$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: OJ6WAQjXl3XkgCmKJICqc8OAktx5kpj1FP1b6ndvHps= Subject key identifier: 3D:9D:69:C7:0D:AC:71:DD:7E:E4:B3:F7:C0:1C:9E:32:70:F2:2F:B6 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: 21 Signing time: Wed 15 May 2024 08:43:31 +0000 Manifest this update: Wed 15 May 2024 08:43:31 +0000 Manifest next update: Wed 22 May 2024 08:43:31 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: 4t7akUoilj7y0hg1fjxRxC7GhELzh7zmmytg6F9frpQ=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: CQEL5kj4k2y2pQ/JT3F7+awUDx+X++2oXAreZHP5rt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: May 15 08:43:31 2024 GMT Not After : May 22 08:43:31 2024 GMT Subject: CN=664475b3-09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:05:86:d2:e0:f9:55:e9:c9:51:a6:0f:7c: 9b:49:56:d2:4c:51:9f:3a:36:b0:5f:2b:fc:6d:93: d3:a8:a9:3a:24:d9:f6:c4:1c:62:0b:45:57:d0:74: 13:e3:eb:28:88:87:90:ad:b5:cc:80:5f:a4:5d:a4: ba:5c:08:94:3a:ae:2a:0b:41:a4:39:cf:db:f3:f0: 71:d7:5b:5c:b1:09:d7:c4:38:7e:fd:a8:ef:a5:fc: 7a:6b:f0:04:32:e6:d2:ca:9b:6b:be:ea:fc:15:91: 4c:70:d7:eb:bf:60:6a:48:64:1a:5e:90:33:b3:1b: e9:b3:45:f5:54:53:fa:58:43:5d:1a:0a:03:2d:b6: 27:35:b3:5c:40:9f:47:44:38:53:a0:9e:f2:ee:25: b1:d5:d2:2a:3a:72:71:e9:cb:8d:85:16:23:bd:77: 81:95:d6:b5:ab:60:05:ec:69:52:2b:f6:e6:d7:4a: 4d:98:27:fa:ee:b1:ea:76:9f:35:4c:21:6d:ee:e9: 95:65:24:91:69:a5:3c:a3:f4:1d:9d:71:1a:18:46: 39:f5:99:ae:b7:57:98:de:20:c7:f5:23:bd:e3:83: 46:29:01:e9:77:61:bd:6a:87:ed:95:f9:36:2a:00: 08:62:17:b2:f1:66:85:3e:7b:c5:38:ed:bc:00:be: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9D:69:C7:0D:AC:71:DD:7E:E4:B3:F7:C0:1C:9E:32:70:F2:2F:B6 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:d5:66:d0:52:1e:4c:1b:a7:8a:86:d7:b1:8d:a7:12:c3: 84:e9:16:00:67:a5:b2:db:82:4f:4c:46:87:4c:7f:0c:ed:6d: c4:96:20:11:53:3a:bd:3b:8d:e3:42:b7:77:ee:f1:87:f2:bf: 7c:50:f9:e1:6a:32:a3:b7:ae:24:b6:ba:05:23:a4:6e:90:a4: 4d:75:52:5b:33:15:c5:f2:8c:11:98:e6:72:76:f1:70:b6:33: 7c:99:aa:90:3a:53:5d:06:f8:3c:5b:dc:35:c4:c9:c6:80:17: 3d:cc:69:89:7c:de:f1:6a:74:fa:4c:dc:27:3b:09:7b:d0:0b: a1:cc:f1:82:05:33:f2:b4:86:6b:0a:76:d6:ee:b8:e4:67:20: 78:0a:78:af:79:f5:27:e1:05:ac:f9:0c:43:31:53:bd:b3:99: 8a:37:b7:5b:47:f9:81:b5:9c:1a:5a:34:04:ed:27:1b:61:5b: 05:0a:47:bc:d5:2b:41:bb:a9:7e:79:c8:7b:4f:ed:f8:73:07: 7e:da:02:c5:67:ee:69:3b:92:9f:87:94:5c:a8:bc:2d:45:d7: 82:53:dc:e1:c9:b9:dc:f5:6e:c8:7e:b9:dd:0c:c3:4f:6c:79: 6e:ae:52:b3:80:2a:0a:32:c4:70:7f:5c:52:09:c8:16:4a:92: 66:55:4b:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjRDRDExMC8GA1UEBRMoQjAyMzk2QzFFNDk3NkRDMjRCQjlGMjQwRjVDRTU1NkVE ODI3RkEyQjAeFw0yNDA1MTUwODQzMzFaFw0yNDA1MjIwODQzMzFaMBgxFjAUBgNV BAMTDTY2NDQ3NWIzLTA5YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAUAWG0uD5VenJUaYPfJtJVtJMUZ86NrBfK/xtk9OoqTok2fbEHGILRVfQdBPj 6yiIh5CttcyAX6RdpLpcCJQ6rioLQaQ5z9vz8HHXW1yxCdfEOH79qO+l/Hpr8AQy 5tLKm2u+6vwVkUxw1+u/YGpIZBpekDOzG+mzRfVUU/pYQ10aCgMttic1s1xAn0dE OFOgnvLuJbHV0io6cnHpy42FFiO9d4GV1rWrYAXsaVIr9ubXSk2YJ/rusep2nzVM IW3u6ZVlJJFppTyj9B2dcRoYRjn1ma63V5jeIMf1I73jg0YpAel3Yb1qh+2V+TYq AAhiF7LxZoU+e8U47bwAvtW5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPZ1pxw2s cd1+5LP3wByeMnDyL7YwHwYDVR0jBBgwFoAUsCOWweSXbcJLufJA9c5Vbtgn+isw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNENEL0I5N0I3NjM4RTAy RDExRUU5QTA0MkY1Q0M0RjlBRTAyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1p cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NPV3dlU1hiY0pMdWZKQTljNVZidGduLWlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy NENEL0I5N0I3NjM4RTAyRDExRUU5QTA0MkY1Q0M0RjlBRTAyL3NDT1d3ZVNYYmNK THVmSkE5YzVWYnRnbi1pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAB1WbQUh5MG6eKhtexjacSw4TpFgBnpbLbgk9MRodMfwztbcSWIBFT Or07jeNCt3fu8Yfyv3xQ+eFqMqO3riS2ugUjpG6QpE11UlszFcXyjBGY5nJ28XC2 M3yZqpA6U10G+Dxb3DXEycaAFz3MaYl83vFqdPpM3Cc7CXvQC6HM8YIFM/K0hmsK dtbuuORnIHgKeK959SfhBaz5DEMxU72zmYo3t1tH+YG1nBpaNATtJxthWwUKR7zV K0G7qX55yHtP7fhzB37aAsVn7mk7kp+HlFyovC1F14JT3OHJudz1bsh+ud0Mw09s eW6uUrOAKgoyxHB/XFIJyBZKkmZVS6E= -----END CERTIFICATE-----Generated at Wed May 15 09:27:27 2024 by rpki-client on console-fra.rpki-client.org