$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: 4SHEj1gM+cq4c76guoBS1N55oxe0uYZv67o8rTBn4Ys= Subject key identifier: BF:D8:25:E1:EB:77:92:76:06:77:5C:BB:0F:33:8C:FA:89:3B:10:02 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 28 Signing time: Wed 23 Oct 2024 06:21:34 +0000 Manifest this update: Wed 23 Oct 2024 06:21:33 +0000 Manifest next update: Wed 30 Oct 2024 06:21:33 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: /a9h/khOv2B0IY1FBVXAS8FD8JYD4mwMbahywP9/sUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Oct 23 06:21:33 2024 GMT Not After : Oct 30 06:21:33 2024 GMT Subject: CN=671895ed-4478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:9c:42:d1:9e:41:68:f3:2a:b9:2a:d2:95: 28:24:b7:26:ef:3b:11:05:33:a9:b9:3e:22:a1:b3: 63:1c:ff:a8:ef:1f:3b:02:e5:85:7c:c6:64:93:b6: c0:20:b1:72:c6:bd:fb:7b:a1:73:7a:ea:86:0c:9d: b5:87:7f:f7:92:35:d3:98:af:30:e1:e9:e3:47:3b: 6c:dc:19:97:24:9e:bd:79:22:d9:2e:e6:24:f8:b8: 14:e4:7a:e0:37:ce:8f:23:73:e3:81:07:3d:df:6a: 29:c0:26:3a:bb:d9:15:e7:05:08:5c:ef:5f:31:2f: ff:0a:c4:ab:09:05:cb:a9:5e:70:37:70:7e:1f:23: ad:86:83:81:45:8f:93:33:4f:5e:7c:92:c6:53:90: 09:00:b5:96:03:2a:04:8f:c7:15:9a:cc:92:94:8d: 39:ba:78:0a:4f:0c:73:cf:35:d8:29:f7:3d:62:44: b8:74:01:07:bf:ad:2e:e7:54:6c:af:50:e3:74:4f: b9:ba:27:6d:27:2c:27:c3:aa:85:46:a6:5a:5e:f6: e4:07:2b:13:f2:d8:34:a3:20:74:69:7a:62:eb:f7: bd:bf:0c:0c:9f:fb:e6:08:5a:02:8a:22:43:1c:d1: 2d:f2:ab:6f:85:2b:b9:e9:25:e9:c8:d2:5c:aa:bb: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:25:E1:EB:77:92:76:06:77:5C:BB:0F:33:8C:FA:89:3B:10:02 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:50:3e:b6:ae:a8:b0:c0:51:76:74:47:fc:36:09:44:c2:8c: 9b:07:2b:0c:51:a1:79:09:f8:ec:fc:b7:fc:4e:de:c8:99:ea: c5:ea:2d:7e:02:4e:94:ce:7f:3b:f9:11:4a:27:f0:53:ef:89: fb:50:cb:23:2f:40:df:42:09:1c:48:d4:7b:34:e8:e2:17:66: b5:be:c8:70:d5:c0:ae:42:f8:c8:b6:92:85:0c:67:d1:fa:72: 02:47:6f:d6:1b:dc:6d:bf:10:eb:02:af:c7:db:cb:a4:64:4a: 83:41:f4:07:96:ad:10:02:9b:9d:52:5d:8f:85:b8:ce:d7:79: 24:92:0b:20:fb:ca:38:3b:f8:1e:c3:29:e1:5f:d8:49:90:77: e4:e0:5d:e7:93:a5:bb:7f:4e:9b:5e:a3:21:5b:7d:3f:23:58: 09:ae:28:9c:b1:b2:c7:7c:ae:73:a5:8a:13:5c:f0:f6:c7:11: 05:5c:ff:0b:8a:a4:5b:05:80:20:9b:fb:48:8c:32:97:22:ee: 19:58:82:91:ad:69:b8:d1:a6:4f:7a:ee:9b:57:bf:0d:68:81: a4:12:b3:64:fb:14:f2:5e:13:4e:ed:5b:7c:24:a7:42:88:62: 20:e5:56:47:c3:8b:19:44:2f:6d:29:6a:de:5f:9c:30:4d:59: a8:a7:c7:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoOTcwNkJGMTIxOTM1NEQwMThDMTU4NThDRTk3Njc5RkU0 M0U2QjMxMjAeFw0yNDEwMjMwNjIxMzNaFw0yNDEwMzAwNjIxMzNaMBgxFjAUBgNV BAMTDTY3MTg5NWVkLTQ0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYnZxC0Z5BaPMquSrSlSgktybvOxEFM6m5PiKhs2Mc/6jvHzsC5YV8xmSTtsAg sXLGvft7oXN66oYMnbWHf/eSNdOYrzDh6eNHO2zcGZcknr15Itku5iT4uBTkeuA3 zo8jc+OBBz3fainAJjq72RXnBQhc718xL/8KxKsJBcupXnA3cH4fI62Gg4FFj5Mz T158ksZTkAkAtZYDKgSPxxWazJKUjTm6eApPDHPPNdgp9z1iRLh0AQe/rS7nVGyv UON0T7m6J20nLCfDqoVGplpe9uQHKxPy2DSjIHRpemLr972/DAyf++YIWgKKIkMc 0S3yq2+FK7npJenI0lyqu8uNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv9gl4et3 knYGd1y7DzOM+ok7EAIwHwYDVR0jBBgwFoAUlwa/Ehk1TQGMFYWM6XZ5/kPmsxIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0MxMkU4NDJDNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHdhX0VoazFUUUdNRllXTTZYWjVfa1Btc3hJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0MxMkU4NDJDNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFH TUZZV002WFo1X2tQbXN4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRQPrauqLDAUXZ0R/w2CUTCjJsHKwxRoXkJ+Oz8t/xO3siZ6sXqLX4C TpTOfzv5EUon8FPviftQyyMvQN9CCRxI1Hs06OIXZrW+yHDVwK5C+Mi2koUMZ9H6 cgJHb9Yb3G2/EOsCr8fby6RkSoNB9AeWrRACm51SXY+FuM7XeSSSCyD7yjg7+B7D KeFf2EmQd+TgXeeTpbt/TpteoyFbfT8jWAmuKJyxssd8rnOlihNc8PbHEQVc/wuK pFsFgCCb+0iMMpci7hlYgpGtabjRpk967ptXvw1ogaQSs2T7FPJeE07tW3wkp0KI YiDlVkfDixlEL20pat5fnDBNWainxxY= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org