hash identifier: Hdd3Tap3U6j8R4XN7pPjJN5SKdbngDbh84gOQm2mGIg= Subject key identifier: 8A:9B:45:77:62:CF:2F:52:E1:77:9E:AC:F6:B4:5E:21:AF:5A:97:DD Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft Manifest number: 0C6C Signing time: Mon 28 Apr 2025 18:32:53 +0000 Manifest this update: Mon 28 Apr 2025 18:32:52 +0000 Manifest next update: Mon 05 May 2025 18:32:52 +0000 Files and hashes: 1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: 0c0ll+iPP+ce+6Hc3CXbbn9mVa7Vk2rYD7NJrHha8+o=) 2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: X1xqnsDeKiYFNZzPlE2ipd+1nyq5hczEhn+2xy3Ueek=) 3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: 0z+i+4vthBs6NB0pezbuWjdQZaTf8bIramKuukDFfac=) 4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: hblfjzPWasNtpADbdsOw1dGYyCGY0w4Yc79CNFuqVAM=) 5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: ADe9L/tWZxeDvJ5H88vxtwP6nXlOTUD9jAUEB3y68Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Apr 28 18:32:52 2025 GMT Not After : May 5 18:32:52 2025 GMT Subject: CN=680fc9d5-5d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:8c:70:81:07:4c:d9:b3:b3:4f:46:88:90: 24:36:bd:e4:ef:ea:c2:10:9e:8f:c9:7e:61:27:64: ad:41:2d:d2:a7:73:b3:fe:92:7b:92:0b:58:2e:fe: 52:f0:a6:d4:aa:44:df:0f:a7:87:de:e1:6e:9a:c4: 18:20:36:ce:d7:a8:38:4c:95:f8:66:36:45:85:20: 27:43:d5:4d:36:97:56:6d:16:01:27:23:0e:e6:5c: 24:41:3c:28:9b:08:07:36:52:5a:80:55:de:b3:be: be:c7:1c:a3:c7:8b:07:5b:96:ff:92:dc:27:b7:f8: a3:5c:57:1a:da:e4:8f:be:b6:94:d4:58:4b:98:3d: d2:68:27:82:39:e5:3c:82:a9:b1:5c:26:94:5b:3f: 53:92:2c:ed:29:c8:1c:05:0b:1a:c6:05:5b:38:89: 57:1c:c2:b5:d3:f1:f3:d0:43:4b:26:8e:44:90:2a: b9:6c:23:54:60:24:09:a9:b0:ed:f3:36:1c:57:3b: 7a:d2:53:7c:f0:61:8c:f1:40:fe:c3:40:60:75:63: cd:c3:a7:99:33:a8:00:5f:bf:c6:bd:2b:b8:67:39: a2:28:64:c8:66:85:5a:57:18:4c:e0:7d:a7:d2:72: 88:f1:54:be:58:75:99:46:46:41:a9:fe:ca:b9:71: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9B:45:77:62:CF:2F:52:E1:77:9E:AC:F6:B4:5E:21:AF:5A:97:DD X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0b:1a:25:d3:61:7b:67:05:00:03:52:ad:a6:fb:78:a0:12: 4a:b5:b9:21:06:d5:f4:a4:a9:03:ef:f5:96:11:ea:f6:11:f4: ee:22:4a:73:88:f1:b2:12:95:93:68:62:35:32:88:70:1a:3b: 53:9c:29:70:91:e9:36:0a:a2:13:c8:0f:05:1e:33:ca:65:a5: 63:da:1f:77:64:aa:3e:3b:81:f9:6f:37:48:aa:30:fd:e9:d7: a6:bd:1a:48:3e:a0:ed:25:05:39:f7:f0:e8:fb:97:62:bb:51: 39:2e:fb:76:5b:da:fb:36:37:10:01:42:f1:48:db:4a:8a:6f: 33:a7:d9:78:99:cd:ef:12:b4:81:62:b1:ba:20:51:93:60:6e: 09:3f:15:41:af:8a:4a:f7:0d:c4:0d:7f:36:85:42:87:ee:dd: 13:c4:64:a8:25:7a:dc:e6:be:e2:cc:b2:36:d4:fd:af:c7:93: 92:96:39:3c:23:80:1f:e1:b7:16:9b:1d:1b:b7:05:8d:b4:c6: 4d:64:e4:26:71:77:33:d6:12:bc:6d:c1:80:3f:06:8d:a9:56: bf:2b:e3:55:58:3f:e1:e1:2b:bb:b1:87:16:5e:db:99:67:d1: 29:a0:e3:7f:9a:e1:26:73:0f:81:23:f5:5b:67:b2:0c:03:b2: cc:44:ae:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjUwNDI4MTgzMjUyWhcNMjUwNTA1MTgzMjUyWjAYMRYwFAYD VQQDEw02ODBmYzlkNS01ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHKMcIEHTNmzs09GiJAkNr3k7+rCEJ6PyX5hJ2StQS3Sp3Oz/pJ7kgtYLv5S 8KbUqkTfD6eH3uFumsQYIDbO16g4TJX4ZjZFhSAnQ9VNNpdWbRYBJyMO5lwkQTwo mwgHNlJagFXes76+xxyjx4sHW5b/ktwnt/ijXFca2uSPvraU1FhLmD3SaCeCOeU8 gqmxXCaUWz9TkiztKcgcBQsaxgVbOIlXHMK10/Hz0ENLJo5EkCq5bCNUYCQJqbDt 8zYcVzt60lN88GGM8UD+w0BgdWPNw6eZM6gAX7/GvSu4ZzmiKGTIZoVaVxhM4H2n 0nKI8VS+WHWZRkZBqf7KuXFkeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqbRXdi zy9S4XeerPa0XiGvWpfdMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUYwOC9CMEY1Mzc2Q0ZBQzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4z TFYzSnBZbFFPTHVybEtoaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCxol02F7ZwUAA1Ktpvt4oBJKtbkhBtX0pKkD7/WWEer2EfTuIkpz iPGyEpWTaGI1MohwGjtTnClwkek2CqITyA8FHjPKZaVj2h93ZKo+O4H5bzdIqjD9 6demvRpIPqDtJQU59/Do+5diu1E5Lvt2W9r7NjcQAULxSNtKim8zp9l4mc3vErSB YrG6IFGTYG4JPxVBr4pK9w3EDX82hUKH7t0TxGSoJXrc5r7izLI21P2vx5OSljk8 I4Af4bcWmx0btwWNtMZNZOQmcXcz1hK8bcGAPwaNqVa/K+NVWD/h4Su7sYcWXtuZ Z9EpoON/muEmcw+BI/VbZ7IMA7LMRK68 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net