$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: y4GB4Fu92Wf74USV7v1bLSEUg1zdg8Knj+4TRep+SGA= Subject key identifier: 3A:23:86:E5:E9:77:3F:53:78:30:F5:CF:06:5E:51:E9:12:03:67:E6 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 38 Signing time: Sat 23 Nov 2024 05:27:06 +0000 Manifest this update: Sat 23 Nov 2024 05:27:05 +0000 Manifest next update: Sat 30 Nov 2024 05:27:05 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: 6MijKa84SduBLmJSNxHrOyPkIWqnEjbNn73rrYMHU9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Nov 23 05:27:05 2024 GMT Not After : Nov 30 05:27:05 2024 GMT Subject: CN=674167aa-478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:1f:51:f6:5e:cc:da:8e:13:37:94:09:2c: 8c:c7:30:8b:4e:1a:24:a9:43:12:09:82:e1:a4:9f: 32:e2:79:1c:cb:1a:de:59:6d:17:06:7a:7b:41:5d: de:ed:8c:4f:01:35:39:e1:2e:85:2a:5e:36:1c:25: 86:d5:48:ca:b4:74:5c:18:5c:49:7b:99:90:87:1b: 65:17:91:c6:b8:61:56:e0:26:a0:bc:d7:55:49:7d: 1a:de:92:17:c5:42:9d:c2:6c:64:62:b3:75:85:b6: f4:c6:99:c5:f9:3f:0e:76:c6:da:10:24:fc:28:81: cb:a9:38:64:f3:94:58:b6:22:c2:12:12:b6:dc:60: 51:71:a2:2d:17:02:42:57:9e:18:62:2e:64:b9:34: 37:3a:f1:61:fd:df:4a:ef:80:7f:7f:5e:8e:f3:bc: 64:b9:1b:6f:a0:54:08:bb:5e:df:2d:c2:6b:13:68: ba:cd:c0:f0:fd:98:aa:1d:38:79:4e:64:26:a5:c3: f5:a9:f7:38:72:97:1e:e8:a8:ba:e2:da:7a:4f:b8: 1e:8f:67:fd:6f:ef:f2:0e:78:43:f3:0a:ad:a6:58: 2b:7f:ee:a0:03:a3:af:f0:ab:86:a7:40:30:16:a8: 2a:83:2a:1c:55:d4:fa:b3:e1:10:e4:15:25:1e:24: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:86:E5:E9:77:3F:53:78:30:F5:CF:06:5E:51:E9:12:03:67:E6 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:b0:c2:04:64:72:14:1c:34:b7:ee:63:59:85:78:3b:87:52: fd:2d:d9:1d:83:0e:77:91:b7:9f:2a:12:52:4e:b3:55:5d:3f: a1:65:61:76:fb:f4:34:cc:e7:fe:95:f9:27:04:ec:86:ed:8e: a6:aa:d2:c4:a4:70:6b:c9:44:2b:6d:bf:9c:73:42:fb:ac:1d: 72:50:b5:55:19:07:6a:d2:5b:fa:e5:8c:78:c3:4c:96:d6:c5: 29:77:80:47:e7:a2:89:ab:2c:df:89:90:91:6c:44:78:0b:ac: a7:9e:35:88:50:ec:37:97:3e:a5:c6:23:5b:5c:24:64:9a:1a: 3b:90:bb:88:d1:ac:af:4c:6c:a9:a0:01:63:6d:8b:80:32:f1: d3:ce:96:f1:2e:08:13:88:4c:7a:67:32:9b:b7:0c:35:20:6c: c0:58:2a:62:4b:72:1d:12:7a:79:a4:92:5f:9b:06:7b:d6:4c: 41:da:be:ec:34:57:e7:51:5c:c6:bb:2c:48:8a:83:21:b9:54: 25:35:da:21:8f:7b:05:de:fd:36:e7:92:ec:5e:f0:bc:97:0e: ca:73:46:6b:27:5d:13:1a:3e:af:37:14:ba:62:e8:89:01:91: 14:de:0e:d8:9d:cb:40:52:71:ff:75:cc:d8:ac:8e:08:44:10: 7b:d7:48:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoOTcwNkJGMTIxOTM1NEQwMThDMTU4NThDRTk3Njc5RkU0 M0U2QjMxMjAeFw0yNDExMjMwNTI3MDVaFw0yNDExMzAwNTI3MDVaMBgxFjAUBgNV BAMTDTY3NDE2N2FhLTQ3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWaR9R9l7M2o4TN5QJLIzHMItOGiSpQxIJguGknzLieRzLGt5ZbRcGentBXd7t jE8BNTnhLoUqXjYcJYbVSMq0dFwYXEl7mZCHG2UXkca4YVbgJqC811VJfRrekhfF Qp3CbGRis3WFtvTGmcX5Pw52xtoQJPwogcupOGTzlFi2IsISErbcYFFxoi0XAkJX nhhiLmS5NDc68WH930rvgH9/Xo7zvGS5G2+gVAi7Xt8twmsTaLrNwPD9mKodOHlO ZCalw/Wp9zhylx7oqLri2npPuB6PZ/1v7/IOeEPzCq2mWCt/7qADo6/wq4anQDAW qCqDKhxV1Pqz4RDkFSUeJDNjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOiOG5el3 P1N4MPXPBl5R6RIDZ+YwHwYDVR0jBBgwFoAUlwa/Ehk1TQGMFYWM6XZ5/kPmsxIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0MxMkU4NDJDNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHdhX0VoazFUUUdNRllXTTZYWjVfa1Btc3hJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0MxMkU4NDJDNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFH TUZZV002WFo1X2tQbXN4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANawwgRkchQcNLfuY1mFeDuHUv0t2R2DDneRt58qElJOs1VdP6FlYXb7 9DTM5/6V+ScE7Ibtjqaq0sSkcGvJRCttv5xzQvusHXJQtVUZB2rSW/rljHjDTJbW xSl3gEfnoomrLN+JkJFsRHgLrKeeNYhQ7DeXPqXGI1tcJGSaGjuQu4jRrK9MbKmg AWNti4Ay8dPOlvEuCBOITHpnMpu3DDUgbMBYKmJLch0Senmkkl+bBnvWTEHavuw0 V+dRXMa7LEiKgyG5VCU12iGPewXe/Tbnkuxe8LyXDspzRmsnXRMaPq83FLpi6IkB kRTeDtidy0BScf91zNisjghEEHvXSI8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org