$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: vwg+O6rh75Bj2gBZb5DMDtZS8uy2DgYJCJeE8plJ/xA= Subject key identifier: 09:8C:93:4D:A1:3C:0D:8D:15:E4:6A:65:79:45:9E:58:BF:20:85:85 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 7B Signing time: Thu 03 Apr 2025 05:54:17 +0000 Manifest this update: Thu 03 Apr 2025 05:54:17 +0000 Manifest next update: Thu 10 Apr 2025 05:54:17 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: jnECQguBX9/Hp30FMyqfeax87ty2WNaREEwghFALcKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0 Validity Not Before: Apr 3 05:54:17 2025 GMT Not After : Apr 10 05:54:17 2025 GMT Subject: CN=67ee2289-c176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:5e:6f:a4:0e:a0:30:e4:89:66:56:86:8a: 46:85:e4:fc:72:62:02:26:ad:69:09:53:5c:71:38: f8:30:d3:32:6a:35:c1:60:91:75:f7:b7:26:1f:25: 97:52:65:92:a8:d0:60:64:15:7a:9b:27:28:e5:fd: c8:4d:e2:6e:64:a6:60:f6:5a:d9:67:4f:c9:71:c1: c4:d9:fd:9f:28:40:02:98:1d:e5:ad:6a:41:8f:a0: 7a:72:45:e4:03:53:57:64:55:27:53:2e:07:fc:d4: 1c:e1:01:f1:b2:d3:00:18:8a:58:c4:17:fc:fe:cf: f9:4e:08:e2:ad:d7:42:5b:ca:47:db:00:9f:1a:bd: 30:e6:6e:af:e8:9a:6e:4e:c1:ff:9b:0b:e7:8e:5a: df:1b:37:d6:b1:de:c6:1d:b3:5e:ed:f3:fe:de:45: 07:98:f1:55:f4:7c:82:3b:cf:5b:5e:a1:e4:cf:b5: c2:c6:9d:5b:7e:12:98:c6:18:ac:cb:d9:8b:ca:0a: 6d:12:72:26:0e:3c:6b:ef:21:36:81:51:36:73:53: 3c:3d:13:e4:f0:b2:b4:13:fb:ff:c1:65:1f:b0:c5: 81:74:f1:dc:4e:9a:e6:b5:19:0a:8b:3c:2d:3b:dc: 5b:89:6a:7d:06:1b:11:97:26:f7:e2:30:88:54:c3: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:93:4D:A1:3C:0D:8D:15:E4:6A:65:79:45:9E:58:BF:20:85:85 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ce:29:6a:aa:db:40:d7:46:cd:d8:22:40:4f:d6:4d:36:5f: 55:51:72:c2:10:c2:61:c1:82:24:e7:17:ef:88:4a:ce:8c:b7: ea:27:b4:69:02:14:d3:93:bb:5c:df:8f:e8:fb:e8:76:38:b9: 7a:7b:bd:53:c1:34:b4:26:c9:f6:56:c1:b9:8b:0f:88:94:2d: f9:a8:1f:bf:de:c5:72:83:3a:fb:f1:50:ba:37:47:a5:12:32: f5:1a:ad:d5:d9:09:65:02:4d:36:47:8f:2d:ac:a8:04:2f:3f: 9a:c8:04:fb:c1:dc:ee:e6:03:55:07:76:ff:cc:31:26:df:9e: 48:69:bf:29:e1:16:34:a2:63:36:ec:14:c8:25:46:6e:0f:f3: cf:e7:2a:fa:88:d6:12:3d:c9:28:84:90:6b:53:96:6b:bd:32: b0:1b:c1:18:2e:89:f6:ce:22:9c:98:ff:9f:b0:ad:3c:87:ee: 14:e6:eb:98:c7:e9:cd:e6:b8:0a:36:11:a6:55:c6:89:85:3e: 35:0f:66:28:11:26:47:fe:19:f4:5b:09:4d:82:c3:3c:2b:36: d3:43:ec:bc:6c:35:74:24:64:f0:bb:15:38:ca:62:1d:b2:6f: 3b:8b:d9:f3:b3:65:8b:26:6b:a9:95:5c:5e:70:32:79:f0:95: 2b:3d:60:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0JCMDExMC8GA1UEBRMoOTcwNkJGMTIxOTM1NEQwMThDMTU4NThDRTk3Njc5RkU0 M0U2QjMxMjAeFw0yNTA0MDMwNTU0MTdaFw0yNTA0MTAwNTU0MTdaMBgxFjAUBgNV BAMTDTY3ZWUyMjg5LWMxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCoV5vpA6gMOSJZlaGikaF5PxyYgImrWkJU1xxOPgw0zJqNcFgkXX3tyYfJZdS ZZKo0GBkFXqbJyjl/chN4m5kpmD2WtlnT8lxwcTZ/Z8oQAKYHeWtakGPoHpyReQD U1dkVSdTLgf81BzhAfGy0wAYiljEF/z+z/lOCOKt10JbykfbAJ8avTDmbq/omm5O wf+bC+eOWt8bN9ax3sYds17t8/7eRQeY8VX0fII7z1teoeTPtcLGnVt+EpjGGKzL 2YvKCm0SciYOPGvvITaBUTZzUzw9E+TwsrQT+//BZR+wxYF08dxOmua1GQqLPC07 3FuJan0GGxGXJvfiMIhUw/AXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCYyTTaE8 DY0V5GpleUWeWL8ghYUwHwYDVR0jBBgwFoAUlwa/Ehk1TQGMFYWM6XZ5/kPmsxIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQkIwL0MxMkU4NDJDNTY2 ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHdhX0VoazFUUUdNRllXTTZYWjVfa1Btc3hJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QkIwL0MxMkU4NDJDNTY2ODExRUY4RTZBNzc1REM0RjlBRTAyL2x3YV9FaGsxVFFH TUZZV002WFo1X2tQbXN4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTOKWqq20DXRs3YIkBP1k02X1VRcsIQwmHBgiTnF++ISs6Mt+ontGkC FNOTu1zfj+j76HY4uXp7vVPBNLQmyfZWwbmLD4iULfmoH7/exXKDOvvxULo3R6US MvUardXZCWUCTTZHjy2sqAQvP5rIBPvB3O7mA1UHdv/MMSbfnkhpvynhFjSiYzbs FMglRm4P88/nKvqI1hI9ySiEkGtTlmu9MrAbwRguifbOIpyY/5+wrTyH7hTm65jH 6c3muAo2EaZVxomFPjUPZigRJkf+GfRbCU2CwzwrNtND7LxsNXQkZPC7FTjKYh2y bzuL2fOzZYsma6mVXF5wMnnwlSs9YMA= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:39 2025 by rpki-client