$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: 0vCsSuY/lKdegGbHe55k1atdwyJJSKoQFhfHIoGpWNI= Subject key identifier: 4E:47:5F:79:B5:1B:1A:F2:69:B5:4D:D4:39:6F:56:9C:C1:72:93:68 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: C9 Signing time: Fri 11 Apr 2025 04:56:40 +0000 Manifest this update: Fri 11 Apr 2025 04:56:39 +0000 Manifest next update: Fri 18 Apr 2025 04:56:39 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: 2SFLGz6GZ86g4W/AdB4SVdnOycCEnUUhK2bJmJ9aWRY=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: CQEL5kj4k2y2pQ/JT3F7+awUDx+X++2oXAreZHP5rt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: Apr 11 04:56:39 2025 GMT Not After : Apr 18 04:56:39 2025 GMT Subject: CN=67f8a108-85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:69:09:e3:d8:8c:02:32:cb:e0:11:bc:10: f2:c9:43:db:e3:b2:1d:56:e6:bf:e8:76:03:bb:6e: 8d:40:2a:67:3b:b2:78:2e:d3:8c:32:21:33:dc:21: 4a:ed:91:ae:0d:a1:95:a3:6c:44:64:39:4d:ab:0d: 60:84:27:a0:f6:98:bd:d7:eb:26:fc:91:5e:00:e2: 6c:70:0e:ef:5a:b8:87:0e:1f:ad:5a:cb:c5:45:ae: 93:27:6a:47:e5:e9:0c:b0:ff:ce:c6:cb:1b:19:6b: e1:aa:d1:e8:30:1b:b3:59:aa:1a:c6:5d:44:a6:de: fd:29:0b:70:28:9e:93:17:46:8e:10:88:12:ce:87: e0:d2:2b:1e:8b:67:14:a2:83:c3:98:fe:f3:cc:ec: 0e:e8:97:4b:db:4c:30:c9:2c:59:0c:26:03:cb:29: 22:f6:8d:d8:c0:b7:fd:52:03:6f:49:a3:36:4b:af: 99:27:3f:b5:bc:49:5c:75:1d:45:ea:ba:d8:b9:5f: 55:cf:c5:5f:04:ef:04:66:2e:f7:64:0d:62:e2:46: 9a:0a:d8:89:54:8b:42:e9:04:58:36:d0:a0:ca:14: 55:9d:b7:c5:69:1f:d1:d1:e8:23:42:63:9b:e9:51: d1:b8:bf:1d:01:1d:8e:d4:38:44:35:38:a0:1c:49: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:47:5F:79:B5:1B:1A:F2:69:B5:4D:D4:39:6F:56:9C:C1:72:93:68 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c4:86:41:ec:07:57:3b:37:b2:83:c7:05:9c:0c:40:fd:8c: bb:9c:c5:ba:38:c6:98:43:54:05:cd:d5:f3:f3:57:71:a7:a2: 66:0d:96:e7:79:8b:c2:20:e9:f6:ae:3b:a9:a9:2a:36:9c:01: da:7e:51:36:4b:e5:d3:d4:bc:b2:2c:63:fd:af:3d:02:70:28: 20:29:f1:5f:11:86:ac:b2:20:b0:9f:d9:5a:48:54:fa:7b:fa: 50:f5:f0:cb:a4:5b:c6:7f:ee:27:8f:ed:23:f6:98:e6:26:6b: cf:fc:a4:6a:05:a6:64:42:cf:66:ff:10:a8:b7:91:b2:94:6a: 5b:16:e0:37:b1:c6:39:74:8b:69:a7:72:98:fd:2d:64:32:c7: 2e:54:b7:48:7d:0b:43:98:63:13:44:ef:8c:c7:e0:42:d4:ac: eb:bd:80:54:cc:b3:8a:8d:a3:dc:48:f5:da:8c:5a:6f:df:19: 76:b4:0a:b0:d8:78:5a:58:2d:88:ba:a1:18:2f:95:64:da:b6: 42:04:5c:ae:95:50:08:b0:be:b9:b1:a0:d0:22:7d:c7:5d:0e: 70:0b:98:d5:16:8a:3d:5b:4b:ee:28:fd:f4:2b:93:58:e6:c8: d7:36:02:94:11:b0:b2:99:90:59:2a:7d:df:a2:1e:7d:3a:e2: d7:61:20:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwNDExMDQ1NjM5WhcNMjUwNDE4MDQ1NjM5WjAYMRYwFAYD VQQDEw02N2Y4YTEwOC04NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5NpCePYjAIyy+ARvBDyyUPb47IdVua/6HYDu26NQCpnO7J4LtOMMiEz3CFK 7ZGuDaGVo2xEZDlNqw1ghCeg9pi91+sm/JFeAOJscA7vWriHDh+tWsvFRa6TJ2pH 5ekMsP/OxssbGWvhqtHoMBuzWaoaxl1Ept79KQtwKJ6TF0aOEIgSzofg0isei2cU ooPDmP7zzOwO6JdL20wwySxZDCYDyyki9o3YwLf9UgNvSaM2S6+ZJz+1vElcdR1F 6rrYuV9Vz8VfBO8EZi73ZA1i4kaaCtiJVItC6QRYNtCgyhRVnbfFaR/R0egjQmOb 6VHRuL8dAR2O1DhENTigHEn9cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5HX3m1 GxryabVN1DlvVpzBcpNoMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7xIZB7AdXOzeyg8cFnAxA/Yy7nMW6OMaYQ1QFzdXz81dxp6JmDZbn eYvCIOn2rjupqSo2nAHaflE2S+XT1LyyLGP9rz0CcCggKfFfEYassiCwn9laSFT6 e/pQ9fDLpFvGf+4nj+0j9pjmJmvP/KRqBaZkQs9m/xCot5GylGpbFuA3scY5dItp p3KY/S1kMscuVLdIfQtDmGMTRO+Mx+BC1KzrvYBUzLOKjaPcSPXajFpv3xl2tAqw 2HhaWC2IuqEYL5Vk2rZCBFyulVAIsL65saDQIn3HXQ5wC5jVFoo9W0vuKP30K5NY 5sjXNgKUEbCymZBZKn3foh59OuLXYSD7 -----END CERTIFICATE-----Generated at Sat Apr 12 18:51:56 2025 by rpki-client