$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: 2BqiNmf32yq34ogJNVLdWnBFL7OtJ71+MllKmc+t9Jc= Subject key identifier: 21:A3:0E:F5:C4:50:CE:5C:C5:00:A7:3E:E1:E1:E4:87:E0:CF:D1:76 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:31:00 +0000 Manifest this update: Fri 25 Apr 2025 05:31:00 +0000 Manifest next update: Fri 02 May 2025 05:31:00 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: CVby3D54BkiELJivhKjtPO90p0ZhDt03Xg0RKqzG8Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Apr 25 05:31:00 2025 GMT Not After : May 2 05:31:00 2025 GMT Subject: CN=680b1e14-389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:f7:c6:55:d1:cf:54:54:e6:87:21:d7:7d: 46:aa:ad:50:0d:d8:96:57:9e:2f:ca:b6:45:ab:ae: e0:84:07:d4:6c:05:a8:a2:47:09:d8:f6:83:a3:a2: 95:d6:3e:3d:63:d9:b3:7b:6b:c7:fd:91:bc:4b:6d: 9e:c6:ad:14:7f:3f:c8:1e:52:0c:68:11:03:61:ca: 57:28:8a:ca:a1:88:6a:9a:a2:9c:72:51:98:53:bf: 83:33:88:6a:95:be:ac:1c:dc:c9:df:d8:14:a5:e1: 03:87:00:06:ef:e6:58:25:46:20:8b:20:c1:e7:c1: 53:41:0c:75:cf:e3:f5:ed:f4:7a:17:02:21:89:20: af:87:12:df:0f:9f:f0:15:5a:ab:7a:c7:25:b4:dd: cd:0b:28:7a:62:6f:36:ae:a0:67:14:24:eb:f6:5a: 1d:98:7c:b4:77:ec:98:4d:d4:84:d7:8a:cc:5d:1c: 41:3b:8f:c7:a2:1d:14:02:3b:b9:e2:74:06:da:d0: e5:00:04:aa:db:16:e1:13:4c:ea:d1:c7:76:fc:bb: 98:e8:ef:85:7c:a0:43:7f:57:b0:5b:56:77:71:49: 93:b5:2a:57:b1:68:c1:a0:ae:32:84:1c:f0:24:68: 8e:37:37:51:65:cb:79:84:8d:09:4f:83:71:5f:b1: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:0E:F5:C4:50:CE:5C:C5:00:A7:3E:E1:E1:E4:87:E0:CF:D1:76 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:bc:2b:70:6a:8f:79:88:a1:3b:4e:4a:fd:22:ee:59:7b: e5:46:b0:6a:4b:e9:9b:d7:a9:96:d5:b1:99:ba:98:a4:45:d0: a1:ee:13:f0:27:05:33:7d:d3:09:1f:ea:89:22:24:2c:36:00: d2:99:7b:38:a9:d2:f6:8f:e2:fa:db:42:cc:7c:f1:bb:2b:b4: cc:62:29:62:16:90:00:d2:93:cd:1b:3e:31:da:27:6d:03:7f: 54:3e:e3:61:f1:2d:92:fa:22:e9:f6:61:8a:69:cb:f8:a5:5b: 7a:fe:1c:c6:19:78:a9:87:68:c2:a1:26:42:a1:6c:6f:e3:21: f3:8a:c3:51:43:24:ae:3b:40:c0:f2:97:f1:ea:61:9a:ec:ad: 09:0b:9c:44:48:44:1e:88:cd:6e:0f:2b:5a:5e:65:1d:79:4b: 4f:24:6b:7d:5d:7f:c3:30:ff:a6:7b:1e:f4:53:ff:79:ad:22: 5f:93:34:e9:33:28:16:03:ea:d2:46:ab:23:a5:0d:b8:2e:ca: a3:1e:20:56:2f:c8:c4:53:05:e7:0b:8c:2c:bc:ea:98:c3:60: e1:03:46:bd:b7:b5:a2:b1:f1:ee:30:bc:2c:49:9f:34:e4:26: 2a:81:e0:0d:cd:0a:69:aa:8b:8f:33:9e:12:d8:78:c8:9a:53: 76:65:f2:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwNDI1MDUzMTAwWhcNMjUwNTAyMDUzMTAwWjAYMRYwFAYD VQQDEw02ODBiMWUxNC0zODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjv3xlXRz1RU5och131Gqq1QDdiWV54vyrZFq67ghAfUbAWookcJ2PaDo6KV 1j49Y9mze2vH/ZG8S22exq0Ufz/IHlIMaBEDYcpXKIrKoYhqmqKcclGYU7+DM4hq lb6sHNzJ39gUpeEDhwAG7+ZYJUYgiyDB58FTQQx1z+P17fR6FwIhiSCvhxLfD5/w FVqrescltN3NCyh6Ym82rqBnFCTr9lodmHy0d+yYTdSE14rMXRxBO4/Hoh0UAju5 4nQG2tDlAASq2xbhE0zq0cd2/LuY6O+FfKBDf1ewW1Z3cUmTtSpXsWjBoK4yhBzw JGiONzdRZct5hI0JT4NxX7GVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGjDvXE UM5cxQCnPuHh5Ifgz9F2MB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbALwrcGqPeYihO05K/SLuWXvlRrBqS+mb16mW1bGZupikRdCh7hPw JwUzfdMJH+qJIiQsNgDSmXs4qdL2j+L620LMfPG7K7TMYiliFpAA0pPNGz4x2idt A39UPuNh8S2S+iLp9mGKacv4pVt6/hzGGXiph2jCoSZCoWxv4yHzisNRQySuO0DA 8pfx6mGa7K0JC5xESEQeiM1uDytaXmUdeUtPJGt9XX/DMP+mex70U/95rSJfkzTp MygWA+rSRqsjpQ24LsqjHiBWL8jEUwXnC4wsvOqYw2DhA0a9t7WisfHuMLwsSZ80 5CYqgeANzQppqouPM54S2HjImlN2ZfKq -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:41 2025 by rpki-client