$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: rh8nOT6gSbNDmV9kWLdk5/wAcwAPcCq5QS9m3EWTlIc= Subject key identifier: CE:2D:DC:31:62:9A:A4:41:96:D0:CF:58:06:0D:6C:0A:2C:FC:15:3B Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04CD Signing time: Thu 12 Jun 2025 23:23:39 +0000 Manifest this update: Thu 12 Jun 2025 23:23:38 +0000 Manifest next update: Thu 19 Jun 2025 23:23:38 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: N3V8RNgj8WtsZldb8bvf0TVIhXsw/rVanIWndBN6KEI=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Jun 12 23:23:38 2025 GMT Not After : Jun 19 23:23:38 2025 GMT Subject: CN=684b617a-4d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:a6:49:05:8d:61:f6:bd:81:43:fc:52:ad: c9:09:76:67:3f:01:eb:8a:25:d1:ef:aa:c5:9b:99: 9a:dc:4c:5f:d0:33:51:61:f4:d6:87:88:5a:5f:6a: 5a:fa:b0:f9:9b:8c:1c:81:9e:20:e6:3a:59:37:3c: e5:37:a1:6f:3a:32:b5:94:5d:d4:72:b5:ef:df:0e: a3:76:91:67:72:9f:04:ce:22:aa:a2:54:c6:ce:48: 91:fa:13:f8:ce:b8:aa:f6:cb:d7:d8:8f:86:04:4b: 14:b2:89:a6:e6:ed:7d:17:40:18:15:5c:7b:97:cd: 22:35:b2:e4:7b:52:3b:93:6e:4e:d6:2a:98:b4:62: 16:08:30:35:76:c7:5d:85:c7:01:a6:85:f9:32:18: 1f:40:4e:c7:e0:3d:36:d1:32:37:9d:93:ca:88:12: 08:4e:8d:c3:d7:2b:3c:80:97:dd:11:8b:be:b2:ca: 18:09:d4:37:46:49:64:b4:2f:10:2f:f9:f8:33:00: f8:7a:62:1c:2f:06:83:b0:c2:33:07:3c:6d:01:a8: 11:43:3b:dc:0a:47:c1:21:7b:0b:85:4d:71:3a:fd: 3e:2a:54:0f:a6:a7:54:f7:52:1b:82:be:e8:2f:90: 9f:ce:30:ee:4a:59:aa:ed:51:d2:99:52:30:82:40: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:DC:31:62:9A:A4:41:96:D0:CF:58:06:0D:6C:0A:2C:FC:15:3B X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:be:b0:a8:ef:6e:f7:ac:34:fa:3d:5b:9f:bd:5e:a0:fa:9f: a0:32:7e:26:02:f0:3e:fa:f8:31:b5:f1:47:92:5d:a2:7e:19: 17:ee:88:24:a2:dc:44:dc:eb:ab:bd:40:f3:ab:50:e7:33:fa: 53:20:00:78:e0:37:90:c4:8f:51:72:d4:24:5a:57:b5:52:89: 73:b8:8a:e4:4c:77:d5:bc:da:20:ae:10:34:9e:79:6f:d3:2f: 34:f6:9f:93:24:02:6a:52:90:41:9e:00:db:44:8f:66:0b:be: ed:9c:28:a5:81:c0:bb:2c:d3:42:5c:17:49:26:f1:1c:3a:e8: e8:87:f6:fb:00:00:61:96:fb:d0:e5:61:99:52:6b:b0:d5:5a: 98:65:aa:49:ec:51:86:6f:e2:7d:ac:36:d6:2e:b1:96:12:71: 9a:2a:25:d5:0a:a9:b5:57:1b:b2:c9:59:a0:3a:86:f7:8f:32: 82:59:a7:a2:0d:8c:df:3d:bf:bf:ac:cd:25:86:c7:85:47:65: 84:e9:01:9e:b7:1d:e5:42:3f:0f:88:20:7d:ae:60:ac:20:a9: 7c:43:1d:92:c3:e3:a2:12:0b:af:da:a5:46:5f:0a:26:b3:3c: a9:78:1a:5d:62:55:0a:a0:51:1b:a3:f7:24:a9:54:52:4d:25: 0f:3a:ce:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNjEyMjMyMzM4WhcNMjUwNjE5MjMyMzM4WjAYMRYwFAYD VQQDEw02ODRiNjE3YS00ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT2mSQWNYfa9gUP8Uq3JCXZnPwHriiXR76rFm5ma3Exf0DNRYfTWh4haX2pa +rD5m4wcgZ4g5jpZNzzlN6FvOjK1lF3UcrXv3w6jdpFncp8EziKqolTGzkiR+hP4 zriq9svX2I+GBEsUsomm5u19F0AYFVx7l80iNbLke1I7k25O1iqYtGIWCDA1dsdd hccBpoX5MhgfQE7H4D020TI3nZPKiBIITo3D1ys8gJfdEYu+ssoYCdQ3RklktC8Q L/n4MwD4emIcLwaDsMIzBzxtAagRQzvcCkfBIXsLhU1xOv0+KlQPpqdU91Ibgr7o L5CfzjDuSlmq7VHSmVIwgkDF6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4t3DFi mqRBltDPWAYNbAos/BU7MB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEvrCo7273rDT6PVufvV6g+p+gMn4mAvA++vgxtfFHkl2ifhkX7ogk otxE3OurvUDzq1DnM/pTIAB44DeQxI9RctQkWle1UolzuIrkTHfVvNogrhA0nnlv 0y809p+TJAJqUpBBngDbRI9mC77tnCilgcC7LNNCXBdJJvEcOujoh/b7AABhlvvQ 5WGZUmuw1VqYZapJ7FGGb+J9rDbWLrGWEnGaKiXVCqm1VxuyyVmgOob3jzKCWaei DYzfPb+/rM0lhseFR2WE6QGetx3lQj8PiCB9rmCsIKl8Qx2Sw+OiEguv2qVGXwom szypeBpdYlUKoFEbo/ckqVRSTSUPOs4/ -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:07 2025 by rpki-client