$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: qBtA4neAsJdlcHbfpyJUrJWBXAmHfkucKkY4V0lRvEk= Subject key identifier: DF:E8:A2:81:65:E3:13:9F:69:CE:A0:35:30:06:DA:E8:0D:44:F3:F7 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04BC Signing time: Thu 08 May 2025 23:39:30 +0000 Manifest this update: Thu 08 May 2025 23:39:29 +0000 Manifest next update: Thu 15 May 2025 23:39:29 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: FzWXki97nqmIErWGUgb0pcebO/r3GR90clKfjqyha9U=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: May 8 23:39:29 2025 GMT Not After : May 15 23:39:29 2025 GMT Subject: CN=681d40b2-413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:20:7c:0a:37:61:a9:9f:c3:54:f1:e9:a3: 1b:dd:82:39:8c:96:a3:12:cb:41:17:90:b0:0d:97: 7a:1a:19:55:dc:07:e1:b3:6e:49:2b:db:b2:5f:69: c7:ac:d4:81:0a:dc:2f:b5:11:56:61:47:3b:9e:90: 3c:48:fc:e6:8e:82:58:76:73:b1:fb:7a:11:04:c8: 14:fb:ff:c5:61:49:45:5a:c1:9b:f8:59:ad:1e:e7: 85:f3:98:a0:0a:29:88:66:50:90:b4:70:6d:6b:b3: af:a7:96:58:21:af:85:70:89:6a:ef:de:2c:87:cc: bb:25:f8:12:77:61:7b:5f:69:0e:61:b0:1f:eb:5b: a3:31:79:32:e9:34:99:36:5e:d9:e7:93:98:d3:e3: f6:c3:3a:13:64:2e:9c:53:ed:1f:f1:a5:11:72:9b: 0b:3f:bf:3d:ab:98:8a:b3:5b:a5:6c:af:55:de:6d: b5:2e:bb:0e:6b:e8:20:a9:c5:fe:9c:fb:21:69:bb: df:c8:c3:47:be:73:94:47:df:cc:a5:24:f3:d2:0f: f0:ce:d3:7c:5d:dc:67:0d:33:ee:28:77:d1:8d:a5: 8d:c3:df:9a:6b:23:a6:aa:da:c2:c4:5e:a5:34:76: 59:91:10:70:76:b9:f3:75:fe:d0:a7:bb:71:b6:5c: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E8:A2:81:65:E3:13:9F:69:CE:A0:35:30:06:DA:E8:0D:44:F3:F7 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9b:7b:5c:7b:5c:f6:6f:bb:d3:d8:4a:80:ca:a3:f7:a0:d3: fd:b7:c1:bf:41:54:d7:f4:a2:34:38:22:89:d5:e1:44:47:55: 18:9b:d7:c0:7a:93:a1:f3:60:26:0c:47:6b:20:d0:35:57:8c: c9:74:a2:83:ba:8d:03:63:c6:77:1e:94:85:47:2d:77:55:a6: 9d:05:ed:5c:81:82:78:d0:e3:5a:4c:23:f8:cc:87:1c:b6:56: 48:6c:57:52:b3:47:1e:8a:12:c1:20:df:31:5b:68:4f:16:a5: 0a:1e:93:3d:d4:d5:3b:d4:63:a0:b3:58:8b:f6:71:e7:dd:43: 1b:7f:6c:07:69:b1:d5:59:3b:12:93:77:3a:67:99:31:ef:d8: ce:28:00:ff:34:8b:61:53:a2:a9:e0:6c:23:12:e5:5f:e0:5d: 7b:a8:30:ba:f5:26:71:c7:f8:08:40:a1:e4:1c:07:f7:58:73: 56:46:f3:7a:9f:c8:94:b2:2d:95:9e:1d:55:34:c3:c2:82:fa: 48:0f:58:32:98:5d:92:6b:1e:29:7f:d3:bf:d1:78:83:2a:23: b6:5d:08:a1:77:3c:be:41:00:77:df:47:d1:ca:74:3f:be:5a: f7:b4:cd:7a:01:25:c4:86:20:ac:e1:97:96:4b:70:be:63:5c: b8:58:ba:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNTA4MjMzOTI5WhcNMjUwNTE1MjMzOTI5WjAYMRYwFAYD VQQDEw02ODFkNDBiMi00MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TMgfAo3Yamfw1Tx6aMb3YI5jJajEstBF5CwDZd6GhlV3Afhs25JK9uyX2nH rNSBCtwvtRFWYUc7npA8SPzmjoJYdnOx+3oRBMgU+//FYUlFWsGb+FmtHueF85ig CimIZlCQtHBta7Ovp5ZYIa+FcIlq794sh8y7JfgSd2F7X2kOYbAf61ujMXky6TSZ Nl7Z55OY0+P2wzoTZC6cU+0f8aURcpsLP789q5iKs1ulbK9V3m21LrsOa+ggqcX+ nPshabvfyMNHvnOUR9/MpSTz0g/wztN8XdxnDTPuKHfRjaWNw9+aayOmqtrCxF6l NHZZkRBwdrnzdf7Qp7txtlwI6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/oooFl 4xOfac6gNTAG2ugNRPP3MB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAm3tce1z2b7vT2EqAyqP3oNP9t8G/QVTX9KI0OCKJ1eFER1UYm9fA epOh82AmDEdrINA1V4zJdKKDuo0DY8Z3HpSFRy13VaadBe1cgYJ40ONaTCP4zIcc tlZIbFdSs0ceihLBIN8xW2hPFqUKHpM91NU71GOgs1iL9nHn3UMbf2wHabHVWTsS k3c6Z5kx79jOKAD/NIthU6Kp4GwjEuVf4F17qDC69SZxx/gIQKHkHAf3WHNWRvN6 n8iUsi2Vnh1VNMPCgvpID1gymF2Sax4pf9O/0XiDKiO2XQihdzy+QQB330fRynQ/ vlr3tM16ASXEhiCs4ZeWS3C+Y1y4WLpM -----END CERTIFICATE-----Generated at Fri May 9 09:40:40 2025 by rpki-client