$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft File: twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json) Hash identifier: 1B565eT4i5mLnCBdZ8A1r7TH+wHNz+++Zh/fxFAJU7U= Subject key identifier: EC:92:87:1A:B1:2A:BC:36:62:95:54:46:F6:B5:3F:BC:F7:E3:F4:B7 Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 Certificate issuer: /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Certificate serial: 328B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft Manifest number: 328B Signing time: Sat 18 May 2024 15:36:28 +0000 Manifest this update: Sat 18 May 2024 15:36:27 +0000 Manifest next update: Sat 25 May 2024 15:36:27 +0000 Files and hashes: 1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: i2zZ+bUsaZcBKk7uUvqu8swATxAbXJljDPVdWBj/BEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12939 (0x328b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Validity Not Before: May 18 15:36:27 2024 GMT Not After : May 25 15:36:27 2024 GMT Subject: CN=6648cafc-9fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:b9:45:ab:f2:81:94:92:07:e4:c4:b9:8e: 77:4d:21:21:10:d5:75:21:fb:0e:12:87:27:2f:ab: f2:9d:94:4f:d6:79:ba:86:ac:de:06:fb:5f:23:d5: 70:ce:7f:dc:17:ed:1f:49:f8:42:eb:40:c3:68:f6: 9c:27:98:89:27:81:37:4e:d6:51:2a:5b:c4:6a:31: fe:fb:3d:5f:7f:2d:7e:ce:88:ad:d2:2f:e3:05:ea: 47:29:f4:54:fd:ca:46:df:29:6a:a4:2f:da:1e:0b: 0c:52:82:5f:f8:f1:67:0f:18:ea:1c:62:c3:a1:4a: 90:af:13:d8:20:35:cf:40:8c:8a:12:e0:f3:89:36: 98:d3:c3:a6:0e:e9:2b:95:7e:17:17:b5:f3:d3:47: 7b:75:d4:eb:b2:f2:cd:27:a5:c6:df:c3:93:ab:ff: 9f:0a:05:12:ef:38:2c:11:2b:fb:37:42:b1:bb:1c: 65:06:20:05:09:4a:d7:0d:14:28:45:5e:f2:39:b6: 7a:ae:a9:d9:34:97:23:63:ed:24:2f:ba:2d:fe:29: 2b:e4:3b:7c:d8:5f:76:5a:ef:46:7c:47:82:04:7b: e5:ea:e7:0d:bd:cc:6d:94:ff:f0:4d:e9:35:89:28: ef:77:3e:68:de:88:e7:d7:2b:d7:b2:4a:a6:86:5b: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:92:87:1A:B1:2A:BC:36:62:95:54:46:F6:B5:3F:BC:F7:E3:F4:B7 X509v3 Authority Key Identifier: keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:fd:b4:42:3a:08:0e:cf:4a:62:91:cc:92:8c:e3:3b:de: f6:41:95:94:f4:aa:9c:14:26:f6:63:e8:4a:4b:14:70:89:53: 28:a1:07:e8:5f:0a:e9:9d:68:67:30:0f:c8:f3:62:fe:ea:26: 62:6d:6b:60:c4:14:10:76:94:d6:d0:6d:10:82:47:7e:6a:d0: 81:71:ca:51:3a:65:71:2a:fe:20:fe:5b:95:12:6e:61:57:47: e9:3f:62:17:01:b6:e3:60:b1:64:dc:05:51:a9:ed:9a:cd:db: 68:3f:60:16:2f:38:1b:66:25:ca:4a:26:ac:be:d1:50:f3:9c: 77:5e:52:ca:7e:79:8b:1e:d3:bf:d4:f7:80:81:a4:90:78:9a: 73:04:f1:d1:4e:57:4f:4c:4c:7b:47:85:d3:5c:80:97:b9:02: 27:f7:17:bf:82:87:ac:4b:85:2e:41:54:c6:45:b0:55:0f:ed: 7d:4c:02:77:5f:9c:0a:44:c4:ae:d6:fe:1c:1e:64:13:e6:8f: 8c:df:32:9e:1a:b9:e7:46:3e:09:e0:52:9c:eb:08:01:f0:d2: 68:3b:01:34:56:7b:d6:26:db:3b:67:bf:c5:a0:56:ef:37:58: c2:b7:79:48:e5:79:71:d4:63:8c:1a:95:91:c8:c0:5b:8a:b0: 28:87:99:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NUQxMTAvBgNVBAUTKEI3MDczQTFEMDlGMjNBMjQ3RkNFNTc4NTJBQTRCOEE2 ODBDNkRBNzAwHhcNMjQwNTE4MTUzNjI3WhcNMjQwNTI1MTUzNjI3WjAYMRYwFAYD VQQDEw02NjQ4Y2FmYy05ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgC5RavygZSSB+TEuY53TSEhENV1IfsOEocnL6vynZRP1nm6hqzeBvtfI9Vw zn/cF+0fSfhC60DDaPacJ5iJJ4E3TtZRKlvEajH++z1ffy1+zoit0i/jBepHKfRU /cpG3ylqpC/aHgsMUoJf+PFnDxjqHGLDoUqQrxPYIDXPQIyKEuDziTaY08OmDukr lX4XF7Xz00d7ddTrsvLNJ6XG38OTq/+fCgUS7zgsESv7N0KxuxxlBiAFCUrXDRQo RV7yObZ6rqnZNJcjY+0kL7ot/ikr5Dt82F92Wu9GfEeCBHvl6ucNvcxtlP/wTek1 iSjvdz5o3ojn1yvXskqmhluIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyShxqx Krw2YpVURva1P7z34/S3MB8GA1UdIwQYMBaAFLcHOh0J8jokf85XhSqkuKaAxtpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1RC84NjAyMzAyMjU5 RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9pUl96bGVGS3FTNHBvREcy bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3YzZIUW55T2lSX3psZUZLcVM0cG9ERzJuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1RC84NjAyMzAyMjU5RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9p Ul96bGVGS3FTNHBvREcybkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEXf20QjoIDs9KYpHMkozjO972QZWU9KqcFCb2Y+hKSxRwiVMooQfo XwrpnWhnMA/I82L+6iZibWtgxBQQdpTW0G0Qgkd+atCBccpROmVxKv4g/luVEm5h V0fpP2IXAbbjYLFk3AVRqe2azdtoP2AWLzgbZiXKSiasvtFQ85x3XlLKfnmLHtO/ 1PeAgaSQeJpzBPHRTldPTEx7R4XTXICXuQIn9xe/goesS4UuQVTGRbBVD+19TAJ3 X5wKRMSu1v4cHmQT5o+M3zKeGrnnRj4J4FKc6wgB8NJoOwE0VnvWJts7Z7/FoFbv N1jCt3lI5Xlx1GOMGpWRyMBbirAoh5l8 -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org