$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: oHnQ5VfbqAg2wTrDOAynGytmbSkNGeCUtPuNE4So4Xk= Subject key identifier: A5:00:C4:02:26:29:F0:19:50:F3:B5:8D:C8:4E:1A:01:22:F6:FA:7A Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2314 Signing time: Sat 18 May 2024 16:09:13 +0000 Manifest this update: Sat 18 May 2024 16:09:12 +0000 Manifest next update: Sat 25 May 2024 16:09:12 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: wKQGjaGjaBLyXDmCKdehDKrHStQqcyjz2atIKBhV86A=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: p7YB9HGkxeDcNSJqEifaW0jnaufKeVcTIrM3iLVwivM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8996 (0x2324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: May 18 16:09:12 2024 GMT Not After : May 25 16:09:12 2024 GMT Subject: CN=6648d2a9-6ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:d7:56:b8:d4:98:17:32:13:c9:a6:87:9b: dd:5f:52:a6:38:77:81:7a:45:f6:fc:f3:a0:86:f3: 5f:2d:be:9f:f5:d2:d0:1d:c1:16:95:7e:63:eb:ad: 9b:87:4f:78:6e:39:33:2a:d2:ef:f5:6c:a9:9c:ef: 4e:f9:d0:27:04:53:8c:21:26:36:5a:69:51:0d:30: 22:4e:8d:d5:2c:89:2f:ee:8f:5f:b1:8d:2b:f5:8a: 1d:35:ea:ab:42:78:fe:e7:3d:1b:cc:e5:ef:0e:30: 88:79:9e:54:7f:4c:cb:70:6f:57:45:81:23:d1:a5: 75:1b:59:b0:a6:e4:b1:bb:3a:1d:4a:6b:2e:90:23: 1b:c6:c3:a8:96:f0:f6:0a:68:fc:c9:fd:35:44:5e: 43:d2:0f:c6:20:78:95:77:c7:3a:d6:7f:cb:f2:e0: c4:b0:ac:07:f3:f6:db:a9:75:54:72:87:a1:c8:2d: a7:ba:15:f5:f7:83:38:39:3f:22:0f:5e:54:80:88: 71:f7:b1:8e:db:ff:6b:05:ff:42:bd:67:05:ff:5c: b9:0e:08:3f:78:d3:d8:fb:c6:06:47:64:ed:7a:8d: 14:5d:2a:1e:33:d4:76:cc:55:9e:76:12:38:93:2e: 21:2e:a8:4d:e0:95:19:52:af:ed:8c:8a:91:26:d6: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:C4:02:26:29:F0:19:50:F3:B5:8D:C8:4E:1A:01:22:F6:FA:7A X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:26:2b:13:b9:d6:6e:bc:ff:f6:b8:07:01:8a:c0:d4:4a:db: 3c:7c:19:a5:d6:b8:34:f8:61:11:e4:36:3b:7b:fd:ea:d9:c6: 64:ad:86:be:a9:ab:38:81:e4:67:48:92:69:cf:53:96:9d:11: 02:39:6a:b9:e8:fb:00:39:19:06:05:d1:b6:22:b7:fc:af:43: 0d:61:0e:2a:7b:5a:fa:d3:94:8b:42:60:7a:50:eb:c7:c5:0c: d0:e1:8d:6c:38:be:05:fb:9a:cc:f6:a4:0e:9e:37:64:37:24: af:43:32:08:0b:24:79:f5:40:b1:41:77:d1:7e:3b:84:22:56: 68:8b:bd:97:43:74:7d:57:86:53:09:a5:64:b7:ed:02:c3:8d: 1d:db:0b:aa:4c:32:06:8d:6e:1d:6f:ad:cd:97:a1:2e:c3:02: e0:cd:89:e5:9b:a7:5e:29:c2:88:13:9a:e9:3f:f1:35:f8:b7: 37:4e:39:3f:8c:ab:83:90:6d:cb:0e:06:5e:0b:5a:16:25:a2: 8c:c6:76:74:87:1f:5d:63:88:8f:32:93:9a:27:47:3c:36:86: 64:65:9e:c4:ed:40:34:45:a5:de:19:53:43:8f:35:93:71:0d: f5:e2:66:51:08:b8:ba:2f:c8:9d:26:bf:18:5a:10:58:aa:fa: ba:1e:7c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjQwNTE4MTYwOTEyWhcNMjQwNTI1MTYwOTEyWjAYMRYwFAYD VQQDEw02NjQ4ZDJhOS02ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRPXVrjUmBcyE8mmh5vdX1KmOHeBekX2/POghvNfLb6f9dLQHcEWlX5j662b h094bjkzKtLv9WypnO9O+dAnBFOMISY2WmlRDTAiTo3VLIkv7o9fsY0r9YodNeqr Qnj+5z0bzOXvDjCIeZ5Uf0zLcG9XRYEj0aV1G1mwpuSxuzodSmsukCMbxsOolvD2 Cmj8yf01RF5D0g/GIHiVd8c61n/L8uDEsKwH8/bbqXVUcoehyC2nuhX194M4OT8i D15UgIhx97GO2/9rBf9CvWcF/1y5Dgg/eNPY+8YGR2Tteo0UXSoeM9R2zFWedhI4 ky4hLqhN4JUZUq/tjIqRJtaKyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUAxAIm KfAZUPO1jchOGgEi9vp6MB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClJisTudZuvP/2uAcBisDUSts8fBml1rg0+GER5DY7e/3q2cZkrYa+ qas4geRnSJJpz1OWnRECOWq56PsAORkGBdG2Irf8r0MNYQ4qe1r605SLQmB6UOvH xQzQ4Y1sOL4F+5rM9qQOnjdkNySvQzIICyR59UCxQXfRfjuEIlZoi72XQ3R9V4ZT CaVkt+0Cw40d2wuqTDIGjW4db63Nl6EuwwLgzYnlm6deKcKIE5rpP/E1+Lc3Tjk/ jKuDkG3LDgZeC1oWJaKMxnZ0hx9dY4iPMpOaJ0c8NoZkZZ7E7UA0RaXeGVNDjzWT cQ314mZRCLi6L8idJr8YWhBYqvq6Hnzl -----END CERTIFICATE-----Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org