$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json) Hash identifier: ZXKM5GgXZyy7xp9xfCSfSzS6MUj71Kdr7zyffH7r0Uc= Subject key identifier: F9:BA:01:11:C7:9D:BF:DA:6B:65:DD:5E:A5:5B:AF:92:50:94:C2:42 Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft Manifest number: 0148 Signing time: Tue 01 Jul 2025 04:47:57 +0000 Manifest this update: Tue 01 Jul 2025 04:47:56 +0000 Manifest next update: Tue 08 Jul 2025 04:47:56 +0000 Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: aAfjmxFkca+OnLhnNKoicy0mpzb09bd88aByB9GmKZQ=) 2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Validity Not Before: Jul 1 04:47:56 2025 GMT Not After : Jul 8 04:47:56 2025 GMT Subject: CN=6863687d-fc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:7b:12:b5:5c:1d:fa:cc:fb:9e:ab:27:5e: d8:34:19:d5:9d:ea:0f:4a:9b:16:1c:06:27:18:19: b6:8c:33:5d:1f:bb:68:87:45:78:b9:da:9e:bf:62: 30:c5:c5:31:ed:6e:c0:98:96:b0:74:a7:49:04:31: b9:5c:0f:6d:62:b0:64:e3:4c:76:81:b7:90:cc:fc: 6a:03:e7:f8:14:9f:45:a9:dc:bd:56:c7:af:48:98: a1:49:b6:1a:0b:85:96:bf:4e:3b:62:99:60:74:d3: 70:a6:c4:96:87:a2:cb:c6:c5:6c:b0:35:9e:b1:d3: 3a:d0:1f:6f:d6:71:d0:b5:53:d1:80:96:f7:ab:24: 35:35:06:85:10:df:36:47:76:6e:8b:92:d6:fe:e8: 71:dd:09:ce:9f:3b:88:32:df:1f:22:c9:26:72:14: 17:4b:18:b7:93:4e:a7:08:85:ba:bf:27:47:7c:96: 94:2c:ee:97:35:48:5c:29:4c:d3:d1:d1:4a:b2:37: 2c:16:63:58:33:15:ed:bd:a4:eb:18:a9:81:60:dd: 6e:0d:65:7f:8c:ad:87:69:48:26:e1:55:bc:e6:fa: 8d:9a:2c:8c:f3:98:a8:8f:21:97:14:a1:28:6a:58: 70:14:50:41:9a:5c:6d:e3:ec:55:02:b4:07:b4:1f: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BA:01:11:C7:9D:BF:DA:6B:65:DD:5E:A5:5B:AF:92:50:94:C2:42 X509v3 Authority Key Identifier: keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f7:63:68:54:e3:67:dc:fe:8d:09:e9:46:0b:89:b2:e8:c0: 53:46:99:81:cb:ee:7a:35:af:97:dd:36:fa:64:25:09:e8:56: 1e:28:2a:fd:93:ab:1d:34:13:54:31:0e:26:58:88:53:09:84: 68:74:76:66:0c:5a:4f:d8:c2:76:b2:a9:ba:d7:53:6e:a0:e8: 39:4c:19:bb:3f:12:f4:58:99:3c:d6:38:fa:d0:de:ab:9b:4d: 93:cc:c3:4e:2e:f0:bc:24:50:9e:4e:c2:58:a3:99:32:2a:a3: a0:b5:f7:46:49:d3:ac:d5:0c:69:fd:74:40:52:8c:71:04:50: 2f:78:4a:ca:91:5b:f4:ad:2a:70:ee:51:82:8b:fb:c6:17:1b: 30:c4:21:75:18:80:5a:22:06:e6:40:f0:30:94:e2:8b:ae:ae: 42:af:9b:f1:73:39:48:79:5b:ac:bf:69:30:4b:05:42:bf:41: bb:47:bf:46:a0:87:bf:5c:b9:aa:ab:84:40:a3:0b:d0:4e:83: 3d:9b:60:e8:50:6e:f7:89:f5:22:98:b9:cc:0f:af:b1:c3:4d: 08:b6:63:32:49:0c:c0:dc:80:10:c2:6b:d8:7a:e7:b2:3a:1b: aa:fc:3c:b4:03:f8:33:4a:7e:d0:cd:ea:bb:3d:66:b0:71:3b: 97:a9:4a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3 OUQ2RDEyMEMwHhcNMjUwNzAxMDQ0NzU2WhcNMjUwNzA4MDQ0NzU2WjAYMRYwFAYD VQQDEw02ODYzNjg3ZC1mYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Pt7ErVcHfrM+56rJ17YNBnVneoPSpsWHAYnGBm2jDNdH7toh0V4udqev2Iw xcUx7W7AmJawdKdJBDG5XA9tYrBk40x2gbeQzPxqA+f4FJ9Fqdy9VsevSJihSbYa C4WWv047YplgdNNwpsSWh6LLxsVssDWesdM60B9v1nHQtVPRgJb3qyQ1NQaFEN82 R3Zui5LW/uhx3QnOnzuIMt8fIskmchQXSxi3k06nCIW6vydHfJaULO6XNUhcKUzT 0dFKsjcsFmNYMxXtvaTrGKmBYN1uDWV/jK2HaUgm4VW85vqNmiyM85iojyGXFKEo alhwFFBBmlxt4+xVArQHtB/XqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm6ARHH nb/aa2XdXqVbr5JQlMJCMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3 OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNEQi80M0VGM0IzRTY3OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZ QVlWZjdUZ20tV041MXRFZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ92NoVONn3P6NCelGC4my6MBTRpmBy+56Na+X3Tb6ZCUJ6FYeKCr9 k6sdNBNUMQ4mWIhTCYRodHZmDFpP2MJ2sqm611NuoOg5TBm7PxL0WJk81jj60N6r m02TzMNOLvC8JFCeTsJYo5kyKqOgtfdGSdOs1Qxp/XRAUoxxBFAveErKkVv0rSpw 7lGCi/vGFxswxCF1GIBaIgbmQPAwlOKLrq5Cr5vxczlIeVusv2kwSwVCv0G7R79G oIe/XLmqq4RAowvQToM9m2DoUG73ifUimLnMD6+xw00ItmMySQzA3IAQwmvYeuey Ohuq/Dy0A/gzSn7Qzeq7PWawcTuXqUrI -----END CERTIFICATE-----Generated at Thu Jul 3 00:51:18 2025 by rpki-client