$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: x70p1W+aTHZXW35brI2lhTnewOhtVYUN2kYrJH5+t80= Subject key identifier: 3B:C0:46:DA:46:6F:F4:DE:F5:F1:89:04:29:23:65:96:73:91:54:17 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: E3 Signing time: Sat 31 May 2025 05:01:58 +0000 Manifest this update: Sat 31 May 2025 05:01:57 +0000 Manifest next update: Sat 07 Jun 2025 05:01:57 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: +p3lFHYumcwG0w4rwDn9GEGuPX7YQDOfXiYndyWOlBo=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: EfnXa4JTXRSQtpkoLm2l4ZqnMhuE0NVKwTVdEbOaaqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: May 31 05:01:57 2025 GMT Not After : Jun 7 05:01:57 2025 GMT Subject: CN=683a8d46-0a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:63:37:03:79:e2:4a:ca:b0:25:eb:9c:bf: 9b:b3:e2:93:11:e5:cd:05:71:7d:8c:e2:4e:b1:54: e6:0c:b2:c4:40:27:a0:02:42:5b:47:71:bd:3a:60: 05:20:70:57:26:af:a6:ac:c4:af:7b:cd:af:b8:b7: ec:3a:d9:61:95:13:52:f0:c1:37:ad:75:d5:18:2b: b3:75:45:c7:33:4d:04:f9:4b:fc:25:44:b2:0d:b9: 07:38:4a:95:8a:56:37:4b:29:d0:b9:f4:08:2e:b5: 5f:3d:6f:e2:65:2a:49:19:8e:f0:d5:ac:93:b4:d2: 3e:da:81:e9:79:81:92:6e:cd:36:0f:9b:23:21:ca: 1a:ac:08:3f:6e:68:a3:cc:be:c1:96:8a:6f:b2:2d: 50:2e:d6:3b:6e:f7:20:8f:bb:fe:ff:60:33:13:04: b3:ff:e7:0c:4b:18:88:dd:f5:14:b0:b1:42:ea:23: f6:87:72:58:d7:2a:f1:87:df:f0:34:ea:04:ba:48: ce:ff:37:ef:ce:de:26:c7:1f:03:e7:c9:33:10:58: c1:ae:71:12:c7:ef:7e:b4:10:bf:3e:43:a5:05:25: 1d:ef:7d:61:21:13:46:fd:24:b2:04:b6:c7:80:20: 7c:8d:97:39:6b:84:2a:5d:4c:2a:32:30:dd:a0:fb: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:46:DA:46:6F:F4:DE:F5:F1:89:04:29:23:65:96:73:91:54:17 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1a:0b:79:12:c2:bf:8e:2c:46:62:a4:a1:80:a1:ae:42:25: a1:77:bb:49:8a:b2:8a:9a:63:d8:8f:80:57:cb:e3:8a:67:25: b0:62:c5:43:8b:5f:9a:75:fa:9a:34:c0:c6:10:fa:fb:4b:7c: 6f:9d:a6:db:9c:81:44:d5:b7:91:b0:14:08:63:ea:7c:e8:7c: 6e:c0:e6:82:29:93:d8:40:53:0a:bd:33:e3:f3:55:0c:b6:13: fd:87:c2:0b:85:87:25:d1:12:30:ab:b2:e4:45:39:c6:b6:ea: b1:b1:f4:70:1a:08:15:b8:2d:bf:f5:77:a5:d5:2f:35:60:0f: 1d:ba:4a:91:36:5a:34:d4:3c:90:eb:68:54:ca:b9:af:71:72: a5:db:5e:c2:93:93:01:38:2c:10:ed:f0:ae:6e:70:63:a4:93: 10:57:7c:dd:49:8a:ad:d5:88:f8:74:10:36:8c:70:b8:0f:e8: 17:40:d9:fc:9d:2b:4a:e9:0e:f2:d4:3a:62:c3:08:91:7a:25: 5c:12:85:b0:4d:5a:63:8a:fc:f1:44:04:ea:74:79:1d:e1:e3: 7d:7f:c6:44:16:b7:80:db:34:41:27:ca:b5:1e:20:8d:d7:55: a4:64:5e:af:5b:6d:72:4d:ba:7c:bc:7c:84:e1:31:d5:d8:fe: 2f:72:2f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwNTMxMDUwMTU3WhcNMjUwNjA3MDUwMTU3WjAYMRYwFAYD VQQDEw02ODNhOGQ0Ni0wYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSxjNwN54krKsCXrnL+bs+KTEeXNBXF9jOJOsVTmDLLEQCegAkJbR3G9OmAF IHBXJq+mrMSve82vuLfsOtlhlRNS8ME3rXXVGCuzdUXHM00E+Uv8JUSyDbkHOEqV ilY3SynQufQILrVfPW/iZSpJGY7w1ayTtNI+2oHpeYGSbs02D5sjIcoarAg/bmij zL7Blopvsi1QLtY7bvcgj7v+/2AzEwSz/+cMSxiI3fUUsLFC6iP2h3JY1yrxh9/w NOoEukjO/zfvzt4mxx8D58kzEFjBrnESx+9+tBC/PkOlBSUd731hIRNG/SSyBLbH gCB8jZc5a4QqXUwqMjDdoPtAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvARtpG b/Te9fGJBCkjZZZzkVQXMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBGgt5EsK/jixGYqShgKGuQiWhd7tJirKKmmPYj4BXy+OKZyWwYsVD i1+adfqaNMDGEPr7S3xvnabbnIFE1beRsBQIY+p86HxuwOaCKZPYQFMKvTPj81UM thP9h8ILhYcl0RIwq7LkRTnGtuqxsfRwGggVuC2/9Xel1S81YA8dukqRNlo01DyQ 62hUyrmvcXKl217Ck5MBOCwQ7fCubnBjpJMQV3zdSYqt1Yj4dBA2jHC4D+gXQNn8 nStK6Q7y1DpiwwiReiVcEoWwTVpjivzxRATqdHkd4eN9f8ZEFreA2zRBJ8q1HiCN 11WkZF6vW21yTbp8vHyE4THV2P4vci/P -----END CERTIFICATE-----Generated at Sat May 31 16:33:04 2025 by rpki-client