$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: RGCw3lPwHK91z5Tuq1cc4ZuVVAqjuuZOiDM8nRuo+aU= Subject key identifier: FD:DA:D5:33:A4:96:D9:45:01:C8:A0:91:35:9C:F1:3C:44:B5:31:50 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2374 Signing time: Fri 22 Nov 2024 15:49:53 +0000 Manifest this update: Fri 22 Nov 2024 15:49:53 +0000 Manifest next update: Fri 29 Nov 2024 15:49:53 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: 8n0yHwi2ZajkK24yiPJJoUrhVPOa6fqTFO3U2JLWvYc=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: p7YB9HGkxeDcNSJqEifaW0jnaufKeVcTIrM3iLVwivM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9092 (0x2384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Nov 22 15:49:53 2024 GMT Not After : Nov 29 15:49:53 2024 GMT Subject: CN=6740a821-b4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:68:e5:39:ab:c7:51:a2:e7:c0:ee:71:40: 21:58:81:9e:80:bc:5f:8b:b2:b3:e9:20:8f:11:54: 8c:4d:65:94:46:14:74:71:55:28:04:23:12:97:66: c4:f9:03:11:f8:c3:06:cf:f0:3d:43:77:80:a6:3c: 2d:af:31:91:96:42:bd:c6:9e:e9:4c:71:57:c2:fa: e6:22:0e:4f:b2:b1:94:65:c8:eb:2f:8b:b0:9a:89: c3:49:ee:7c:2f:fe:48:f7:10:61:10:8f:33:24:4e: 0b:24:52:13:54:f1:3a:2c:1f:02:74:25:2e:07:b0: 2d:c2:97:61:5c:a7:f5:8e:3a:db:d0:05:b2:fd:fc: 99:9c:2e:e7:2c:f0:54:6e:50:4f:a1:dd:f7:14:7b: c0:ec:85:4a:b4:5d:f5:78:71:bc:a0:b7:68:c1:73: 3f:57:bb:67:35:e0:9f:b0:b1:30:a4:d3:4b:ea:b6: 34:ed:33:04:fe:0a:e1:8c:a8:a0:1b:8e:c8:20:cf: 63:03:00:fb:12:23:fe:3f:ce:68:fd:5b:29:c4:1b: 6f:b4:c3:58:e5:7c:ed:68:6e:d8:64:43:33:81:38: ef:a3:c4:5b:cc:af:a8:3b:58:28:c2:1b:98:a9:74: c4:96:2a:b2:54:e5:82:97:59:73:f1:fe:5f:1b:c6: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DA:D5:33:A4:96:D9:45:01:C8:A0:91:35:9C:F1:3C:44:B5:31:50 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:52:07:70:e3:cc:c5:8a:01:1c:b5:d8:41:dc:08:f9:fd:a9: ea:d9:41:e4:76:10:2c:36:72:cb:be:e0:71:b0:40:06:4e:72: 8e:e0:92:85:98:18:af:4c:2a:db:d3:37:17:b7:64:a2:8a:3a: a2:10:eb:1f:64:aa:28:ec:0b:bf:96:5b:0a:69:97:a6:52:2b: 26:13:df:c5:d6:49:09:b9:eb:03:e3:33:55:15:41:70:70:34: 24:8a:c0:4d:b3:5b:5a:11:9c:c1:60:39:da:e3:09:83:a3:1b: 61:14:8f:28:04:e8:57:b4:60:59:8a:da:9a:82:01:fd:11:32: be:88:64:87:e8:69:be:9e:02:f7:96:a7:77:51:72:f2:cf:47: 54:8d:61:f0:06:a5:86:a9:31:45:e9:f6:cb:df:c0:c9:fd:ec: 73:47:6a:16:94:28:fa:71:1b:55:b8:67:bb:0f:33:38:0f:10: ee:4a:91:d3:2b:54:d6:f7:04:c9:1b:4e:cc:6e:37:17:a5:f7: e8:42:3b:c4:be:40:e5:a5:ae:88:af:2a:97:b3:d5:76:0d:b6: 7c:44:46:64:c1:3d:9f:4c:f1:1f:6a:0f:9f:90:1e:61:b3:6a: 0d:90:45:50:b2:9c:bf:32:65:d7:47:e7:c5:84:03:00:16:44: fd:e5:da:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjQxMTIyMTU0OTUzWhcNMjQxMTI5MTU0OTUzWjAYMRYwFAYD VQQDEw02NzQwYTgyMS1iNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Bo5Tmrx1Gi58DucUAhWIGegLxfi7Kz6SCPEVSMTWWURhR0cVUoBCMSl2bE +QMR+MMGz/A9Q3eApjwtrzGRlkK9xp7pTHFXwvrmIg5PsrGUZcjrL4uwmonDSe58 L/5I9xBhEI8zJE4LJFITVPE6LB8CdCUuB7AtwpdhXKf1jjrb0AWy/fyZnC7nLPBU blBPod33FHvA7IVKtF31eHG8oLdowXM/V7tnNeCfsLEwpNNL6rY07TME/grhjKig G47IIM9jAwD7EiP+P85o/VspxBtvtMNY5XztaG7YZEMzgTjvo8RbzK+oO1gowhuY qXTEliqyVOWCl1lz8f5fG8awyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3a1TOk ltlFAcigkTWc8TxEtTFQMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsUgdw48zFigEctdhB3Aj5/anq2UHkdhAsNnLLvuBxsEAGTnKO4JKF mBivTCrb0zcXt2SiijqiEOsfZKoo7Au/llsKaZemUismE9/F1kkJuesD4zNVFUFw cDQkisBNs1taEZzBYDna4wmDoxthFI8oBOhXtGBZitqaggH9ETK+iGSH6Gm+ngL3 lqd3UXLyz0dUjWHwBqWGqTFF6fbL38DJ/exzR2oWlCj6cRtVuGe7DzM4DxDuSpHT K1TW9wTJG07MbjcXpffoQjvEvkDlpa6IryqXs9V2DbZ8REZkwT2fTPEfag+fkB5h s2oNkEVQspy/MmXXR+fFhAMAFkT95dq2 -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org