$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft File: ucp5-2hcLv8_ucy5zS2EgRaQijI.mft (raw, json) Hash identifier: 51bFxZhUGk0dfTPMtRmKA21x4zYHsPYkJNdLXRrWWXQ= Subject key identifier: E8:F3:74:A1:48:E8:48:3D:49:32:15:4F:81:AD:C4:E4:B3:34:19:B6 Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft Manifest number: 0125 Signing time: Thu 21 Nov 2024 04:34:35 +0000 Manifest this update: Thu 21 Nov 2024 04:34:34 +0000 Manifest next update: Thu 28 Nov 2024 04:34:34 +0000 Files and hashes: 1: ucp5-2hcLv8_ucy5zS2EgRaQijI.crl (hash: PzwUUed7pgun6mjrDsyNsprSdsVH8v0be2AA7rmZXbI=) 2: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (hash: U8q3bhBl7h+tpQnyqBX5gAZWqGeJKUO/ZwPDy0dtvAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32 Validity Not Before: Nov 21 04:34:34 2024 GMT Not After : Nov 28 04:34:34 2024 GMT Subject: CN=673eb85b-3355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:1c:60:20:f1:fc:d6:66:0f:c1:14:16:51: 70:dd:ad:f7:f9:46:0b:00:aa:5f:ce:46:82:d1:5b: f7:cd:d2:89:89:64:94:0c:9d:b1:7c:13:d8:20:17: ac:4b:6f:69:12:f9:c2:b6:b6:cd:40:94:3b:03:77: 3e:3d:bf:e9:fc:87:1a:a2:ab:c4:75:38:77:ec:a2: 68:30:51:55:a6:88:92:f6:50:f0:ba:cf:fd:72:d7: e6:9a:84:be:d4:35:5d:ae:64:4e:50:74:b3:42:27: ca:c8:69:d5:32:b4:3d:13:19:eb:79:57:12:70:a0: 31:b8:cb:f4:2d:0c:42:16:0f:3a:3d:aa:87:e2:4f: c5:39:d7:02:62:ce:07:90:61:51:9e:6c:14:d2:f2: 3b:cb:7b:28:61:e4:ae:0c:89:68:b5:1e:d1:78:4a: 95:8e:91:59:77:de:29:28:77:5f:b9:b8:61:9f:2c: 30:b1:eb:73:fb:34:ee:8b:a6:34:9f:d1:f4:a5:d4: 15:79:17:5a:e7:70:ff:ee:32:14:0b:48:72:de:9e: e3:4f:c0:81:ac:32:26:fd:28:b3:23:c9:88:dc:3b: 57:f7:6c:cc:fb:3d:df:1f:69:08:dd:d0:b1:99:42: c0:b4:23:dc:bb:c0:ac:66:99:79:af:ad:02:25:a4: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:74:A1:48:E8:48:3D:49:32:15:4F:81:AD:C4:E4:B3:34:19:B6 X509v3 Authority Key Identifier: keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:35:24:2c:4c:a8:45:73:37:fe:6a:55:d9:64:5f:78:4b:1e: b6:41:b6:c9:2f:c7:4e:61:af:87:c7:8e:0f:52:53:76:90:38: dd:9a:c0:38:6d:e9:84:24:bf:d4:7f:fe:4c:a2:95:de:79:9d: 8f:d3:d1:a8:e0:78:a0:09:c8:00:b9:d4:9f:93:5b:4b:2d:9f: 1a:7b:be:0a:cc:62:30:5f:53:52:a9:69:06:75:2f:ed:59:22: 8b:3f:08:4e:5d:a4:7a:be:92:3a:9e:81:48:e0:5b:cc:16:34: b6:8c:2b:40:d9:b3:b6:0a:1b:38:43:94:f9:fe:42:11:91:c0: 3e:58:8b:29:8d:ba:9a:7e:fa:3b:6a:b9:a6:7f:62:0a:ca:c4: 24:c0:f9:a9:cc:43:5a:fe:2a:cc:a9:8a:d8:8b:1f:06:0c:12: 7d:79:d1:f4:d2:da:43:f6:54:a2:0d:14:61:fa:2b:56:ed:3d: 85:5a:c1:a1:aa:55:f0:62:2b:df:64:68:61:77:a8:92:46:0e: d1:23:64:6a:03:82:1e:73:f6:a2:0e:4c:fe:f5:2d:4a:1c:50: b7:86:85:59:5b:8b:1e:87:fc:2c:27:77:df:1b:f6:9a:7e:f2: 1c:42:03:5d:65:ea:64:d7:df:3a:d1:17:17:e9:4a:57:28:23: 34:e9:72:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx MTY5MDhBMzIwHhcNMjQxMTIxMDQzNDM0WhcNMjQxMTI4MDQzNDM0WjAYMRYwFAYD VQQDEw02NzNlYjg1Yi0zMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnkcYCDx/NZmD8EUFlFw3a33+UYLAKpfzkaC0Vv3zdKJiWSUDJ2xfBPYIBes S29pEvnCtrbNQJQ7A3c+Pb/p/IcaoqvEdTh37KJoMFFVpoiS9lDwus/9ctfmmoS+ 1DVdrmROUHSzQifKyGnVMrQ9ExnreVcScKAxuMv0LQxCFg86PaqH4k/FOdcCYs4H kGFRnmwU0vI7y3soYeSuDIlotR7ReEqVjpFZd94pKHdfubhhnywwsetz+zTui6Y0 n9H0pdQVeRda53D/7jIUC0hy3p7jT8CBrDIm/SizI8mI3DtX92zM+z3fH2kI3dCx mULAtCPcu8CsZpl5r60CJaTAaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjzdKFI 6Eg9STIVT4GtxOSzNBm2MB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2 OF91Y3k1elMyRWdSYVFpakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjNSQsTKhFczf+alXZZF94Sx62QbbJL8dOYa+Hx44PUlN2kDjdmsA4 bemEJL/Uf/5MopXeeZ2P09Go4HigCcgAudSfk1tLLZ8ae74KzGIwX1NSqWkGdS/t WSKLPwhOXaR6vpI6noFI4FvMFjS2jCtA2bO2Chs4Q5T5/kIRkcA+WIspjbqafvo7 armmf2IKysQkwPmpzENa/irMqYrYix8GDBJ9edH00tpD9lSiDRRh+itW7T2FWsGh qlXwYivfZGhhd6iSRg7RI2RqA4Iec/aiDkz+9S1KHFC3hoVZW4seh/wsJ3ffG/aa fvIcQgNdZepk19860RcX6UpXKCM06XLU -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org