$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: QZCGEJJiC+jBRchRfgppUMM8JsTAUISNHBbk3vCXrT8= Subject key identifier: 51:30:D5:54:7D:AC:A9:B4:7D:CA:FB:14:D3:50:D8:D8:F5:AE:98:D9 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: 23 Signing time: Sun 19 May 2024 08:32:01 +0000 Manifest this update: Sun 19 May 2024 08:32:00 +0000 Manifest next update: Sun 26 May 2024 08:32:00 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: oOoGxOs/CIbAcCzzE3mAd5Sq4K8YMVDJgpD2HtRZZdE=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: CQEL5kj4k2y2pQ/JT3F7+awUDx+X++2oXAreZHP5rt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: May 19 08:32:00 2024 GMT Not After : May 26 08:32:00 2024 GMT Subject: CN=6649b901-69c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:fc:08:d7:56:b6:9f:98:70:85:42:a2:be: 40:6e:cd:b9:15:0f:e1:77:78:50:b7:0c:19:01:d3: 2f:76:93:0b:03:b7:ae:73:6e:5f:a6:dc:50:41:52: 63:bf:88:c3:55:e2:03:86:96:43:55:4d:fc:09:ca: e9:33:c9:b7:c5:47:0c:0a:39:25:38:09:8b:d2:c1: d8:6a:f8:34:bc:16:ef:f3:3c:b9:3f:2b:bb:79:ec: 94:2e:5e:01:f1:01:bc:30:b3:4d:af:f9:dd:e2:8d: 7d:a3:bb:8f:4d:75:6c:cf:fa:93:32:ff:45:d1:0f: e5:e6:5a:a0:84:6e:db:61:27:a0:88:db:39:2c:b4: 4d:e8:e7:fc:5b:11:0f:06:eb:3b:53:30:7f:65:99: 18:82:f6:54:ac:37:06:bf:fc:00:70:54:42:8d:10: 57:dc:da:8b:f2:f2:7d:94:97:aa:12:40:eb:eb:58: f5:b3:32:18:cd:71:e3:d9:a8:63:13:11:d0:b2:b7: 6a:7c:8f:c0:9d:de:8c:2e:61:a7:d8:83:06:54:b8: 33:56:f1:8a:b4:02:78:a8:83:e2:b2:7b:e0:f1:67: a1:0d:83:21:a5:da:56:e9:4b:dc:d7:fe:ff:35:20: 0d:da:95:1a:e4:b8:e1:21:4a:9e:66:97:c5:e0:9f: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:D5:54:7D:AC:A9:B4:7D:CA:FB:14:D3:50:D8:D8:F5:AE:98:D9 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:89:38:03:8e:4b:4a:6c:a2:d1:0c:91:96:7e:24:58:c9:3b: ad:d5:7f:6b:19:2a:40:24:33:76:01:2e:2d:98:50:b2:ed:71: e9:e0:aa:a3:d6:b1:f7:a7:d0:81:66:b2:82:90:c4:70:a7:98: 49:ee:e5:44:b4:e1:67:ee:18:a4:36:fd:0d:e9:63:a3:08:72: 3f:77:0e:85:bc:f5:9a:12:9e:6e:da:6b:72:3f:9e:14:78:a1: 90:79:c2:66:81:54:27:e6:b2:2d:95:79:76:6a:04:5b:ba:1e: 63:0e:c5:09:5f:bd:19:b8:2f:48:2e:87:a6:2b:10:45:ca:eb: 46:fb:20:b1:f6:c7:fe:b3:31:81:00:99:e6:18:0c:99:24:17: 72:41:6b:b7:bc:03:33:38:aa:9b:69:de:a8:d4:b4:e3:44:af: 1b:3c:43:08:0e:92:91:51:6a:98:71:9f:8f:19:59:40:c7:0c: 8a:22:1b:e8:ee:f3:b1:aa:75:3e:22:0f:9d:d4:d2:ce:e1:f3: 1b:76:c8:9f:bb:b4:19:81:5b:0f:87:71:6e:2b:6b:0a:9f:7a: 2b:00:b4:34:a7:1d:bc:d6:68:95:75:4f:03:4a:c6:d1:32:c5: 08:57:08:fd:9b:cb:9a:f9:af:1e:4a:37:a9:4b:dc:ca:0a:5e: 06:e0:50:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjRDRDExMC8GA1UEBRMoQjAyMzk2QzFFNDk3NkRDMjRCQjlGMjQwRjVDRTU1NkVE ODI3RkEyQjAeFw0yNDA1MTkwODMyMDBaFw0yNDA1MjYwODMyMDBaMBgxFjAUBgNV BAMTDTY2NDliOTAxLTY5YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/PfwI11a2n5hwhUKivkBuzbkVD+F3eFC3DBkB0y92kwsDt65zbl+m3FBBUmO/ iMNV4gOGlkNVTfwJyukzybfFRwwKOSU4CYvSwdhq+DS8Fu/zPLk/K7t57JQuXgHx Abwws02v+d3ijX2ju49NdWzP+pMy/0XRD+XmWqCEbtthJ6CI2zkstE3o5/xbEQ8G 6ztTMH9lmRiC9lSsNwa//ABwVEKNEFfc2ovy8n2Ul6oSQOvrWPWzMhjNcePZqGMT EdCyt2p8j8Cd3owuYafYgwZUuDNW8Yq0Aniog+Kye+DxZ6ENgyGl2lbpS9zX/v81 IA3alRrkuOEhSp5ml8Xgn4WTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUTDVVH2s qbR9yvsU01DY2PWumNkwHwYDVR0jBBgwFoAUsCOWweSXbcJLufJA9c5Vbtgn+isw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNENEL0I5N0I3NjM4RTAy RDExRUU5QTA0MkY1Q0M0RjlBRTAyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1p cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NPV3dlU1hiY0pMdWZKQTljNVZidGduLWlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy NENEL0I5N0I3NjM4RTAyRDExRUU5QTA0MkY1Q0M0RjlBRTAyL3NDT1d3ZVNYYmNK THVmSkE5YzVWYnRnbi1pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiJOAOOS0psotEMkZZ+JFjJO63Vf2sZKkAkM3YBLi2YULLtcengqqPW sfen0IFmsoKQxHCnmEnu5US04WfuGKQ2/Q3pY6MIcj93DoW89ZoSnm7aa3I/nhR4 oZB5wmaBVCfmsi2VeXZqBFu6HmMOxQlfvRm4L0guh6YrEEXK60b7ILH2x/6zMYEA meYYDJkkF3JBa7e8AzM4qptp3qjUtONErxs8QwgOkpFRaphxn48ZWUDHDIoiG+ju 87GqdT4iD53U0s7h8xt2yJ+7tBmBWw+HcW4rawqfeisAtDSnHbzWaJV1TwNKxtEy xQhXCP2by5r5rx5KN6lL3MoKXgbgUGY= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org