$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: GdAnNxmNp5mDKtoaKRcy1ei1SI7KVKnqhovpxYNrM7U= Subject key identifier: A1:06:6F:9F:20:4F:DA:4F:C3:F7:57:24:1C:EE:CE:65:D0:DA:CD:0D Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04E1 Signing time: Sat 19 Jul 2025 00:06:55 +0000 Manifest this update: Sat 19 Jul 2025 00:06:55 +0000 Manifest next update: Sat 26 Jul 2025 00:06:55 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: N6f4pNiZyiWtnCSHYnjBIWhCXDoN51czcJ/rTEcjUiI=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: j7cSjk9bGAyIvx6iJpo/WTGEPXuKdTD1Dm2iYrUznn8=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: Y2F1zl8mLeyWjYCbu80HQfaHCYqj4Iy83h0ageBQWO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Jul 19 00:06:55 2025 GMT Not After : Jul 26 00:06:55 2025 GMT Subject: CN=687ae19f-777e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:6a:d8:2d:d9:fb:94:ac:d5:37:f8:cc:ce: 1c:3a:99:04:c9:a9:6a:75:15:e9:ca:37:b1:ce:da: 57:00:48:a2:f6:f7:1e:0d:f1:7a:7f:a7:c9:28:12: a8:8f:8f:12:79:0d:24:a9:53:80:b7:47:e5:ea:33: d6:83:36:57:45:59:cb:a0:31:0d:b3:c2:cb:73:b3: 1e:50:cb:96:f8:74:4c:56:a0:8f:a0:b0:98:0a:ed: 24:a2:33:3c:10:c8:87:03:e1:8e:ae:90:f6:30:97: 20:98:2f:d4:4f:dd:de:90:a2:3c:41:3d:8b:29:44: 34:ea:52:21:32:41:67:8e:2f:f1:f9:2d:0d:fe:72: 8c:b3:19:c3:0e:49:24:87:86:24:5f:5c:46:a2:ab: dc:d3:16:64:0a:87:34:6c:d5:10:ed:af:d6:79:6f: 39:ae:8d:19:8d:bb:b0:d2:13:b3:88:aa:ef:ff:a0: 93:50:f0:f0:91:82:a5:43:05:73:7b:49:e2:51:5d: aa:30:7f:fa:b7:33:2d:43:51:16:7e:cb:e9:e9:4b: 23:cc:0e:08:bb:29:a7:ec:3e:a3:6f:32:3a:23:17: fb:fa:ad:53:da:9d:c8:79:b5:40:cc:66:60:2a:50: 01:f1:76:8e:7f:d3:eb:72:63:c2:af:07:0c:44:9d: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:6F:9F:20:4F:DA:4F:C3:F7:57:24:1C:EE:CE:65:D0:DA:CD:0D X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:62:39:9e:78:43:9d:55:1d:e8:62:a8:9a:0a:87:4c:ee:9c: 73:2a:17:4e:48:1f:64:8e:f5:39:2a:9a:77:bb:40:49:be:cf: 2b:ff:ed:39:6c:d1:a8:52:ff:7e:2b:0d:ad:5b:a5:31:93:a4: 0e:9f:5b:83:e6:42:97:9d:ee:37:9b:c7:41:73:b1:3a:e3:63: af:a0:e3:15:ea:ab:90:69:13:cf:9a:66:66:2f:14:fc:fd:8e: 6e:58:43:de:fe:6b:cf:fe:a6:13:74:cf:44:df:ac:14:b3:c4: ed:e6:0c:b1:ba:6f:3a:7d:8d:18:5d:68:18:d3:b9:3b:35:43: 98:a8:a3:7c:12:11:0f:d8:7e:39:c8:eb:88:53:9f:ab:59:24: 81:90:86:82:4d:d8:99:69:b9:c6:f2:75:ad:94:c9:74:94:2a: 2b:50:c7:4f:1c:b3:ec:ba:06:42:2b:17:05:72:f6:a4:5d:5d: 24:c1:c0:9d:63:e4:43:b6:13:e0:08:b6:7c:d7:8b:72:0e:4e: ca:8b:34:7e:a0:ae:84:ef:47:ff:68:4f:1a:d4:2d:73:56:ed: 09:b7:80:93:1a:7e:f0:a5:8b:c6:4b:74:98:8b:f7:c8:8a:d3: 13:d6:71:e5:dd:44:2b:04:de:d8:74:23:81:77:93:98:7b:ef: 93:17:1b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNzE5MDAwNjU1WhcNMjUwNzI2MDAwNjU1WjAYMRYwFAYD VQQDEw02ODdhZTE5Zi03NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO5q2C3Z+5Ss1Tf4zM4cOpkEyalqdRXpyjexztpXAEii9vceDfF6f6fJKBKo j48SeQ0kqVOAt0fl6jPWgzZXRVnLoDENs8LLc7MeUMuW+HRMVqCPoLCYCu0kojM8 EMiHA+GOrpD2MJcgmC/UT93ekKI8QT2LKUQ06lIhMkFnji/x+S0N/nKMsxnDDkkk h4YkX1xGoqvc0xZkCoc0bNUQ7a/WeW85ro0Zjbuw0hOziKrv/6CTUPDwkYKlQwVz e0niUV2qMH/6tzMtQ1EWfsvp6UsjzA4Iuymn7D6jbzI6Ixf7+q1T2p3IebVAzGZg KlAB8XaOf9PrcmPCrwcMRJ3UCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEGb58g T9pPw/dXJBzuzmXQ2s0NMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPYjmeeEOdVR3oYqiaCodM7pxzKhdOSB9kjvU5Kpp3u0BJvs8r/+05 bNGoUv9+Kw2tW6Uxk6QOn1uD5kKXne43m8dBc7E642OvoOMV6quQaRPPmmZmLxT8 /Y5uWEPe/mvP/qYTdM9E36wUs8Tt5gyxum86fY0YXWgY07k7NUOYqKN8EhEP2H45 yOuIU5+rWSSBkIaCTdiZabnG8nWtlMl0lCorUMdPHLPsugZCKxcFcvakXV0kwcCd Y+RDthPgCLZ814tyDk7KizR+oK6E70f/aE8a1C1zVu0Jt4CTGn7wpYvGS3SYi/fI itMT1nHl3UQrBN7YdCOBd5OYe++TFxvG -----END CERTIFICATE-----Generated at Sun Jul 20 10:20:41 2025 by rpki-client