$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: IifkqSESqvabHiUdYW9Stqry0zCtxez8ozNiUAEV7ZA= Subject key identifier: E0:43:D7:EA:4B:EC:E9:47:52:25:39:F8:50:87:2B:11:FC:32:E1:03 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 09AD Signing time: Wed 12 Mar 2025 19:48:42 +0000 Manifest this update: Wed 12 Mar 2025 19:48:41 +0000 Manifest next update: Wed 19 Mar 2025 19:48:41 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: qd1Xd0+CdNdUNtL7nKg2tlKhTkBMtVt37NlLQin92vI=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 19:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D Validity Not Before: Mar 12 19:48:41 2025 GMT Not After : Mar 19 19:48:41 2025 GMT Subject: CN=67d1e51a-0af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:3b:7f:de:f2:60:23:94:88:4e:4f:0a:13: 81:3c:a0:42:00:22:2b:88:46:30:22:3a:a1:f2:7e: e4:02:d9:69:9f:ee:e8:ff:ef:e2:d1:a6:ba:99:d0: b2:25:52:44:5c:5e:54:1c:c4:c6:2d:a2:dc:c0:92: 98:32:da:d1:bc:09:11:fa:49:ec:e1:96:02:0d:bc: 4d:2a:43:46:8f:21:93:1d:3a:b2:62:9f:67:b8:ea: 57:a4:cf:a5:5b:e3:db:32:a0:2d:83:29:ff:27:0d: d2:b4:96:33:a6:47:bd:79:1c:cb:8a:43:b5:60:1d: dd:3a:38:4d:7b:97:0e:52:95:4e:02:df:41:30:dc: b8:cf:34:ac:91:1a:a2:a4:32:69:ca:5b:19:16:80: 1c:d4:b4:84:31:9a:40:d5:74:55:bd:1b:9f:9d:92: 3b:7b:bf:63:fc:64:58:85:4e:9b:58:70:e4:25:12: cd:17:d3:2e:21:b0:45:fc:dd:f1:25:f1:c1:e8:2d: a3:c3:58:93:2a:e9:45:95:68:2a:95:1a:dc:02:6b: 9f:35:e1:43:50:bf:a1:ff:e7:14:b2:4a:25:e8:fe: e2:ec:8c:74:61:44:6a:90:1a:81:aa:06:fa:80:8e: b7:d8:27:25:49:c4:59:f9:4b:1e:64:0b:2c:6b:ea: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:D7:EA:4B:EC:E9:47:52:25:39:F8:50:87:2B:11:FC:32:E1:03 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cb:a3:a7:f1:a1:7e:3b:a8:f6:b5:05:9f:3a:43:f1:11:ad: dc:3d:3e:a7:99:26:ea:6f:2e:31:f3:1c:18:3d:1f:2f:cc:3e: 71:29:d8:3b:bf:77:23:1a:70:bd:a5:56:2c:33:dd:a0:e2:bb: 3c:3a:79:a6:c9:97:a8:09:37:1b:6a:96:7c:b6:fa:a6:49:a1: 1b:cf:08:90:c7:cb:52:bf:e7:05:bc:78:c1:e4:16:93:f6:80: 01:36:de:79:dc:88:82:46:1c:43:65:cb:6c:8b:1b:03:f2:61: 7c:4f:73:24:84:da:02:d3:ba:15:30:bf:c7:db:a2:89:09:3f: 7d:51:db:1b:f3:12:06:85:25:7d:1b:ec:c9:34:5f:88:6d:ad: 3e:23:58:cc:02:d6:e1:6d:b9:02:46:bc:ab:da:26:b1:4f:92: 5e:c5:ca:09:91:4f:d6:45:4d:46:4b:29:49:c4:dc:bd:32:7a: b1:4e:86:a5:9c:9a:c4:6f:ec:83:8a:64:8e:e4:7c:08:ee:be: a0:1d:68:78:4c:8d:b7:72:be:fe:0a:77:eb:25:9a:d1:b6:8a: 1d:9d:17:d8:5c:51:fa:8e:59:04:30:ca:5d:5f:53:49:b9:10: 43:9a:2c:6f:05:f3:ac:fc:d5:22:ee:1a:be:a6:48:64:aa:cd: cb:86:00:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUwMzEyMTk0ODQxWhcNMjUwMzE5MTk0ODQxWjAYMRYwFAYD VQQDEw02N2QxZTUxYS0wYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Xg7f97yYCOUiE5PChOBPKBCACIriEYwIjqh8n7kAtlpn+7o/+/i0aa6mdCy JVJEXF5UHMTGLaLcwJKYMtrRvAkR+kns4ZYCDbxNKkNGjyGTHTqyYp9nuOpXpM+l W+PbMqAtgyn/Jw3StJYzpke9eRzLikO1YB3dOjhNe5cOUpVOAt9BMNy4zzSskRqi pDJpylsZFoAc1LSEMZpA1XRVvRufnZI7e79j/GRYhU6bWHDkJRLNF9MuIbBF/N3x JfHB6C2jw1iTKulFlWgqlRrcAmufNeFDUL+h/+cUskol6P7i7Ix0YURqkBqBqgb6 gI632CclScRZ+UseZAssa+qaoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBD1+pL 7OlHUiU5+FCHKxH8MuEDMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAby6On8aF+O6j2tQWfOkPxEa3cPT6nmSbqby4x8xwYPR8vzD5xKdg7 v3cjGnC9pVYsM92g4rs8OnmmyZeoCTcbapZ8tvqmSaEbzwiQx8tSv+cFvHjB5BaT 9oABNt553IiCRhxDZctsixsD8mF8T3MkhNoC07oVML/H26KJCT99Udsb8xIGhSV9 G+zJNF+Iba0+I1jMAtbhbbkCRryr2iaxT5JexcoJkU/WRU1GSylJxNy9MnqxToal nJrEb+yDimSO5HwI7r6gHWh4TI23cr7+CnfrJZrRtoodnRfYXFH6jlkEMMpdX1NJ uRBDmixvBfOs/NUi7hq+pkhkqs3LhgDk -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:50 2025 by rpki-client