$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json) Hash identifier: qUu8zSAHEgHF7D+oV7tARIvPzu5LXiBSrI32kEL1+4M= Subject key identifier: 25:56:19:A1:95:4C:D2:7A:DF:91:D4:9F:B2:44:CF:EC:36:69:DD:14 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0931 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft Manifest number: 090C Signing time: Sat 04 May 2024 21:27:28 +0000 Manifest this update: Sat 04 May 2024 21:27:27 +0000 Manifest next update: Sat 11 May 2024 21:27:27 +0000 Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: +0J+nZD+85f+BtCXzWo1VyQ7k1R0WJzyIXpddbVlmvE=) 2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: yJxNF4ZUAPB5RcZ2qNMefaRI0wxOyMyeqicC7LHVTpc=) 3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: 4n66LkegDbFIHcYcBJKvAm09V+JbkaejJoVyaO9RbG0=) 4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: uWs8m1xw6pW2b/wUclrtqBWNFTBruqKW4nOBX0tzuxE=) 5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: fqN4w77NmNmncNmf24Zti3bdR6MrQjvCytTr8TlaQ/8=) 6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: uNczvRDJfd4jz5DSR1JPhHDTfb/BkC5W5DhH4+uBMjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: May 4 21:27:27 2024 GMT Not After : May 11 21:27:27 2024 GMT Subject: CN=6636a840-a9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:0d:eb:8e:e6:61:2f:9f:0e:7d:22:e9:b8: ac:e8:ef:a1:5d:84:f3:01:34:71:f7:63:e3:b7:57: 4a:48:ce:6d:b7:b9:63:76:c1:bd:32:c0:12:21:4b: 26:a6:1f:d2:de:db:53:2e:36:64:15:4c:61:cd:85: a1:4e:1b:04:14:56:0a:2c:50:49:a9:f3:8b:76:aa: c2:1b:8d:a9:78:ee:4e:6f:9f:0f:5c:2c:56:9d:a2: 28:22:47:a8:70:dc:b7:57:9e:9e:c9:9b:d4:af:8a: 26:d4:d1:2b:21:4d:ca:ac:a0:ef:88:bb:6f:c1:c9: 77:91:e7:d5:b6:a1:bf:b1:e9:87:14:67:40:7f:57: c1:ea:90:ac:d6:46:07:fc:b5:f0:c4:07:3a:49:59: d6:01:c9:f8:86:ac:1a:59:f6:b0:f4:38:98:67:dd: 02:3f:eb:8c:16:88:b1:3e:b3:da:cb:14:c2:4e:56: 57:ce:f0:dd:18:54:af:7b:7e:68:99:79:5c:5d:96: 46:8e:c6:03:dc:ef:69:7d:0c:55:10:ad:6f:5b:c4: 73:ee:9f:d2:68:d8:29:98:53:a0:37:51:c5:c6:f5: 8c:42:80:d5:de:03:81:53:75:b7:c5:f7:d4:47:70: bb:79:cd:3e:d4:bd:71:f3:1e:29:db:f9:5e:b4:f1: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:56:19:A1:95:4C:D2:7A:DF:91:D4:9F:B2:44:CF:EC:36:69:DD:14 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:56:7c:f5:84:a3:61:99:1d:e7:ff:29:72:07:40:99:9c:69: 7f:48:ac:f8:92:89:4a:63:f9:09:64:92:70:d6:cc:44:ba:d9: e9:b7:77:17:dc:92:27:50:a3:eb:ba:c9:fe:07:93:26:9f:94: 16:a4:7b:b1:6b:b3:12:e2:d1:e2:48:d2:69:5a:8b:bc:64:be: 1c:72:5d:22:ef:ad:5f:87:8c:ac:ab:c7:34:e8:04:48:dc:24: 8a:b0:37:40:4f:5e:b6:d7:da:d3:cd:c9:a5:93:0f:99:0a:a8: e6:a6:15:61:5f:86:d7:fc:3c:1b:c0:6c:f1:b6:0e:77:a0:2a: dd:cb:f8:3c:22:a6:c2:c6:51:08:6f:a1:f9:0e:a7:81:fe:0e: 23:02:cc:df:b1:68:5f:07:69:1e:6d:54:33:b6:f7:54:3e:3a: 26:b3:78:31:a4:c7:02:6a:72:4f:af:cf:44:a2:8b:8b:b3:66: df:4b:06:44:ab:ab:5e:2d:2b:4b:62:9f:5d:96:64:ee:8e:f1: de:0f:bf:ce:3e:6a:c7:ad:fe:49:5b:1b:64:82:b2:66:85:67: 42:e0:b5:9c:24:b7:3c:61:63:66:1d:eb:2d:d6:52:08:00:ab: 9e:cb:63:45:55:3f:cb:4f:67:df:26:42:03:7e:7a:3e:de:4f: 70:1f:4d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjQwNTA0MjEyNzI3WhcNMjQwNTExMjEyNzI3WjAYMRYwFAYD VQQDEw02NjM2YTg0MC1hOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfEN647mYS+fDn0i6bis6O+hXYTzATRx92Pjt1dKSM5tt7ljdsG9MsASIUsm ph/S3ttTLjZkFUxhzYWhThsEFFYKLFBJqfOLdqrCG42peO5Ob58PXCxWnaIoIkeo cNy3V56eyZvUr4om1NErIU3KrKDviLtvwcl3kefVtqG/semHFGdAf1fB6pCs1kYH /LXwxAc6SVnWAcn4hqwaWfaw9DiYZ90CP+uMFoixPrPayxTCTlZXzvDdGFSve35o mXlcXZZGjsYD3O9pfQxVEK1vW8Rz7p/SaNgpmFOgN1HFxvWMQoDV3gOBU3W3xffU R3C7ec0+1L1x8x4p2/letPG22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVWGaGV TNJ635HUn7JEz+w2ad0UMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8yRTc2N0UzMjgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZB UXlUZ0U4TUpmOXZOWUJOTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVnz1hKNhmR3n/ylyB0CZnGl/SKz4kolKY/kJZJJw1sxEutnpt3cX 3JInUKPrusn+B5Mmn5QWpHuxa7MS4tHiSNJpWou8ZL4ccl0i761fh4ysq8c06ARI 3CSKsDdAT16219rTzcmlkw+ZCqjmphVhX4bX/DwbwGzxtg53oCrdy/g8IqbCxlEI b6H5DqeB/g4jAszfsWhfB2kebVQztvdUPjoms3gxpMcCanJPr89EoouLs2bfSwZE q6teLStLYp9dlmTujvHeD7/OPmrHrf5JWxtkgrJmhWdC4LWcJLc8YWNmHest1lII AKuey2NFVT/LT2ffJkIDfno+3k9wH02c -----END CERTIFICATE-----Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org