$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: n9Db1iff5o4sT0wIaJtnnRRARIp4kSBVP+i8Rs6GZLM= Subject key identifier: 7B:3C:C7:26:5C:81:72:96:63:1F:DA:44:82:1B:AD:DE:94:CD:48:F6 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 69 Signing time: Sun 19 May 2024 08:20:05 +0000 Manifest this update: Sun 19 May 2024 08:20:04 +0000 Manifest next update: Sun 26 May 2024 08:20:04 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: fXaKru1/ewHWFxplfexiDQ5sFHNwWhjtd+2yrdA4Qf4=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: U8q3bhBl7h+tpQnyqBX5gAZWqGeJKUO/ZwPDy0dtvAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: May 19 08:20:04 2024 GMT Not After : May 26 08:20:04 2024 GMT Subject: CN=6649b635-129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:d0:79:7b:12:50:7f:2e:f6:ca:21:26:94: 70:f4:db:3e:3a:63:14:e9:67:6c:a2:59:fa:85:24: d4:1f:db:0c:9c:a1:a0:ae:96:7e:63:db:2c:68:07: 43:44:d3:da:84:09:c2:03:ad:38:6b:3c:8f:62:de: 25:16:19:96:6e:54:17:66:40:58:4d:59:8d:0b:1c: 68:4e:be:8d:e6:7d:ad:55:0b:6b:ca:a5:f4:5b:97: 34:fb:de:9d:a3:57:1b:e8:c3:ca:73:a3:4b:41:5d: 02:eb:74:06:7e:bd:65:06:a5:41:8e:91:0f:e8:13: ca:c9:01:d7:99:82:5d:82:71:c3:90:c1:32:06:0e: d4:45:ac:4f:39:d6:7c:2d:be:0d:0a:6e:08:a4:24: dd:26:d8:ef:a3:8a:d4:18:66:a0:ae:98:9d:88:94: 73:b7:a8:1d:d8:06:40:8a:9f:af:cb:65:5f:4f:64: 36:69:c7:d1:4b:55:4e:4f:6d:74:92:c1:13:e0:ed: 50:b2:25:1d:60:a8:c0:2a:05:87:2c:2f:61:2a:fa: f5:40:a5:b1:52:f5:98:bf:00:5d:fa:33:74:3f:a9: 2f:93:ae:27:6e:a9:35:72:2c:77:24:a6:16:5e:c0: 1a:a3:c9:82:03:f5:7f:c2:90:3a:53:c7:a8:42:fc: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3C:C7:26:5C:81:72:96:63:1F:DA:44:82:1B:AD:DE:94:CD:48:F6 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:c7:41:52:1d:97:f7:30:93:a9:d1:f1:f3:6e:af:e8:f7: 4d:50:16:9a:55:9f:f9:76:4e:c9:19:77:7c:99:35:1d:61:ca: 7e:6d:5a:4b:21:40:3d:36:5b:0b:91:9d:50:05:f1:52:37:7d: 3e:45:a8:b1:96:91:d5:07:f0:3d:35:c7:78:b8:85:c3:07:74: 83:e9:4f:5b:34:77:51:07:5a:fb:b2:77:5f:b6:a4:65:e4:f3: 8e:e9:3e:98:98:d4:c4:28:bd:a3:10:0c:39:83:fe:78:f5:da: 66:94:9b:51:46:aa:9e:a3:7d:4d:87:bc:a0:27:95:c0:94:ff: 94:a2:b3:de:1f:0f:4a:60:49:84:a4:b2:55:2c:eb:c9:fa:e3: 58:89:72:9c:ba:ea:9e:e2:20:6a:48:51:6b:d8:3c:65:49:00: cc:c5:27:be:ef:bd:1e:e0:94:d1:55:57:0d:aa:b0:b5:ec:62: 84:15:71:44:5c:a2:ff:4b:56:70:a7:30:66:97:6a:43:cf:93: 91:3e:e4:3a:fd:d5:6b:0d:2f:36:6d:6d:e3:cd:e6:c3:21:e1: c4:a5:55:2f:c3:68:64:70:b1:ce:4e:c3:2b:9c:6c:ac:82:ba: 57:0a:c5:1b:bd:61:67:65:e6:4b:ec:ad:18:6f:f4:f2:31:a2: 25:93:ef:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTUwMDExMC8GA1UEBRMoQjlDQTc5RkI2ODVDMkVGRjNGQjlDQ0I5Q0QyRDg0ODEx NjkwOEEzMjAeFw0yNDA1MTkwODIwMDRaFw0yNDA1MjYwODIwMDRaMBgxFjAUBgNV BAMTDTY2NDliNjM1LTEyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWbdB5exJQfy72yiEmlHD02z46YxTpZ2yiWfqFJNQf2wycoaCuln5j2yxoB0NE 09qECcIDrThrPI9i3iUWGZZuVBdmQFhNWY0LHGhOvo3mfa1VC2vKpfRblzT73p2j Vxvow8pzo0tBXQLrdAZ+vWUGpUGOkQ/oE8rJAdeZgl2CccOQwTIGDtRFrE851nwt vg0KbgikJN0m2O+jitQYZqCumJ2IlHO3qB3YBkCKn6/LZV9PZDZpx9FLVU5PbXSS wRPg7VCyJR1gqMAqBYcsL2Eq+vVApbFS9Zi/AF36M3Q/qS+TriduqTVyLHckphZe wBqjyYID9X/CkDpTx6hC/N5pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUezzHJlyB cpZjH9pEghut3pTNSPYwHwYDVR0jBBgwFoAUucp5+2hcLv8/ucy5zS2EgRaQijIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFNTAwLzNGRkY1QzNFQzcy RDExRUU5QzdDMzUxREM0RjlBRTAyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdWNwNS0yaGNMdjhfdWN5NXpTMkVnUmFRaWpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF NTAwLzNGRkY1QzNFQzcyRDExRUU5QzdDMzUxREM0RjlBRTAyL3VjcDUtMmhjTHY4 X3VjeTV6UzJFZ1JhUWlqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHf1x0FSHZf3MJOp0fHzbq/o901QFppVn/l2TskZd3yZNR1hyn5tWksh QD02WwuRnVAF8VI3fT5FqLGWkdUH8D01x3i4hcMHdIPpT1s0d1EHWvuyd1+2pGXk 847pPpiY1MQovaMQDDmD/nj12maUm1FGqp6jfU2HvKAnlcCU/5Sis94fD0pgSYSk slUs68n641iJcpy66p7iIGpIUWvYPGVJAMzFJ77vvR7glNFVVw2qsLXsYoQVcURc ov9LVnCnMGaXakPPk5E+5Dr91WsNLzZtbePN5sMh4cSlVS/DaGRwsc5OwyucbKyC ulcKxRu9YWdl5kvsrRhv9PIxoiWT720= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org