$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: +UbfSAEOsgOfWG989EmbUeDgjTE0dDE1E7i4J+ctRT4= Subject key identifier: 6D:9A:7E:CF:6B:4F:6F:76:62:8C:BB:32:A5:BE:B0:9D:BC:51:72:47 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 231D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 230D Signing time: Sat 04 May 2024 16:12:08 +0000 Manifest this update: Sat 04 May 2024 16:12:08 +0000 Manifest next update: Sat 11 May 2024 16:12:08 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: GDg1KgoWlwHE3raWwXOUmhkeFLGVbbd32CpNixksx7Y=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: p7YB9HGkxeDcNSJqEifaW0jnaufKeVcTIrM3iLVwivM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8989 (0x231d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: May 4 16:12:08 2024 GMT Not After : May 11 16:12:08 2024 GMT Subject: CN=66365e58-ad5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:40:d4:c0:b5:d5:bc:d6:cf:bf:4e:fc:84: 34:62:b6:70:21:2d:6a:1a:9b:67:c7:b3:f6:7c:08: ca:ed:c9:20:42:5d:7e:99:e1:23:c0:c7:ee:d6:74: ac:5f:b5:13:a1:39:5b:9c:6e:41:a2:65:20:2c:9c: 35:ac:ea:db:27:98:0d:bc:15:b6:2e:74:a6:60:0d: f9:73:40:98:80:4d:cd:5b:e5:e1:23:11:ae:61:2e: 8f:12:84:e4:76:e6:58:e8:d0:cb:65:24:d8:db:25: 5a:7f:38:5e:91:ab:af:f2:b6:13:db:b8:aa:5b:7e: 9a:64:ea:38:a2:19:6f:28:11:48:a1:c2:1b:d1:ff: 89:22:fb:c6:f3:fd:f1:5c:d9:aa:84:5d:36:35:2d: 29:1a:fa:93:f4:9e:cf:31:e3:f8:1d:5b:15:22:cd: 40:67:8b:f8:c4:5a:32:a6:d7:8b:b1:90:a6:fa:92: 4c:08:1b:b1:60:d2:8a:95:39:9f:6c:fd:68:d8:cc: 90:05:48:0e:a7:91:f6:0f:8b:ab:94:d0:ec:b8:11: 32:ac:ef:ba:79:62:ca:88:06:b5:2f:f7:74:4b:7f: 14:a2:64:e2:aa:91:eb:9e:6b:b7:46:62:c3:d5:0e: 8c:4d:f1:3b:89:1a:fe:8e:b2:25:17:56:8e:5d:f1: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9A:7E:CF:6B:4F:6F:76:62:8C:BB:32:A5:BE:B0:9D:BC:51:72:47 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c1:d0:93:87:b7:7b:07:81:6f:1c:0c:81:62:a1:ca:f9:8d: ab:a0:a1:71:e5:ee:6b:19:2b:2f:aa:76:8b:84:2f:29:37:2b: fb:0b:71:98:3d:3f:fe:c9:7a:57:69:3f:18:cd:81:2d:aa:8a: f5:c0:cc:7a:66:f2:1b:75:07:a0:9d:61:7f:08:5a:7d:8b:06: 16:7c:5d:1d:b1:59:74:3b:7b:52:6b:c7:13:d6:36:d6:83:25: e9:55:7e:57:0a:70:96:4b:ae:98:f8:17:f3:f9:b8:e0:08:b0: c4:8a:4a:cd:bf:20:cc:8a:de:8a:e9:bb:dc:d3:ca:7c:97:21: 59:51:09:0a:2a:97:14:78:00:49:05:31:40:a2:35:ea:0f:ac: 80:53:ed:39:11:32:89:5e:77:78:7d:6a:4a:2c:31:2f:9c:f7: 67:27:3a:14:f8:ad:d5:6a:b7:d3:51:69:f0:5b:0a:13:2e:f2: eb:73:b8:1c:09:b0:a7:b6:6a:fe:62:88:72:0e:cf:ab:0c:82: 8a:3c:2a:10:de:f1:92:d1:0e:71:ba:3a:cc:1d:7e:4c:d5:55: 52:d2:ff:27:44:71:ca:ca:98:35:91:62:d8:ef:db:15:df:4c: 26:9e:db:60:01:ba:9d:15:b3:50:04:61:0a:cb:a6:a9:de:a5: e1:e2:76:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjQwNTA0MTYxMjA4WhcNMjQwNTExMTYxMjA4WjAYMRYwFAYD VQQDEw02NjM2NWU1OC1hZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KxA1MC11bzWz79O/IQ0YrZwIS1qGptnx7P2fAjK7ckgQl1+meEjwMfu1nSs X7UToTlbnG5BomUgLJw1rOrbJ5gNvBW2LnSmYA35c0CYgE3NW+XhIxGuYS6PEoTk duZY6NDLZSTY2yVafzhekauv8rYT27iqW36aZOo4ohlvKBFIocIb0f+JIvvG8/3x XNmqhF02NS0pGvqT9J7PMeP4HVsVIs1AZ4v4xFoypteLsZCm+pJMCBuxYNKKlTmf bP1o2MyQBUgOp5H2D4urlNDsuBEyrO+6eWLKiAa1L/d0S38UomTiqpHrnmu3RmLD 1Q6MTfE7iRr+jrIlF1aOXfEA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2afs9r T292Yoy7MqW+sJ28UXJHMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKwdCTh7d7B4FvHAyBYqHK+Y2roKFx5e5rGSsvqnaLhC8pNyv7C3GY PT/+yXpXaT8YzYEtqor1wMx6ZvIbdQegnWF/CFp9iwYWfF0dsVl0O3tSa8cT1jbW gyXpVX5XCnCWS66Y+Bfz+bjgCLDEikrNvyDMit6K6bvc08p8lyFZUQkKKpcUeABJ BTFAojXqD6yAU+05ETKJXnd4fWpKLDEvnPdnJzoU+K3VarfTUWnwWwoTLvLrc7gc CbCntmr+YohyDs+rDIKKPCoQ3vGS0Q5xujrMHX5M1VVS0v8nRHHKypg1kWLY79sV 30wmnttgAbqdFbNQBGEKy6ap3qXh4nYi -----END CERTIFICATE-----Generated at Sat May 4 16:48:39 2024 by rpki-client on console-ams.rpki-client.org