$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: 6s70iEWtfYCkcuSiQygk0LAVyKXS1Ga6/QuzAAWaLf8= Subject key identifier: E8:35:4E:B2:9C:7B:E1:69:8A:3F:D3:4D:F6:90:44:A4:FD:A5:8A:AC Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 0A07 Signing time: Sat 06 Sep 2025 20:03:51 +0000 Manifest this update: Sat 06 Sep 2025 20:03:51 +0000 Manifest next update: Sat 13 Sep 2025 20:03:51 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: Dxufa0MEuLuPjWxXGbXiEOyBDd2I+ImeW2hmfJD0LUA=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Sep 6 20:03:51 2025 GMT Not After : Sep 13 20:03:51 2025 GMT Subject: CN=68bc93a7-8f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:de:10:21:ad:2a:1e:95:f0:0c:d4:b5:59: 4d:c5:72:50:cf:97:2e:bd:4d:51:76:7c:ce:dd:41: 7a:cb:88:18:de:e7:9d:a0:e9:be:28:01:ad:88:e2: 5f:da:6c:cd:2a:c5:cc:aa:cd:a5:e3:23:0b:db:ef: 57:ab:40:31:f6:7f:b8:1c:80:f9:6f:15:bf:65:7f: 98:8d:60:3c:7c:f0:65:e0:7c:00:c2:5d:b8:35:cc: d5:a8:af:ef:53:7a:fd:c0:9a:c9:70:fe:8f:f1:a0: 39:36:3d:47:94:44:bd:8d:11:a3:14:c7:af:49:e8: 8c:50:74:a4:1d:4e:28:b2:fa:fd:36:ea:c9:d1:62: fc:a0:ee:25:bc:da:71:0c:7d:39:24:02:f5:35:8c: 85:95:b1:bd:8b:68:d5:4c:8b:17:3f:d7:e6:11:9c: b8:3a:64:2f:77:cc:9e:f6:1f:16:67:a4:b7:f1:63: ea:f8:ed:75:7e:b3:03:78:9e:b5:69:24:e7:3f:4c: ec:5b:90:a6:f5:df:86:b1:62:93:6e:d8:ce:47:ce: 48:c7:85:bb:f5:d0:41:c2:03:65:4c:02:97:c0:94: 4a:14:ed:a4:58:e9:aa:e7:f9:da:c9:9d:76:15:4e: c4:36:d4:1d:43:bc:b5:c8:5e:8c:b4:79:7f:e3:84: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:35:4E:B2:9C:7B:E1:69:8A:3F:D3:4D:F6:90:44:A4:FD:A5:8A:AC X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:33:e6:51:76:04:e3:94:e7:23:ff:ea:dc:4c:bd:29:12:37: 28:0c:3e:d4:9b:21:65:67:8d:77:f9:a5:99:2d:9a:ef:ac:90: 68:01:2d:5f:15:aa:cd:b7:8f:5c:f4:5b:46:1c:cf:52:da:d8: e4:23:50:ce:90:d6:c1:b6:93:2d:9d:3b:2b:2b:39:a4:d2:b1: 1f:01:c1:4f:ed:65:e3:6a:8b:56:21:26:3e:14:cb:30:4b:1e: 89:3a:8d:59:e3:5c:d9:f8:a0:f0:b4:0f:ef:b6:94:91:77:ad: 45:73:a0:47:9d:a9:92:89:9b:cc:8e:da:0e:f2:17:ea:49:ed: 21:d4:d0:b6:0b:59:ab:37:85:07:3e:c6:31:18:ec:f5:30:4b: 4f:ec:14:e2:44:1d:dd:ff:4d:0b:96:36:fe:f9:51:65:84:90: 9f:20:23:92:29:64:8f:4d:27:5f:55:4c:47:6a:b8:6d:58:00: 00:79:ab:39:e1:80:ff:4d:78:1f:32:57:64:2a:f1:67:38:68: d6:f2:eb:82:dc:e2:8c:c2:55:c7:4b:b8:0c:4d:ce:fa:e9:e3: 2c:b4:9e:e5:89:f5:ea:38:dc:5d:25:b5:ff:d3:f7:86:c3:f3: f9:8b:ed:11:84:9f:be:6c:32:e1:78:44:14:73:ad:04:b9:9b: aa:23:36:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjUwOTA2MjAwMzUxWhcNMjUwOTEzMjAwMzUxWjAYMRYwFAYD VQQDEw02OGJjOTNhNy04ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxneECGtKh6V8AzUtVlNxXJQz5cuvU1RdnzO3UF6y4gY3uedoOm+KAGtiOJf 2mzNKsXMqs2l4yML2+9Xq0Ax9n+4HID5bxW/ZX+YjWA8fPBl4HwAwl24NczVqK/v U3r9wJrJcP6P8aA5Nj1HlES9jRGjFMevSeiMUHSkHU4osvr9NurJ0WL8oO4lvNpx DH05JAL1NYyFlbG9i2jVTIsXP9fmEZy4OmQvd8ye9h8WZ6S38WPq+O11frMDeJ61 aSTnP0zsW5Cm9d+GsWKTbtjOR85Ix4W79dBBwgNlTAKXwJRKFO2kWOmq5/nayZ12 FU7ENtQdQ7y1yF6MtHl/44QFiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg1TrKc e+Fpij/TTfaQRKT9pYqsMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvM+ZRdgTjlOcj/+rcTL0pEjcoDD7UmyFlZ413+aWZLZrvrJBoAS1f FarNt49c9FtGHM9S2tjkI1DOkNbBtpMtnTsrKzmk0rEfAcFP7WXjaotWISY+FMsw Sx6JOo1Z41zZ+KDwtA/vtpSRd61Fc6BHnamSiZvMjtoO8hfqSe0h1NC2C1mrN4UH PsYxGOz1MEtP7BTiRB3d/00Lljb++VFlhJCfICOSKWSPTSdfVUxHarhtWAAAeas5 4YD/TXgfMldkKvFnOGjW8uuC3OKMwlXHS7gMTc766eMstJ7lifXqONxdJbX/0/eG w/P5i+0RhJ++bDLheEQUc60EuZuqIzb3 -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:05 2025 by rpki-client