$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: SyPZKxTEq1KaAs6sS9B8+W9SRgumbaQErGpLoBHOMUs= Subject key identifier: E1:F5:A3:2A:FD:F3:2E:AF:3E:B6:1A:42:3F:59:88:A9:9A:E8:A4:CF Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 67 Signing time: Fri 17 May 2024 08:28:54 +0000 Manifest this update: Fri 17 May 2024 08:28:54 +0000 Manifest next update: Fri 24 May 2024 08:28:54 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: cD2GJyBZsqGAZlWf4OaVpL+HAtkmf7+M0fs6LZk5Pi0=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: U8q3bhBl7h+tpQnyqBX5gAZWqGeJKUO/ZwPDy0dtvAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: May 17 08:28:54 2024 GMT Not After : May 24 08:28:54 2024 GMT Subject: CN=66471546-d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:ab:34:e7:96:80:f9:e6:7b:ed:ad:d2:4f: 24:c9:9f:ec:c8:d4:71:9e:dc:96:11:40:6f:d7:b4: 97:d2:7a:c5:4c:73:d1:02:d5:5f:87:ae:7b:1d:52: 4d:18:e5:4d:f6:90:1d:93:00:3d:0a:5f:8b:a7:dc: 42:dc:58:da:cc:de:59:62:fe:b3:42:69:11:58:96: bb:68:a1:45:04:93:6c:a0:f0:be:bf:25:cb:63:f6: 76:bb:ab:a1:e1:bc:0b:fb:fe:45:54:8c:94:73:d2: 94:d9:09:2e:6d:94:09:40:fe:ad:52:51:9d:2f:92: b7:2f:c9:57:e8:31:c7:51:0b:2e:bb:f8:ee:88:4d: ab:7c:6b:36:5c:07:46:db:5b:77:73:c3:2f:25:3f: ed:09:f8:88:59:e5:fc:b0:c3:ec:f9:71:32:5c:ab: 93:f9:2e:2b:0d:a9:87:3f:dc:04:c2:01:89:86:de: 20:bb:a2:48:52:f3:eb:5e:b2:9b:c7:ed:40:ef:11: df:5e:87:7b:d9:b9:b6:31:c0:bc:47:e4:89:4f:d9: 95:ae:3f:00:e9:6d:40:7b:27:c2:19:e3:42:56:c5: 57:c4:b5:5f:5a:f0:f5:97:60:9f:22:5d:a9:d0:7d: cd:39:09:5b:f6:d6:8f:14:dc:35:f2:05:18:b9:34: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:A3:2A:FD:F3:2E:AF:3E:B6:1A:42:3F:59:88:A9:9A:E8:A4:CF X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5a:97:81:be:01:8f:4e:02:21:84:6b:57:e6:c8:16:97:8d: 96:ee:cf:c8:88:7c:a1:8d:8c:ea:4d:10:bd:c0:22:17:9c:89: 3a:cb:a2:db:cc:8d:19:6f:3a:4a:9f:3d:c6:57:64:3c:83:2a: 02:3a:b9:89:1c:64:b4:27:3a:e4:e8:51:25:fb:32:9e:b9:51: 0b:61:61:37:b8:36:1e:a0:47:e1:07:c1:b3:25:93:34:20:8c: 4c:41:23:9e:93:24:16:50:a7:6c:0e:a6:d7:67:f7:2f:73:f8: a2:c8:1a:76:01:69:97:bc:43:67:22:a3:57:1c:bc:9a:ab:6c: 9b:62:09:f0:f0:ec:20:d6:24:87:f9:3c:94:4e:a1:e3:61:48: 0d:d8:50:57:bd:1f:8d:22:f2:fa:f2:6f:ad:6d:0f:a7:da:82: 33:7f:76:e8:68:61:d5:a7:d5:cb:f0:3f:58:37:05:2b:9e:b1: 66:33:5a:13:b6:91:7f:a9:0e:68:f8:1e:00:6a:12:f3:93:8b: 72:54:f0:b7:08:2c:98:94:55:9f:c6:4a:73:76:ec:8b:71:86: bb:ec:5c:81:88:4c:bf:36:92:37:7e:1e:6f:a1:88:3b:27:73: 51:04:cd:9b:aa:17:20:2c:58:05:e9:80:31:f5:46:0b:85:bf: e2:a4:e9:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTUwMDExMC8GA1UEBRMoQjlDQTc5RkI2ODVDMkVGRjNGQjlDQ0I5Q0QyRDg0ODEx NjkwOEEzMjAeFw0yNDA1MTcwODI4NTRaFw0yNDA1MjQwODI4NTRaMBgxFjAUBgNV BAMTDTY2NDcxNTQ2LWQxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa16s055aA+eZ77a3STyTJn+zI1HGe3JYRQG/XtJfSesVMc9EC1V+HrnsdUk0Y 5U32kB2TAD0KX4un3ELcWNrM3lli/rNCaRFYlrtooUUEk2yg8L6/Jctj9na7q6Hh vAv7/kVUjJRz0pTZCS5tlAlA/q1SUZ0vkrcvyVfoMcdRCy67+O6ITat8azZcB0bb W3dzwy8lP+0J+IhZ5fyww+z5cTJcq5P5LisNqYc/3ATCAYmG3iC7okhS8+tespvH 7UDvEd9eh3vZubYxwLxH5IlP2ZWuPwDpbUB7J8IZ40JWxVfEtV9a8PWXYJ8iXanQ fc05CVv21o8U3DXyBRi5NG0bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4fWjKv3z Lq8+thpCP1mIqZropM8wHwYDVR0jBBgwFoAUucp5+2hcLv8/ucy5zS2EgRaQijIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFNTAwLzNGRkY1QzNFQzcy RDExRUU5QzdDMzUxREM0RjlBRTAyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdWNwNS0yaGNMdjhfdWN5NXpTMkVnUmFRaWpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF NTAwLzNGRkY1QzNFQzcyRDExRUU5QzdDMzUxREM0RjlBRTAyL3VjcDUtMmhjTHY4 X3VjeTV6UzJFZ1JhUWlqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9al4G+AY9OAiGEa1fmyBaXjZbuz8iIfKGNjOpNEL3AIheciTrLotvM jRlvOkqfPcZXZDyDKgI6uYkcZLQnOuToUSX7Mp65UQthYTe4Nh6gR+EHwbMlkzQg jExBI56TJBZQp2wOptdn9y9z+KLIGnYBaZe8Q2cio1ccvJqrbJtiCfDw7CDWJIf5 PJROoeNhSA3YUFe9H40i8vryb61tD6fagjN/duhoYdWn1cvwP1g3BSuesWYzWhO2 kX+pDmj4HgBqEvOTi3JU8LcILJiUVZ/GSnN27ItxhrvsXIGITL82kjd+Hm+hiDsn c1EEzZuqFyAsWAXpgDH1RguFv+Kk6VY= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org