$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: tURsUzAdp0t0uOhv2dQqqSDfbymdLX92ifSr95aDF38= Subject key identifier: 14:2E:22:AB:81:86:5D:00:37:50:21:AE:CE:85:A7:A6:05:FB:CE:E5 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04B5 Signing time: Thu 24 Apr 2025 23:39:16 +0000 Manifest this update: Thu 24 Apr 2025 23:39:15 +0000 Manifest next update: Thu 01 May 2025 23:39:15 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: Oeir+JDV6MguLaySHXmIky13WJFPxFAkhZaIZJRf3Do=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Apr 24 23:39:15 2025 GMT Not After : May 1 23:39:15 2025 GMT Subject: CN=680acba3-6c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:d4:15:83:a8:9c:4a:20:2c:2d:57:82:6a: ad:a7:28:f6:be:76:89:51:42:73:c5:ea:6b:3a:97: ca:f8:03:75:a1:dc:da:b9:b0:75:8f:7e:fc:06:e6: d5:a0:cc:97:b3:ed:77:9c:70:03:db:02:f6:4c:e9: d3:24:13:bc:0c:c9:49:dd:c1:dd:9c:26:3b:bb:87: f6:1a:43:cf:92:0a:a0:fc:0e:0a:11:a6:da:2c:99: 82:c2:14:36:cf:1b:e7:c9:ae:04:75:42:28:a0:c6: 41:f9:74:1f:9b:0d:3c:c4:5c:68:09:ae:0d:37:59: 39:d5:54:e0:2d:87:ce:69:16:d6:48:d6:a6:3e:04: 3e:f7:e5:f6:f2:22:76:75:cc:7e:e0:da:6b:e9:cc: 87:42:c4:a2:b8:a3:25:57:07:70:d8:90:ed:f6:96: c6:84:9a:00:d5:fd:36:f2:fc:ef:b8:ee:9b:92:62: 80:ca:ff:4e:9a:5c:3e:2e:aa:5a:af:74:d8:0a:55: 93:83:18:3b:ee:ff:74:fe:e2:4a:e0:a6:a1:b3:08: 79:4c:a5:d0:d0:d0:a9:0a:ff:fd:bc:13:c6:f4:89: eb:10:34:0c:2b:83:4a:bf:57:f5:0e:b1:9f:85:b4: cc:5a:38:10:38:f8:b6:ef:7c:6d:69:b8:ea:f9:60: b8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:22:AB:81:86:5D:00:37:50:21:AE:CE:85:A7:A6:05:FB:CE:E5 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f3:d4:8d:cf:91:2d:80:9f:53:11:93:2f:ff:50:82:14:49: aa:75:b3:f9:b2:fd:53:70:1a:6f:be:6d:06:65:8d:1f:fd:5b: 3f:40:d8:99:0d:23:95:0a:74:52:eb:a3:60:eb:c0:1d:06:6c: fc:2d:d1:6a:7d:2f:56:ed:6d:39:3b:ac:99:01:4f:18:6e:67: e9:12:be:44:0e:2c:06:cd:ac:7e:e8:4e:51:5e:e1:e7:f9:90: 83:e1:50:85:5a:29:db:1b:1e:a7:89:2e:b5:15:50:e6:bb:65: 70:db:c2:d1:40:9d:2c:d8:12:cd:1b:ca:28:f9:ac:f6:5f:ee: ce:c5:3a:64:56:5d:e0:ac:d8:ef:50:35:6d:df:0a:18:a3:58: ad:3f:22:db:ca:3b:39:00:6a:51:d7:a5:40:40:55:b1:eb:40: 66:48:55:4b:27:18:db:a1:9e:fc:7b:99:44:a8:ae:7f:96:93: 49:6c:08:79:57:ac:ca:31:34:b8:b8:08:9a:08:93:8f:38:a5: 39:18:8a:88:a9:fd:59:b1:2e:89:66:82:19:20:a0:ac:45:a0: c4:a6:3d:e5:05:35:04:1d:c3:a2:28:0e:09:10:01:8c:94:5b: 50:a3:60:45:72:97:ba:bb:93:f0:61:90:08:68:b1:41:dc:f7: 18:56:94:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNDI0MjMzOTE1WhcNMjUwNTAxMjMzOTE1WjAYMRYwFAYD VQQDEw02ODBhY2JhMy02YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdbUFYOonEogLC1Xgmqtpyj2vnaJUUJzxeprOpfK+AN1odzaubB1j378BubV oMyXs+13nHAD2wL2TOnTJBO8DMlJ3cHdnCY7u4f2GkPPkgqg/A4KEabaLJmCwhQ2 zxvnya4EdUIooMZB+XQfmw08xFxoCa4NN1k51VTgLYfOaRbWSNamPgQ+9+X28iJ2 dcx+4Npr6cyHQsSiuKMlVwdw2JDt9pbGhJoA1f028vzvuO6bkmKAyv9Omlw+Lqpa r3TYClWTgxg77v90/uJK4Kahswh5TKXQ0NCpCv/9vBPG9InrEDQMK4NKv1f1DrGf hbTMWjgQOPi273xtabjq+WC4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQuIquB hl0AN1Ahrs6Fp6YF+87lMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB989SNz5EtgJ9TEZMv/1CCFEmqdbP5sv1TcBpvvm0GZY0f/Vs/QNiZ DSOVCnRS66Ng68AdBmz8LdFqfS9W7W05O6yZAU8YbmfpEr5EDiwGzax+6E5RXuHn +ZCD4VCFWinbGx6niS61FVDmu2Vw28LRQJ0s2BLNG8oo+az2X+7OxTpkVl3grNjv UDVt3woYo1itPyLbyjs5AGpR16VAQFWx60BmSFVLJxjboZ78e5lEqK5/lpNJbAh5 V6zKMTS4uAiaCJOPOKU5GIqIqf1ZsS6JZoIZIKCsRaDEpj3lBTUEHcOiKA4JEAGM lFtQo2BFcpe6u5PwYZAIaLFB3PcYVpRx -----END CERTIFICATE-----Generated at Sat Apr 26 04:53:06 2025 by rpki-client