$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: JGjVmos201E+LGyrFmVcNnt4HzsFpdLfrcD34PIQPfI= Subject key identifier: 84:BA:5A:44:88:79:55:F6:D8:E5:CE:E3:0E:DE:79:D6:CC:6D:EC:02 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: BC Signing time: Sat 09 Aug 2025 06:17:12 +0000 Manifest this update: Sat 09 Aug 2025 06:17:12 +0000 Manifest next update: Sat 16 Aug 2025 06:17:12 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: H+ebt23tKRLn6WOYDmTkthJhVxfqneME3WjzNDqJRvM=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: A4sHQNLm53WkHUfkAR92GeqCH5PTVPwr29Q4OBZl+0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Aug 9 06:17:12 2025 GMT Not After : Aug 16 06:17:12 2025 GMT Subject: CN=6896e7e8-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:e8:36:8e:07:9f:a1:a5:fc:47:e0:51:c5: ea:1a:86:3d:e9:8c:09:ef:28:6f:df:f1:6e:5f:d6: 74:a2:58:c5:5d:22:45:e3:c4:a7:1f:e3:89:87:02: 0f:55:d6:66:28:8f:ef:e4:a7:ec:2f:ae:dc:9d:c8: 79:fb:a8:6e:dd:ed:ad:8c:43:c4:1d:94:f1:89:05: 02:37:68:ac:3f:bf:ee:8c:c7:a1:8b:aa:17:12:0e: 30:e0:ab:08:4f:21:19:73:61:15:c8:83:57:d9:02: dd:97:9c:ec:3a:b9:ec:04:8b:60:15:19:26:51:b7: df:fc:f7:ce:38:ab:e2:7b:53:b6:54:03:10:75:81: fe:5e:79:c8:c4:cc:5b:4a:25:91:12:62:42:19:37: 46:bc:76:34:f4:29:93:cb:68:5b:4e:fa:03:dd:ad: 90:97:74:6d:9a:71:ef:fb:11:91:25:1a:b1:f9:59: 34:1e:47:02:90:b1:c9:2b:d1:e7:77:03:d0:c9:95: f3:c6:63:17:1c:29:aa:d0:02:da:c8:cb:9f:fd:00: 26:8f:71:c4:18:6f:8b:d3:a7:59:14:1a:c0:4a:37: 6e:31:ef:a3:11:28:9e:a6:60:bb:d7:de:e6:3b:79: 6a:c6:e8:29:a0:50:ec:73:72:32:61:fb:21:55:7e: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:5A:44:88:79:55:F6:D8:E5:CE:E3:0E:DE:79:D6:CC:6D:EC:02 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f5:94:4b:4a:dc:a5:8e:cc:eb:6f:ac:93:15:b4:65:1c:7e: c5:6e:ba:12:ac:52:ca:99:af:71:ae:7a:cd:3b:12:5a:4b:b9: 56:d2:22:f4:59:a3:50:ba:bc:7c:a4:84:b3:45:f7:e6:11:98: 01:c5:de:96:92:66:26:d8:b7:5d:92:d0:ff:fd:0c:6a:0d:a5: 25:0a:52:d5:88:be:dc:0d:11:67:7e:73:b6:6f:d2:91:c3:25: 75:0a:2e:82:c2:9b:44:3b:aa:03:01:f7:2a:70:1e:4d:68:3f: 77:00:0a:86:85:57:2e:07:34:0f:80:9f:04:96:a6:b8:69:7a: b2:72:2d:fc:b2:6b:3e:56:80:47:31:4d:84:44:bd:df:8f:3b: 56:f3:54:47:8f:56:40:3e:28:3d:53:3a:42:d8:c5:ca:77:5c: 74:d8:cb:02:e7:39:6a:f2:42:dc:60:75:1d:00:78:a0:93:53: db:1d:71:54:6b:30:e2:91:40:e6:56:b1:18:36:c3:23:2d:9d: db:fb:67:7e:84:91:bb:66:e2:25:77:ed:b4:ad:e7:ee:69:bc: 84:71:e5:6d:62:c9:39:db:1e:e0:d9:9b:3d:96:54:de:26:8b: 12:fd:2f:52:75:20:58:89:45:f1:91:b0:89:d3:65:a5:fb:bd: 9d:20:8f:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwODA5MDYxNzEyWhcNMjUwODE2MDYxNzEyWjAYMRYwFAYD VQQDEw02ODk2ZTdlOC02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6W/oNo4Hn6Gl/EfgUcXqGoY96YwJ7yhv3/FuX9Z0oljFXSJF48SnH+OJhwIP VdZmKI/v5KfsL67cnch5+6hu3e2tjEPEHZTxiQUCN2isP7/ujMehi6oXEg4w4KsI TyEZc2EVyINX2QLdl5zsOrnsBItgFRkmUbff/PfOOKvie1O2VAMQdYH+XnnIxMxb SiWREmJCGTdGvHY09CmTy2hbTvoD3a2Ql3RtmnHv+xGRJRqx+Vk0HkcCkLHJK9Hn dwPQyZXzxmMXHCmq0ALayMuf/QAmj3HEGG+L06dZFBrASjduMe+jESiepmC7197m O3lqxugpoFDsc3IyYfshVX5NzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS6WkSI eVX22OXO4w7eedbMbewCMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA29ZRLStyljszrb6yTFbRlHH7FbroSrFLKma9xrnrNOxJaS7lW0iL0 WaNQurx8pISzRffmEZgBxd6WkmYm2LddktD//QxqDaUlClLViL7cDRFnfnO2b9KR wyV1Ci6CwptEO6oDAfcqcB5NaD93AAqGhVcuBzQPgJ8Elqa4aXqyci38sms+VoBH MU2ERL3fjztW81RHj1ZAPig9UzpC2MXKd1x02MsC5zlq8kLcYHUdAHigk1PbHXFU azDikUDmVrEYNsMjLZ3b+2d+hJG7ZuIld+20refuabyEceVtYsk52x7g2Zs9llTe JosS/S9SdSBYiUXxkbCJ02Wl+72dII+w -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:49 2025 by rpki-client