$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json) Hash identifier: 3CTALr1xohDV52Kh/bq9Mx5DhnKTy8MylPjFbCjUXQo= Subject key identifier: 4F:05:9D:28:A3:7D:6C:13:86:F7:4B:54:F7:2C:1B:33:F9:D6:20:47 Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft Manifest number: 012F Signing time: Sun 11 May 2025 03:28:53 +0000 Manifest this update: Sun 11 May 2025 03:28:53 +0000 Manifest next update: Sun 18 May 2025 03:28:53 +0000 Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: Qx7q7+3R8cY7ofqbicIohtvowplxz2ngkCZV4+Uiaz0=) 2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Validity Not Before: May 11 03:28:53 2025 GMT Not After : May 18 03:28:53 2025 GMT Subject: CN=68201975-89ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:0f:d0:31:6a:fb:54:3a:6e:d9:4f:c1:e7: 76:a4:ed:42:02:df:e6:5b:3f:46:46:36:9d:d7:3a: 4f:1e:29:f2:aa:2f:25:12:c2:ec:e0:1b:4f:69:1a: 89:c1:2b:15:ac:c8:ba:30:54:bf:57:17:4e:81:d0: 0a:0c:16:bd:89:fd:02:c7:e0:9a:da:50:04:01:28: cf:50:f0:b6:4a:2c:03:35:c0:10:d5:eb:b1:8e:34: 3f:f6:9f:ea:df:6a:43:1f:ca:b8:8b:38:e7:36:bc: d2:f7:10:0a:63:79:9a:5b:5d:01:2d:48:8e:52:67: a1:3f:ee:a5:4a:34:a3:a9:da:ca:42:7b:b3:5c:18: 72:80:09:30:2d:04:fe:7a:04:3a:43:58:0d:28:d0: c1:b3:20:9f:70:2c:31:52:22:ef:22:21:8c:52:a1: 24:ac:03:0d:82:7c:4e:ac:51:72:58:ad:ba:45:57: b3:63:c2:91:c6:4b:32:16:f5:61:45:d7:14:67:6c: d6:70:24:1d:b2:d1:8a:1c:2b:51:4e:62:58:f7:57: a8:b5:8c:75:78:20:d6:3a:23:e8:7b:55:f4:f5:ce: 2f:2b:0b:ff:30:8c:3e:f3:1c:bd:2f:8a:19:0d:36: a5:26:f9:22:da:9e:ac:97:91:3a:52:bf:f6:08:02: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:05:9D:28:A3:7D:6C:13:86:F7:4B:54:F7:2C:1B:33:F9:D6:20:47 X509v3 Authority Key Identifier: keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0f:55:8b:0f:2a:f1:8b:3a:87:35:0f:e0:7e:39:41:90:d8: a4:e5:16:6e:c6:71:2c:8c:18:64:55:67:e2:81:5b:aa:6e:d2: e5:0c:f2:d7:22:77:2e:35:15:53:dc:3b:7f:43:90:8b:7e:1b: af:1b:6e:f2:e9:9d:17:33:b3:dd:37:b7:36:57:7a:32:69:8b: 4b:36:e6:18:e0:7c:c7:77:22:5f:6c:56:d7:b5:50:08:40:0e: 1c:8e:e4:52:fd:ed:24:d0:88:1f:02:8c:a3:b4:6c:95:01:4f: 80:4a:e5:6b:fc:73:64:1b:2b:b2:12:82:5a:f4:c4:f5:76:3e: 4f:87:bb:64:cb:94:d4:04:07:0d:ab:de:ec:97:01:c1:80:f6: dd:d8:23:3d:e6:f4:c3:ac:bf:d1:17:dd:5c:5e:6a:3d:20:53: 2c:59:ea:12:9a:42:aa:84:fa:f5:db:ac:09:ae:af:1b:fe:d9: 1f:c5:fe:09:4e:9b:df:c6:75:72:bc:a3:aa:52:3c:53:6e:66: 17:f9:dd:e2:17:c4:65:3a:d4:64:4d:0e:9e:17:2b:65:42:60: 70:a8:69:2c:52:15:93:3b:fa:de:88:11:c6:c5:96:9e:5f:88: c7:e0:5a:ec:01:0b:21:47:29:8b:ff:6e:13:16:c0:7c:89:44: 6a:6e:91:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3 OUQ2RDEyMEMwHhcNMjUwNTExMDMyODUzWhcNMjUwNTE4MDMyODUzWjAYMRYwFAYD VQQDEw02ODIwMTk3NS04OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPkP0DFq+1Q6btlPwed2pO1CAt/mWz9GRjad1zpPHinyqi8lEsLs4BtPaRqJ wSsVrMi6MFS/VxdOgdAKDBa9if0Cx+Ca2lAEASjPUPC2SiwDNcAQ1euxjjQ/9p/q 32pDH8q4izjnNrzS9xAKY3maW10BLUiOUmehP+6lSjSjqdrKQnuzXBhygAkwLQT+ egQ6Q1gNKNDBsyCfcCwxUiLvIiGMUqEkrAMNgnxOrFFyWK26RVezY8KRxksyFvVh RdcUZ2zWcCQdstGKHCtRTmJY91eotYx1eCDWOiPoe1X09c4vKwv/MIw+8xy9L4oZ DTalJvki2p6sl5E6Ur/2CALlWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8FnSij fWwThvdLVPcsGzP51iBHMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3 OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNEQi80M0VGM0IzRTY3OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZ QVlWZjdUZ20tV041MXRFZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRD1WLDyrxizqHNQ/gfjlBkNik5RZuxnEsjBhkVWfigVuqbtLlDPLX IncuNRVT3Dt/Q5CLfhuvG27y6Z0XM7PdN7c2V3oyaYtLNuYY4HzHdyJfbFbXtVAI QA4cjuRS/e0k0IgfAoyjtGyVAU+ASuVr/HNkGyuyEoJa9MT1dj5Ph7tky5TUBAcN q97slwHBgPbd2CM95vTDrL/RF91cXmo9IFMsWeoSmkKqhPr126wJrq8b/tkfxf4J TpvfxnVyvKOqUjxTbmYX+d3iF8RlOtRkTQ6eFytlQmBwqGksUhWTO/reiBHGxZae X4jH4FrsAQshRymL/24TFsB8iURqbpFt -----END CERTIFICATE-----Generated at Sun May 11 22:55:37 2025 by rpki-client