$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: u6QrT2E0ekIog5D6mr5GbbiIEB8R3DfBypIf4yP0LhE= Subject key identifier: 64:EE:C8:BF:CA:5A:90:7C:BF:79:5C:30:48:82:72:AE:58:DF:B7:3F Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: B2 Signing time: Mon 21 Jul 2025 06:08:11 +0000 Manifest this update: Mon 21 Jul 2025 06:08:11 +0000 Manifest next update: Mon 28 Jul 2025 06:08:11 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: VvHJk2FbspJ6VlkvHhBc1tNe6MGnbdobm7RrQAAGaRQ=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: A4sHQNLm53WkHUfkAR92GeqCH5PTVPwr29Q4OBZl+0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Jul 21 06:08:11 2025 GMT Not After : Jul 28 06:08:11 2025 GMT Subject: CN=687dd94b-70d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:4d:f4:a6:06:8f:d1:a9:e5:6b:05:cf:92: 71:68:2c:5d:05:a8:cd:d2:c9:09:43:7b:90:5b:2a: 8f:27:92:79:37:2c:7e:16:82:39:88:be:e6:f4:19: 19:2a:c1:b4:2a:48:26:90:27:35:20:ed:3e:a1:ca: f2:c4:73:e1:25:93:c5:68:58:40:3d:45:a0:cc:db: 73:66:79:21:f1:8e:34:ab:7a:f5:c4:98:0c:5b:20: 2a:fc:68:93:a9:c9:4e:b3:7e:42:6a:71:be:44:1b: 4f:46:5b:5b:76:ab:2e:7d:40:fc:d8:94:9d:e8:8a: a5:c1:6d:0f:72:cf:f4:fc:2d:cc:1b:c2:6e:32:79: d6:6c:a0:2d:e0:c5:60:ba:d8:59:c6:27:99:dc:5a: 26:4e:d6:d2:a5:69:16:ce:fc:90:03:f9:0a:48:0a: f2:10:cb:5b:0a:eb:2b:ed:20:57:b3:22:02:87:c7: 89:84:6b:63:22:a0:e9:eb:ee:27:d3:e1:f2:36:45: 47:ed:db:bb:38:c3:91:bd:2a:86:f9:c9:71:06:1d: 94:d4:54:14:8a:6c:78:80:c9:ca:e7:ed:3a:7c:57: 5c:2e:23:71:e1:7d:9e:a0:a3:d8:c1:da:ea:41:16: df:71:ff:71:04:14:68:51:a2:78:1e:1b:89:9a:97: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EE:C8:BF:CA:5A:90:7C:BF:79:5C:30:48:82:72:AE:58:DF:B7:3F X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:55:49:ca:12:8f:c5:4e:4f:03:d1:c1:67:c3:3f:05:4b:8d: e7:6e:3d:13:9e:59:e4:af:99:80:33:b8:3d:66:01:40:2c:77: 49:fb:ec:21:c5:ea:83:a6:e6:b2:3f:41:eb:3c:49:3a:80:c2: 8e:dc:02:f3:5b:51:14:69:c5:cd:45:aa:ba:02:24:97:7e:61: dd:c3:bf:53:b3:2a:79:e5:42:be:ab:a5:13:86:d3:56:27:b3: 20:80:08:6d:e7:a3:a4:2b:b2:5c:c2:52:cd:17:94:cc:30:f2: 19:4f:f1:70:1a:1f:48:1f:88:96:6a:79:ef:e6:7c:10:d1:a8: e0:ba:21:d9:93:65:4f:9b:32:6b:63:4c:5c:fe:99:77:99:40: 4c:72:aa:28:af:ea:05:51:ea:60:7e:99:26:47:6a:a5:1b:2f: 25:01:a2:2c:77:f2:1e:4b:a5:10:62:3b:9c:7a:4d:62:ef:d2: 2d:be:27:ee:ae:c4:0c:33:49:c8:33:c5:df:47:b2:34:24:e9: fe:59:7b:f8:78:3a:16:b6:db:d4:d3:f7:05:bb:00:71:c5:44: 0c:77:e6:15:4e:37:ec:09:ba:d5:f8:5c:48:32:00:44:98:8c: e8:ea:1d:93:1b:83:90:fa:ea:a2:76:19:6d:c3:21:2b:ba:ec: 17:eb:c4:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwNzIxMDYwODExWhcNMjUwNzI4MDYwODExWjAYMRYwFAYD VQQDEw02ODdkZDk0Yi03MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOJN9KYGj9Gp5WsFz5JxaCxdBajN0skJQ3uQWyqPJ5J5Nyx+FoI5iL7m9BkZ KsG0KkgmkCc1IO0+ocryxHPhJZPFaFhAPUWgzNtzZnkh8Y40q3r1xJgMWyAq/GiT qclOs35CanG+RBtPRltbdqsufUD82JSd6IqlwW0Pcs/0/C3MG8JuMnnWbKAt4MVg uthZxieZ3FomTtbSpWkWzvyQA/kKSAryEMtbCusr7SBXsyICh8eJhGtjIqDp6+4n 0+HyNkVH7du7OMORvSqG+clxBh2U1FQUimx4gMnK5+06fFdcLiNx4X2eoKPYwdrq QRbfcf9xBBRoUaJ4HhuJmpf8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTuyL/K WpB8v3lcMEiCcq5Y37c/MB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEVUnKEo/FTk8D0cFnwz8FS43nbj0Tnlnkr5mAM7g9ZgFALHdJ++wh xeqDpuayP0HrPEk6gMKO3ALzW1EUacXNRaq6AiSXfmHdw79Tsyp55UK+q6UThtNW J7MggAht56OkK7JcwlLNF5TMMPIZT/FwGh9IH4iWannv5nwQ0ajguiHZk2VPmzJr Y0xc/pl3mUBMcqoor+oFUepgfpkmR2qlGy8lAaIsd/IeS6UQYjucek1i79Itvifu rsQMM0nIM8XfR7I0JOn+WXv4eDoWttvU0/cFuwBxxUQMd+YVTjfsCbrV+FxIMgBE mIzo6h2TG4OQ+uqidhltwyEruuwX68SO -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:14 2025 by rpki-client