$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json) Hash identifier: kRyzt2USTerFk8t8wz9a9+XZjsL/v1Tk70XQV6IZEtw= Subject key identifier: 57:EE:C7:09:09:10:56:5A:FE:6A:91:23:B6:D8:C2:57:34:3E:D7:C6 Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft Manifest number: 0163 Signing time: Sat 23 Aug 2025 04:09:30 +0000 Manifest this update: Sat 23 Aug 2025 04:09:29 +0000 Manifest next update: Sat 30 Aug 2025 04:09:29 +0000 Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: 8iSERUhpjdpVszz92nHQVQC4AU/QsLtbXXpTEvFJ+wY=) 2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Validity Not Before: Aug 23 04:09:29 2025 GMT Not After : Aug 30 04:09:29 2025 GMT Subject: CN=68a93efa-30fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:a0:b9:10:3f:7a:ca:81:0a:f7:b1:8a:cf: 65:3b:4c:4f:ad:ff:74:08:e9:f2:93:ed:af:5c:98: a2:81:1e:5c:86:0c:20:00:f9:d7:16:a6:db:e4:aa: a6:70:4d:1f:42:de:2f:46:71:c4:2c:77:88:5e:41: 7a:de:00:70:38:3c:bf:48:72:96:85:a3:14:81:60: 3d:2f:13:ee:3d:01:c3:8a:4e:f0:24:5b:4c:6f:6b: 18:99:d3:38:e1:79:72:a7:e9:82:3d:04:2a:51:35: 9b:d8:12:8d:99:aa:a6:95:a4:59:83:a1:d4:a4:b8: ac:f6:10:e3:b3:6f:25:d2:cc:85:2f:52:eb:d0:f6: 8c:a7:b7:7f:c1:aa:6f:34:2f:62:e2:53:d8:88:08: 98:69:a2:38:ee:af:e9:c8:41:d0:5d:8b:8c:27:92: 7a:e1:3d:d3:44:92:95:2b:ea:59:43:91:05:54:62: 11:e6:c7:d8:a0:bc:9b:2d:2a:ae:36:a9:0b:04:30: 79:e1:64:4d:3a:79:ca:82:f6:8f:9c:09:35:0e:25: da:bb:eb:2a:16:ce:c8:97:ac:b6:9a:b5:e8:31:f6: 28:86:64:6f:03:9c:60:71:28:ea:b2:e7:77:07:c4: 24:e5:61:5d:c4:3a:91:67:cb:54:a7:7f:a4:f2:ff: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EE:C7:09:09:10:56:5A:FE:6A:91:23:B6:D8:C2:57:34:3E:D7:C6 X509v3 Authority Key Identifier: keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:0d:fb:93:63:01:6e:ff:60:56:62:2e:c2:2d:3b:f8:90: b7:04:c5:e6:3d:9f:2e:e9:e9:7a:b5:95:47:28:20:a9:82:48: 18:f0:03:9c:48:e4:13:42:1d:a7:13:bf:e1:5f:7f:5b:37:26: 13:97:c6:51:08:b4:b9:c6:48:7a:78:0a:c2:e7:2d:a3:01:66: 6b:58:87:dc:5c:a9:db:29:65:be:7a:eb:1d:88:dd:66:e0:4b: 53:aa:cd:05:d6:ca:83:df:7b:4a:29:01:4e:38:57:a2:f5:c3: 70:bc:28:cb:ee:8d:e3:e3:43:ea:12:eb:c8:e6:bb:bf:85:1c: 6a:53:96:c9:89:37:39:a5:11:e9:8f:10:ce:f1:5f:f3:b1:de: 32:28:66:af:8a:3c:98:a5:af:0d:3c:08:a0:ed:02:37:8b:e5: 7d:24:1a:9b:34:19:b3:32:5e:c5:33:45:c1:0f:24:4c:ef:8e: 5c:59:3c:75:6a:78:29:8b:20:06:37:e9:5c:3a:ff:f4:a8:9b: 31:69:48:1d:c3:7f:6a:a9:47:35:72:d1:8b:1e:52:77:13:c7: de:d2:90:d1:ae:0a:a2:c9:c4:5b:cd:c2:21:98:5d:1d:ae:4c: fc:68:d8:9f:d0:10:25:75:08:08:84:9b:07:94:7a:f4:80:bd: 9f:9b:3c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3 OUQ2RDEyMEMwHhcNMjUwODIzMDQwOTI5WhcNMjUwODMwMDQwOTI5WjAYMRYwFAYD VQQDEw02OGE5M2VmYS0zMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbGguRA/esqBCvexis9lO0xPrf90COnyk+2vXJiigR5chgwgAPnXFqbb5Kqm cE0fQt4vRnHELHeIXkF63gBwODy/SHKWhaMUgWA9LxPuPQHDik7wJFtMb2sYmdM4 4Xlyp+mCPQQqUTWb2BKNmaqmlaRZg6HUpLis9hDjs28l0syFL1Lr0PaMp7d/wapv NC9i4lPYiAiYaaI47q/pyEHQXYuMJ5J64T3TRJKVK+pZQ5EFVGIR5sfYoLybLSqu NqkLBDB54WRNOnnKgvaPnAk1DiXau+sqFs7Il6y2mrXoMfYohmRvA5xgcSjqsud3 B8Qk5WFdxDqRZ8tUp3+k8v9n6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfuxwkJ EFZa/mqRI7bYwlc0PtfGMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3 OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNEQi80M0VGM0IzRTY3OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZ QVlWZjdUZ20tV041MXRFZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAlg37k2MBbv9gVmIuwi07+JC3BMXmPZ8u6el6tZVHKCCpgkgY8AOc SOQTQh2nE7/hX39bNyYTl8ZRCLS5xkh6eArC5y2jAWZrWIfcXKnbKWW+eusdiN1m 4EtTqs0F1sqD33tKKQFOOFei9cNwvCjL7o3j40PqEuvI5ru/hRxqU5bJiTc5pRHp jxDO8V/zsd4yKGavijyYpa8NPAig7QI3i+V9JBqbNBmzMl7FM0XBDyRM745cWTx1 angpiyAGN+lcOv/0qJsxaUgdw39qqUc1ctGLHlJ3E8fe0pDRrgqiycRbzcIhmF0d rkz8aNif0BAldQgIhJsHlHr0gL2fmzxJ -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:28 2025 by rpki-client