$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: iQ95Sq1x4wpU+59P3wiB18ho7YyGunKI2Gy5flkSiEs= Subject key identifier: 14:59:CF:16:91:BD:55:2F:86:03:1D:14:86:3A:E4:B3:03:D0:DC:97 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04AE Signing time: Thu 10 Apr 2025 23:50:52 +0000 Manifest this update: Thu 10 Apr 2025 23:50:51 +0000 Manifest next update: Thu 17 Apr 2025 23:50:51 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: rFoCTqVgbaXqOgM92IXt1MYPZa2p2aOuEl/tBKeEjaM=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: Apr 10 23:50:51 2025 GMT Not After : Apr 17 23:50:51 2025 GMT Subject: CN=67f8595b-59cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:17:08:dc:27:ea:64:45:83:e6:8f:d8:23: 74:c4:29:3b:56:4d:7c:96:5b:97:39:c1:a3:67:e1: 70:ea:86:85:7d:7c:47:f4:c3:d3:5a:71:82:69:e0: 3f:85:0e:b5:c1:2b:6a:b7:26:05:a4:19:31:19:86: 04:7a:f4:a5:11:0c:98:ff:ac:d0:4c:1a:10:58:5d: a9:60:49:7d:56:70:e8:50:10:31:83:05:8d:2b:3f: 3f:3c:34:ca:27:cc:95:b5:4f:96:42:d2:d5:f3:c1: 60:b8:11:b0:c2:16:aa:22:0d:89:0d:bb:b6:e6:f8: 86:60:3d:0f:bc:98:6c:84:2a:6f:72:5b:83:04:68: f6:c2:6a:0e:42:1e:67:5b:65:c2:90:b0:95:a8:3e: 29:2d:50:fc:d2:fc:07:67:69:b4:a3:50:79:d5:e6: 40:17:c6:21:6f:04:5d:cf:ef:cb:cd:a1:ad:26:82: c9:36:ba:a4:78:8f:b0:db:b1:34:0e:ed:1d:ff:fb: 05:d9:bc:15:5e:3b:28:03:37:f4:6a:10:48:13:be: 6b:b4:76:ae:93:9d:7b:79:b5:ca:1a:5e:89:97:94: d1:ba:71:2f:70:52:78:4b:65:14:84:d2:21:bc:04: 01:df:46:62:d7:9d:ca:cb:3b:de:22:92:4e:69:3a: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:CF:16:91:BD:55:2F:86:03:1D:14:86:3A:E4:B3:03:D0:DC:97 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:82:af:d3:94:3e:fd:ca:f3:c9:d5:fb:07:19:22:a2:bd: 80:38:5f:39:85:c4:24:df:fa:99:34:bb:c3:f6:ab:c7:56:c0: d8:7e:de:c2:5b:ec:c5:79:54:7a:a6:90:cc:a1:94:9b:37:e7: 2a:98:1c:77:24:fd:7d:63:e7:fe:ee:41:08:1f:ff:d9:00:ec: 29:c9:09:f2:0b:00:67:47:51:40:fa:30:03:28:0b:2c:af:57: fb:4f:94:58:0a:2e:15:36:24:df:2f:85:53:eb:5a:ab:14:49: db:92:fc:bd:f8:63:99:2b:0f:50:f7:89:f6:c2:c3:fe:7d:cd: 83:06:d0:4d:e1:eb:59:0b:d2:23:03:46:00:b5:e4:5e:60:d9: 83:f3:fb:d0:20:00:e6:6e:75:2f:42:a0:29:ee:aa:73:af:9d: 95:35:dc:a7:0a:e3:88:82:d5:b7:8e:63:57:3f:f7:f7:7d:4e: 26:3e:68:05:23:bf:94:76:07:eb:77:54:53:af:42:53:cf:96: 31:e3:fb:d7:d6:e1:3f:a2:ca:f1:d5:39:ab:2e:99:49:fb:9c: 9c:cd:c8:78:80:9a:7d:6d:66:9b:0c:07:ba:50:f9:9c:af:d1: fb:b6:c0:fb:c9:b5:d6:cc:75:f4:2f:83:7e:ec:6f:d2:28:ae: 6a:e8:8b:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNDEwMjM1MDUxWhcNMjUwNDE3MjM1MDUxWjAYMRYwFAYD VQQDEw02N2Y4NTk1Yi01OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsYXCNwn6mRFg+aP2CN0xCk7Vk18lluXOcGjZ+Fw6oaFfXxH9MPTWnGCaeA/ hQ61wStqtyYFpBkxGYYEevSlEQyY/6zQTBoQWF2pYEl9VnDoUBAxgwWNKz8/PDTK J8yVtU+WQtLV88FguBGwwhaqIg2JDbu25viGYD0PvJhshCpvcluDBGj2wmoOQh5n W2XCkLCVqD4pLVD80vwHZ2m0o1B51eZAF8YhbwRdz+/LzaGtJoLJNrqkeI+w27E0 Du0d//sF2bwVXjsoAzf0ahBIE75rtHauk517ebXKGl6Jl5TRunEvcFJ4S2UUhNIh vAQB30Zi153KyzveIpJOaTpMCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRZzxaR vVUvhgMdFIY65LMD0NyXMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuEIKv05Q+/crzydX7Bxkior2AOF85hcQk3/qZNLvD9qvHVsDYft7C W+zFeVR6ppDMoZSbN+cqmBx3JP19Y+f+7kEIH//ZAOwpyQnyCwBnR1FA+jADKAss r1f7T5RYCi4VNiTfL4VT61qrFEnbkvy9+GOZKw9Q94n2wsP+fc2DBtBN4etZC9Ij A0YAteReYNmD8/vQIADmbnUvQqAp7qpzr52VNdynCuOIgtW3jmNXP/f3fU4mPmgF I7+Udgfrd1RTr0JTz5Yx4/vX1uE/osrx1TmrLplJ+5yczch4gJp9bWabDAe6UPmc r9H7tsD7ybXWzHX0L4N+7G/SKK5q6IsN -----END CERTIFICATE-----Generated at Sat Apr 12 17:13:48 2025 by rpki-client