$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: bYfQLSAsd8Vq93d0bpxVmLuUkJhP8pbc1XtN/9B6cJ0= Subject key identifier: 09:06:92:9E:50:94:FB:B4:E1:6D:D8:9F:74:33:CA:8F:CB:FE:E5:18 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 09C1 Signing time: Sun 20 Apr 2025 19:46:48 +0000 Manifest this update: Sun 20 Apr 2025 19:46:48 +0000 Manifest next update: Sun 27 Apr 2025 19:46:48 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: Omwet08Kzf+8XViLL/ipeAXDJfvvI+rFOrWV7D6X3Q8=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Apr 20 19:46:48 2025 GMT Not After : Apr 27 19:46:48 2025 GMT Subject: CN=68054f28-2415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:c3:cf:79:70:34:a6:aa:1b:0f:7d:54:33: 8f:35:63:e8:b9:70:29:c8:ff:db:3c:dc:41:22:8d: b2:3f:a6:d8:36:c1:d9:24:23:07:f1:c5:b9:6f:12: 94:cf:63:7a:65:ab:2a:e6:fe:91:8c:56:94:6b:7f: 4b:87:9e:cf:09:c5:17:fc:79:58:eb:0d:3d:1f:60: f7:1f:1a:95:7b:38:02:d0:68:35:9a:c5:ac:e0:01: 40:5b:e9:62:4b:4e:77:c7:d1:c3:f7:92:d2:be:c2: 42:0f:57:6b:e4:1f:8c:33:e8:b4:42:8b:3c:18:7c: 88:91:10:1a:36:56:aa:22:25:3c:35:3f:cb:39:d4: b9:3a:0b:82:64:8c:a2:8a:d1:34:be:c5:79:7c:17: 58:cc:6c:e8:f9:f6:f1:47:f9:b0:61:44:12:bd:3e: f7:2b:9d:01:48:01:c3:00:86:21:5b:25:82:e2:d5: 99:09:2d:a3:59:38:8c:10:28:5f:65:d4:c8:db:b3: 15:77:7f:3f:87:38:d9:66:bd:72:21:20:5b:1a:ce: 74:54:6b:84:d9:c3:04:15:0f:1c:d2:ff:f0:2b:6c: 7f:0c:6c:ce:b9:47:34:db:11:2b:15:cc:97:92:50: 89:f2:bd:69:87:81:e8:b6:fc:49:63:9f:66:d8:e4: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:92:9E:50:94:FB:B4:E1:6D:D8:9F:74:33:CA:8F:CB:FE:E5:18 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:b0:59:ce:47:b7:69:9d:a1:10:a2:b3:d5:64:e2:ab:66: 23:57:a1:c3:2d:16:df:c9:9c:47:c3:f2:d6:bd:3c:89:5c:68: 5d:15:94:68:dd:82:27:c5:5a:34:fe:45:59:e2:ac:11:7f:d0: c3:da:26:28:5b:5d:08:c6:c5:42:9c:38:b7:a1:02:91:cb:3a: 9d:b4:89:ec:c5:1c:45:8a:f0:75:4c:ad:58:25:ae:29:5d:19: e0:5a:38:65:1b:22:1d:57:4e:38:89:f1:92:a6:8f:f5:bc:d0: a6:69:81:af:e3:9c:f0:a4:29:17:23:73:6d:6b:31:79:34:88: af:c9:78:27:ce:04:e2:1a:82:53:31:da:39:9f:64:76:90:30: de:05:5d:4e:26:e1:ff:23:77:0f:ed:d9:e2:8f:e0:0e:14:c7: a2:78:8e:30:31:78:83:4b:d6:8d:fb:02:b2:79:bd:64:fa:4b: 7f:65:b4:46:aa:3b:00:ed:6d:b8:dc:3d:e3:b6:29:21:77:22: 3e:25:38:22:6e:45:3a:8c:11:0d:dd:53:90:90:67:bc:4f:fb: c2:f9:ca:b5:07:61:2d:25:49:f1:88:b9:8b:7f:42:28:f6:a7: 70:d9:3d:a4:f7:8f:ee:28:78:76:88:d6:6a:df:fc:7c:ba:1d: 06:02:d1:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUwNDIwMTk0NjQ4WhcNMjUwNDI3MTk0NjQ4WjAYMRYwFAYD VQQDEw02ODA1NGYyOC0yNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfHDz3lwNKaqGw99VDOPNWPouXApyP/bPNxBIo2yP6bYNsHZJCMH8cW5bxKU z2N6Zasq5v6RjFaUa39Lh57PCcUX/HlY6w09H2D3HxqVezgC0Gg1msWs4AFAW+li S053x9HD95LSvsJCD1dr5B+MM+i0Qos8GHyIkRAaNlaqIiU8NT/LOdS5OguCZIyi itE0vsV5fBdYzGzo+fbxR/mwYUQSvT73K50BSAHDAIYhWyWC4tWZCS2jWTiMEChf ZdTI27MVd38/hzjZZr1yISBbGs50VGuE2cMEFQ8c0v/wK2x/DGzOuUc02xErFcyX klCJ8r1ph4HotvxJY59m2ORTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkGkp5Q lPu04W3Yn3Qzyo/L/uUYMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQdLBZzke3aZ2hEKKz1WTiq2YjV6HDLRbfyZxHw/LWvTyJXGhdFZRo 3YInxVo0/kVZ4qwRf9DD2iYoW10IxsVCnDi3oQKRyzqdtInsxRxFivB1TK1YJa4p XRngWjhlGyIdV044ifGSpo/1vNCmaYGv45zwpCkXI3NtazF5NIivyXgnzgTiGoJT Mdo5n2R2kDDeBV1OJuH/I3cP7dnij+AOFMeieI4wMXiDS9aN+wKyeb1k+kt/ZbRG qjsA7W243D3jtikhdyI+JTgibkU6jBEN3VOQkGe8T/vC+cq1B2EtJUnxiLmLf0Io 9qdw2T2k94/uKHh2iNZq3/x8uh0GAtGx -----END CERTIFICATE-----Generated at Tue Apr 22 20:05:16 2025 by rpki-client