$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: gChu2xtLdLKKlK9bRlCdPrJ0b8SH4t3W880tyHbuKdU= Subject key identifier: 86:E0:FA:00:B5:8E:35:9F:71:02:A3:F8:D3:41:F0:48:DF:B4:9A:64 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 0403 Signing time: Sun 19 May 2024 02:08:23 +0000 Manifest this update: Sun 19 May 2024 02:08:23 +0000 Manifest next update: Sun 26 May 2024 02:08:23 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: 9W8UsHgDZBbGXJR/7FGL3WN0HTtwyferd7fnPZEXfMw=) 2: 5A591BB025E011EC9E89C60AC4F9AE02.roa (hash: SfX78mf8Kd7x/+CvFiJo2Q6E4e6u3b0BX938D2DXIEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: May 19 02:08:23 2024 GMT Not After : May 26 02:08:23 2024 GMT Subject: CN=66495f17-6689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:a7:7c:7d:5a:65:4d:f9:10:f9:27:73:b3: 34:70:bc:cb:a2:0c:82:f0:af:eb:66:33:55:75:ef: 40:65:6e:52:d2:ce:42:c3:89:b7:ca:4f:3c:31:86: 2e:34:92:0d:44:f9:07:dc:20:a1:5c:2a:75:8e:2e: b6:ec:16:1c:b8:06:c6:8f:0d:b7:f0:4d:ac:bd:3a: ff:04:6c:80:90:85:8b:c5:73:42:4a:16:85:d3:c3: 21:47:7e:a4:8b:9b:d0:ea:da:dd:ac:82:71:77:b4: 8e:47:c0:31:0b:66:1b:1c:f2:15:16:cf:b8:4f:69: 4b:e4:7f:00:36:f6:72:39:f1:4b:61:09:63:a4:c0: b2:3a:25:52:02:bd:db:02:b5:51:7a:e3:45:02:ed: 83:fb:1f:89:14:56:9f:81:34:13:0d:45:f7:b9:2f: 56:29:f6:23:37:82:7b:b4:0d:64:4e:f0:c5:44:8b: 5a:bd:a6:59:56:5c:d0:6d:c4:ed:0c:ed:4b:9f:7e: dd:68:6d:18:a0:e1:b9:a5:1f:01:a6:25:3a:6e:9b: 32:e1:44:30:2d:77:17:a4:3e:ba:36:6f:71:25:48: 43:36:21:08:48:08:27:54:98:05:2a:4f:69:03:79: 8d:8b:1f:2d:87:a5:be:6b:ca:a7:2b:6e:f1:54:7c: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:FA:00:B5:8E:35:9F:71:02:A3:F8:D3:41:F0:48:DF:B4:9A:64 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:83:d6:76:9e:f3:e8:50:ad:2e:ed:02:25:9d:d2:ac:e5:a1: 97:cd:26:67:3e:68:19:a4:ec:cc:b5:bb:97:e8:89:be:69:6d: 2a:ca:e1:67:42:c2:c1:9d:5c:29:8f:43:6e:c4:b3:cc:a1:97: 41:21:60:d6:45:c1:46:e3:55:e0:46:d8:fa:e7:6f:8e:fa:18: 0b:67:f5:40:96:4f:18:9d:35:43:ad:7d:83:6a:33:35:a3:40: 21:c1:df:3b:80:49:14:05:d7:1d:ed:67:d9:c2:9b:17:59:b3: 2f:6c:f9:ca:73:2e:4b:58:2f:2b:71:56:13:03:18:82:56:a6: e9:5d:c5:19:2f:bf:9c:49:b1:5c:90:70:5d:1d:0d:a7:77:c2: db:cc:60:1d:9b:a4:aa:c8:ee:c1:28:c0:52:b3:17:6d:9c:9d: a0:c9:3f:9d:87:8f:ce:e8:ba:9f:07:23:f0:06:02:3c:39:f7: 43:3f:c6:38:bd:95:ae:68:61:02:ed:09:45:e1:de:48:1e:cc: 4e:84:c9:ff:c6:77:d4:50:fe:df:3e:3e:2d:ea:0c:84:bd:f2: f8:f5:4d:81:b6:c6:a1:1c:32:f6:6e:c3:7f:dd:14:54:bc:e4: 7b:41:ba:87:27:e1:ed:47:af:e9:c0:f3:da:c1:fe:aa:a5:bd: 43:6a:09:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjQwNTE5MDIwODIzWhcNMjQwNTI2MDIwODIzWjAYMRYwFAYD VQQDEw02NjQ5NWYxNy02Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45WnfH1aZU35EPknc7M0cLzLogyC8K/rZjNVde9AZW5S0s5Cw4m3yk88MYYu NJINRPkH3CChXCp1ji627BYcuAbGjw238E2svTr/BGyAkIWLxXNCShaF08MhR36k i5vQ6trdrIJxd7SOR8AxC2YbHPIVFs+4T2lL5H8ANvZyOfFLYQljpMCyOiVSAr3b ArVReuNFAu2D+x+JFFafgTQTDUX3uS9WKfYjN4J7tA1kTvDFRItavaZZVlzQbcTt DO1Ln37daG0YoOG5pR8BpiU6bpsy4UQwLXcXpD66Nm9xJUhDNiEISAgnVJgFKk9p A3mNix8th6W+a8qnK27xVHzmJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbg+gC1 jjWfcQKj+NNB8EjftJpkMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPg9Z2nvPoUK0u7QIlndKs5aGXzSZnPmgZpOzMtbuX6Im+aW0qyuFn QsLBnVwpj0NuxLPMoZdBIWDWRcFG41XgRtj652+O+hgLZ/VAlk8YnTVDrX2DajM1 o0Ahwd87gEkUBdcd7WfZwpsXWbMvbPnKcy5LWC8rcVYTAxiCVqbpXcUZL7+cSbFc kHBdHQ2nd8LbzGAdm6SqyO7BKMBSsxdtnJ2gyT+dh4/O6LqfByPwBgI8OfdDP8Y4 vZWuaGEC7QlF4d5IHsxOhMn/xnfUUP7fPj4t6gyEvfL49U2BtsahHDL2bsN/3RRU vOR7QbqHJ+HtR6/pwPPawf6qpb1DagmR -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org