$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json) Hash identifier: c5TJBPSIlz8q+IIvVGl9RH/tVb5IoKOhKrKdOGzZha8= Subject key identifier: 05:B6:FD:15:BC:09:FB:E2:F6:AB:1A:0A:50:43:B3:8D:B2:C6:55:49 Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft Manifest number: 0127 Signing time: Fri 25 Apr 2025 03:47:43 +0000 Manifest this update: Fri 25 Apr 2025 03:47:42 +0000 Manifest next update: Fri 02 May 2025 03:47:42 +0000 Files and hashes: 1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: Ysb/rcg0i8yIvWmCz7whieqEivJJv3O5BD2yVc/uGO0=) 2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C Validity Not Before: Apr 25 03:47:42 2025 GMT Not After : May 2 03:47:42 2025 GMT Subject: CN=680b05df-1aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:63:27:76:57:3e:45:21:a3:cb:51:06:7f: ff:23:49:9d:1d:9e:b4:25:2c:37:a3:8b:0a:b0:b8: 75:4b:f6:e3:b5:6c:db:08:1c:9d:5c:4f:4a:9a:9f: 6d:a4:c4:3e:9b:2c:27:5f:2a:7d:b4:1c:1d:4e:52: 4c:4f:1a:ae:f5:5c:ec:00:82:2f:f6:83:92:af:c4: 98:7c:77:11:66:27:d9:f6:7a:36:9e:fe:0e:4f:d3: af:5b:e2:b9:ab:db:cb:39:69:11:39:8d:1c:fa:98: 1a:2e:f6:75:a5:64:04:f8:35:22:2d:77:14:df:63: 94:9f:a4:09:7c:a8:b9:3e:50:5d:8b:8e:f9:db:69: 27:07:e1:35:93:e6:54:34:52:09:88:54:16:75:6c: 33:2b:ba:8e:56:f3:27:1b:7b:d1:1e:48:11:de:15: bc:b4:a9:2b:e2:01:dd:f7:d2:89:7f:91:60:74:ff: 7a:c1:94:dd:97:27:5e:91:b4:3f:e6:fc:b3:b2:e7: 0f:8f:4a:2d:f7:f5:8b:04:91:70:94:31:c4:b3:22: 20:da:3b:4b:ab:ab:39:bc:c6:83:74:45:10:7e:c6: 66:05:c9:98:89:1a:a2:43:69:d0:82:f2:48:61:06: 17:da:2a:10:3d:ff:e9:ca:b5:df:24:a4:4d:2e:5a: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:FD:15:BC:09:FB:E2:F6:AB:1A:0A:50:43:B3:8D:B2:C6:55:49 X509v3 Authority Key Identifier: keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:71:73:28:e9:ab:86:19:09:64:57:37:ca:7a:ed:27:16:83: 63:ee:74:ec:f1:59:a1:27:cb:e4:6a:d3:91:0a:c7:09:47:f6: d8:f3:d5:f7:9c:ed:59:3a:90:9d:62:fe:dc:33:30:d7:c1:3d: cf:d8:08:72:e4:85:fc:ea:6e:4e:7a:41:7a:37:7d:bc:b1:b4: eb:5a:ff:b7:5a:6b:f8:5f:c4:10:7b:c9:00:b6:25:22:21:fa: ac:af:35:ef:1b:7f:5c:ac:76:3c:a8:53:b0:cd:f6:6e:d2:99: e4:75:26:9b:80:57:53:78:8a:2d:af:5b:9f:7b:d4:87:da:1a: 5a:36:2e:26:5a:4e:a9:a2:98:c7:f4:cd:79:a4:ae:ce:48:b8: d4:a7:7e:b7:95:e3:c9:25:1d:47:ad:f5:0b:f6:1a:51:64:bf: 33:c0:3d:2a:1b:e8:54:d0:01:b7:19:f9:5e:d1:78:01:f7:72: 21:23:54:50:9f:6e:a7:91:e2:f6:e3:a6:4a:ea:bb:7a:76:2f: df:86:0f:5d:eb:3a:38:94:03:90:b5:a2:12:d7:b1:f9:84:6f: be:59:50:e5:1e:54:f3:ca:ca:d5:a7:93:9a:8d:a8:22:30:f8: 2d:db:f0:62:38:a4:7d:60:1a:f3:eb:46:5a:6b:03:c3:36:fe: 6a:c0:fc:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3 OUQ2RDEyMEMwHhcNMjUwNDI1MDM0NzQyWhcNMjUwNTAyMDM0NzQyWjAYMRYwFAYD VQQDEw02ODBiMDVkZi0xYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvhjJ3ZXPkUho8tRBn//I0mdHZ60JSw3o4sKsLh1S/bjtWzbCBydXE9Kmp9t pMQ+mywnXyp9tBwdTlJMTxqu9VzsAIIv9oOSr8SYfHcRZifZ9no2nv4OT9OvW+K5 q9vLOWkROY0c+pgaLvZ1pWQE+DUiLXcU32OUn6QJfKi5PlBdi47522knB+E1k+ZU NFIJiFQWdWwzK7qOVvMnG3vRHkgR3hW8tKkr4gHd99KJf5FgdP96wZTdlydekbQ/ 5vyzsucPj0ot9/WLBJFwlDHEsyIg2jtLq6s5vMaDdEUQfsZmBcmYiRqiQ2nQgvJI YQYX2ioQPf/pyrXfJKRNLlqoSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW2/RW8 Cfvi9qsaClBDs42yxlVJMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3 OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNEQi80M0VGM0IzRTY3OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZ QVlWZjdUZ20tV041MXRFZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBycXMo6auGGQlkVzfKeu0nFoNj7nTs8VmhJ8vkatORCscJR/bY89X3 nO1ZOpCdYv7cMzDXwT3P2Ahy5IX86m5OekF6N328sbTrWv+3Wmv4X8QQe8kAtiUi IfqsrzXvG39crHY8qFOwzfZu0pnkdSabgFdTeIotr1ufe9SH2hpaNi4mWk6popjH 9M15pK7OSLjUp363lePJJR1HrfUL9hpRZL8zwD0qG+hU0AG3Gfle0XgB93IhI1RQ n26nkeL246ZK6rt6di/fhg9d6zo4lAOQtaIS17H5hG++WVDlHlTzysrVp5Oajagi MPgt2/BiOKR9YBrz60ZaawPDNv5qwPy+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:32 2025 by rpki-client