$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: FJgS70N2TNpgxFXsGNZ8id23QfYO4Ou84GcPuiwsd1A= Subject key identifier: 28:AA:67:E6:DE:F8:FD:4E:64:4C:DA:84:23:F5:AF:36:9C:B4:A6:83 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 04C6 Signing time: Sat 31 May 2025 00:01:33 +0000 Manifest this update: Sat 31 May 2025 00:01:33 +0000 Manifest next update: Sat 07 Jun 2025 00:01:33 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: 3mF2s0uiSePidGonWvAeZCmeaiWEzrhMtdv1Sg+/9Kg=) 2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: jCU/v9ZAMlR1XjR5DVX1sYYEuiobU1ATrCOeYr/SwtU=) 3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: 4Y1CJYnccsljljYTRuihSH5rf63INRuP39Y2H4f++BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: May 31 00:01:33 2025 GMT Not After : Jun 7 00:01:33 2025 GMT Subject: CN=683a46dd-2a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:89:77:9b:ce:c7:f7:92:ef:e9:ef:b1:c1: f2:1a:71:4f:b9:8e:a0:f1:26:56:c6:24:5b:7e:2c: f6:f4:6b:1f:6d:11:1f:c7:c1:78:6f:75:1b:0f:88: 23:ee:9b:fb:13:83:b6:4a:eb:db:6f:73:8d:65:f3: be:8b:f9:e6:c4:e6:4f:5d:2a:26:5d:b8:8c:28:5f: e1:7e:83:44:24:1d:ff:08:fd:f7:d4:cb:c9:c1:32: e5:5f:d8:e9:5d:66:07:40:ce:7c:cd:41:e2:2f:45: 18:0f:6c:72:c4:42:66:dc:7a:a7:ad:d8:9f:da:fb: 0c:a7:8c:28:75:0f:85:cd:12:4c:81:ec:9f:26:4d: b1:00:ae:3d:13:e4:e1:32:6e:1e:dd:35:a8:c9:94: 37:14:32:32:6c:b2:b8:e2:1c:80:a0:d2:1b:6a:48: 46:49:82:41:b8:01:20:96:67:ce:ac:6b:85:8b:ab: a4:6b:5d:78:75:4c:52:52:5f:a4:67:0a:75:72:90: 70:6e:ed:cf:50:72:2c:f5:50:73:f3:69:d9:a2:db: 62:51:9c:4b:29:52:dd:e4:a1:84:d4:27:d7:f6:22: f2:47:ea:65:22:29:13:f1:f3:cc:ea:07:9e:77:cd: e1:87:e4:b2:dc:5a:df:01:10:81:25:4e:90:c5:74: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:67:E6:DE:F8:FD:4E:64:4C:DA:84:23:F5:AF:36:9C:B4:A6:83 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:38:0c:58:69:f4:c0:81:ed:6f:2f:a5:78:da:cf:55:ba:03: fd:a6:7b:37:88:c6:83:0c:60:68:d6:b5:9f:f1:dc:c8:8b:22: 09:df:5a:9f:40:dc:e3:b2:06:1d:32:12:8f:f9:b0:3e:bc:e0: ac:09:eb:ff:11:fd:2b:13:a2:8f:3a:72:6c:f0:62:30:e7:47: 93:0b:e2:a4:aa:f0:44:35:56:bd:51:b3:4e:f7:3b:da:9d:9c: dc:26:8e:de:26:59:f9:fc:ef:c9:7c:9b:b4:f3:99:b5:29:cf: c2:bc:dd:2b:12:65:c7:a2:64:7c:c3:13:01:7e:e3:e0:a5:1f: 52:34:7b:9f:be:64:3c:2b:29:e9:0a:87:5a:5d:1e:66:7c:9e: 38:42:b2:24:40:55:18:9b:4c:0a:a5:3e:57:3f:c0:f6:04:62: f8:58:93:3b:8b:92:e3:dc:1a:07:5f:65:2a:e1:61:37:a9:9f: 15:96:cc:02:b5:26:a8:8f:29:b2:dc:3a:b9:65:1a:6c:57:1c: 50:85:c5:97:b7:6e:1b:bc:ae:90:6c:0d:e6:a6:9a:07:d7:9a: 6d:72:3c:3c:6b:75:d6:89:b0:ef:67:af:ea:85:5e:32:b5:b8: b7:dd:3e:6f:40:34:46:c1:72:5a:9d:75:e7:a7:21:e3:b6:9e: ff:cc:da:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjUwNTMxMDAwMTMzWhcNMjUwNjA3MDAwMTMzWjAYMRYwFAYD VQQDEw02ODNhNDZkZC0yYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1+Jd5vOx/eS7+nvscHyGnFPuY6g8SZWxiRbfiz29GsfbREfx8F4b3UbD4gj 7pv7E4O2Suvbb3ONZfO+i/nmxOZPXSomXbiMKF/hfoNEJB3/CP331MvJwTLlX9jp XWYHQM58zUHiL0UYD2xyxEJm3Hqnrdif2vsMp4wodQ+FzRJMgeyfJk2xAK49E+Th Mm4e3TWoyZQ3FDIybLK44hyAoNIbakhGSYJBuAEglmfOrGuFi6uka114dUxSUl+k Zwp1cpBwbu3PUHIs9VBz82nZottiUZxLKVLd5KGE1CfX9iLyR+plIikT8fPM6gee d83hh+Sy3FrfARCBJU6QxXQ/HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiqZ+be +P1OZEzahCP1rzactKaDMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXOAxYafTAge1vL6V42s9VugP9pns3iMaDDGBo1rWf8dzIiyIJ31qf QNzjsgYdMhKP+bA+vOCsCev/Ef0rE6KPOnJs8GIw50eTC+KkqvBENVa9UbNO9zva nZzcJo7eJln5/O/JfJu085m1Kc/CvN0rEmXHomR8wxMBfuPgpR9SNHufvmQ8Kynp CodaXR5mfJ44QrIkQFUYm0wKpT5XP8D2BGL4WJM7i5Lj3BoHX2Uq4WE3qZ8VlswC tSaojymy3Dq5ZRpsVxxQhcWXt24bvK6QbA3mppoH15ptcjw8a3XWibDvZ6/qhV4y tbi33T5vQDRGwXJanXXnpyHjtp7/zNrq -----END CERTIFICATE-----Generated at Sat May 31 16:29:38 2025 by rpki-client