$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft File: xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json) Hash identifier: xBt/h8Tcl12ccLXgw3CFV1qCdER4jV6TfUZYb6I2NYk= Subject key identifier: F2:FC:AD:F6:41:EC:07:CC:C3:F3:E2:3F:A6:CF:05:2C:C5:2B:0C:56 Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Certificate serial: 0401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft Manifest number: 03FE Signing time: Tue 07 May 2024 02:07:44 +0000 Manifest this update: Tue 07 May 2024 02:07:44 +0000 Manifest next update: Tue 14 May 2024 02:07:44 +0000 Files and hashes: 1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: MQywwsZJH4QhCWaFvbIg2SsKHecwOjEMwpwvF72flbI=) 2: 5A591BB025E011EC9E89C60AC4F9AE02.roa (hash: SfX78mf8Kd7x/+CvFiJo2Q6E4e6u3b0BX938D2DXIEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2 Validity Not Before: May 7 02:07:44 2024 GMT Not After : May 14 02:07:44 2024 GMT Subject: CN=66398cf0-9c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:bb:0a:7a:98:70:97:6f:e3:c4:b0:d4:32: 49:07:aa:2f:ba:33:3a:c5:46:0f:fd:a9:34:7e:66: 7f:b7:2f:0d:e5:e6:9e:fa:a0:29:af:bd:5d:1e:9f: 5a:17:71:08:b5:57:b7:03:97:bf:21:ac:7d:64:1d: 0d:9a:a4:52:98:bf:03:77:88:ff:67:34:f2:89:81: de:a1:69:dd:ba:27:af:ee:fd:d3:ef:ce:77:8a:80: 31:58:5d:20:98:e7:d5:9e:39:16:24:87:ee:d0:5f: 94:16:44:36:0d:6c:55:11:eb:c8:10:9b:19:87:27: 86:34:24:a8:42:c7:ef:1b:29:f8:b8:fa:78:51:70: f6:9e:9d:c1:ad:b2:11:a8:da:53:85:a7:22:b6:8d: b9:5f:e4:07:94:46:5d:6c:4d:de:f7:89:f9:2b:a9: d1:84:bd:0d:9f:d1:5e:a3:6f:4a:b8:7c:af:4a:ee: c0:1d:f9:16:5f:aa:af:1f:cd:c1:79:71:bd:5b:db: fb:e5:68:5a:49:17:ea:7e:76:a2:97:1d:73:5d:e1: cb:ef:4d:e9:ac:fc:9c:b8:6e:6a:aa:e5:b4:6d:6b: c3:34:94:f1:d7:31:58:49:d6:11:99:ab:c8:ba:ad: 10:ad:49:cf:98:1f:5a:93:e1:52:b9:5e:e0:d6:cb: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:AD:F6:41:EC:07:CC:C3:F3:E2:3F:A6:CF:05:2C:C5:2B:0C:56 X509v3 Authority Key Identifier: keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:56:03:a3:3e:7c:e1:a0:ed:0f:ee:86:49:8c:01:c9:37:f7: 38:9f:6f:de:01:59:f8:08:d0:2d:d7:97:31:52:19:37:f1:3d: f8:9a:94:24:4f:7a:ab:db:4a:d2:10:9c:b5:ff:71:0c:8a:ef: cc:7d:af:f4:6d:0c:30:ba:08:f8:f1:88:da:28:32:cb:d3:d9: f2:21:d5:fc:8b:3f:17:41:b0:bd:04:83:b2:90:c1:2a:d5:15: 9a:7b:79:43:bd:c2:e5:ce:f8:99:78:5b:14:c7:5b:d4:29:30: c2:0d:eb:0b:be:b5:72:f7:db:c0:09:9c:26:0c:c7:8a:7f:bf: 71:62:20:8d:ce:61:38:36:ea:0e:1e:66:31:4b:94:c2:ba:42: 8a:3b:01:08:93:11:86:c7:65:f0:49:ff:a8:43:da:3e:9e:d8: c2:f0:8b:0e:f1:ca:2a:52:e5:fe:0e:17:36:36:64:8e:07:ab: 31:7b:7b:0d:29:5a:e5:c8:59:4a:77:f1:37:c9:90:e6:d1:90: 0e:ab:ba:17:01:e8:e3:12:d3:62:8b:24:36:e0:b6:73:42:77: d8:da:81:2b:e5:09:b5:72:d5:96:02:b6:ea:91:99:b8:16:2f: be:75:c3:7e:eb:ef:12:bb:f8:40:46:90:02:a2:37:4c:3c:fd: d5:83:54:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQTAxMTAvBgNVBAUTKEM1MzVCNjM0M0VBOUJGNTlFQTgyRUVFRTNBRkI4QTQw MDBERThCQjIwHhcNMjQwNTA3MDIwNzQ0WhcNMjQwNTE0MDIwNzQ0WjAYMRYwFAYD VQQDEw02NjM5OGNmMC05Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGi7CnqYcJdv48Sw1DJJB6ovujM6xUYP/ak0fmZ/ty8N5eae+qApr71dHp9a F3EItVe3A5e/Iax9ZB0NmqRSmL8Dd4j/ZzTyiYHeoWnduiev7v3T7853ioAxWF0g mOfVnjkWJIfu0F+UFkQ2DWxVEevIEJsZhyeGNCSoQsfvGyn4uPp4UXD2np3BrbIR qNpThacito25X+QHlEZdbE3e94n5K6nRhL0Nn9Feo29KuHyvSu7AHfkWX6qvH83B eXG9W9v75WhaSRfqfnailx1zXeHL703prPycuG5qquW0bWvDNJTx1zFYSdYRmavI uq0QrUnPmB9ak+FSuV7g1ssYMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL8rfZB 7AfMw/PiP6bPBSzFKwxWMB8GA1UdIwQYMBaAFMU1tjQ+qb9Z6oLu7jr7ikAA3ouy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFBMC9BNjMzN0JFMjI1 REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYxbnFndTd1T3Z1S1FBRGVp N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUVzJORDZwdjFucWd1N3VPdnVLUUFEZWk3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFBMC9BNjMzN0JFMjI1REMxMUVDOTUxRUNFODJDNEY5QUUwMi94VFcyTkQ2cHYx bnFndTd1T3Z1S1FBRGVpN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVgOjPnzhoO0P7oZJjAHJN/c4n2/eAVn4CNAt15cxUhk38T34mpQk T3qr20rSEJy1/3EMiu/Mfa/0bQwwugj48YjaKDLL09nyIdX8iz8XQbC9BIOykMEq 1RWae3lDvcLlzviZeFsUx1vUKTDCDesLvrVy99vACZwmDMeKf79xYiCNzmE4NuoO HmYxS5TCukKKOwEIkxGGx2XwSf+oQ9o+ntjC8IsO8coqUuX+Dhc2NmSOB6sxe3sN KVrlyFlKd/E3yZDm0ZAOq7oXAejjEtNiiyQ24LZzQnfY2oEr5Qm1ctWWArbqkZm4 Fi++dcN+6+8Su/hARpACojdMPP3Vg1TS -----END CERTIFICATE-----Generated at Tue May 7 03:10:18 2024 by rpki-client on console-ams.rpki-client.org