$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: 5tohNzMZSWdTYRshSpE46tlRLh0W0gJT71hF4D9LdOg= Subject key identifier: A8:11:97:1F:81:FF:B1:E0:F2:FE:B5:A7:42:0E:3F:C0:6E:4E:52:BE Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: CE Signing time: Tue 09 Sep 2025 05:46:19 +0000 Manifest this update: Tue 09 Sep 2025 05:46:19 +0000 Manifest next update: Tue 16 Sep 2025 05:46:19 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: 3rk9F8lOWu+lxFRfalJf7WoNr53ag/OGYBQmy2yIpkM=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Sep 9 05:46:19 2025 GMT Not After : Sep 16 05:46:19 2025 GMT Subject: CN=68bfbf2b-7e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:2a:95:a9:ce:e7:6f:53:6f:ec:92:af:22: eb:f8:38:1a:55:49:14:81:4e:4d:1f:f8:57:2a:b8: b3:e5:c8:2f:13:81:2d:96:9b:32:17:68:df:ea:f1: 70:a3:05:e6:c1:96:f0:1b:27:cd:64:9a:37:54:7d: 65:a4:64:5a:86:0b:25:65:0f:1d:0a:bb:f4:bf:36: dc:cd:09:e9:fe:13:58:16:f1:96:8c:c1:9b:47:e3: c3:27:8e:9a:24:ba:a6:cd:56:6f:0a:c7:3d:1f:38: 1e:ad:f2:1e:68:35:92:8d:8a:c9:67:dd:cc:7c:9b: aa:a4:f6:6a:c8:76:ec:5e:05:3d:29:cd:47:3c:54: 45:eb:cd:e0:9f:76:d6:90:16:9d:d3:06:5b:97:e8: 5b:98:dc:c1:df:32:d5:91:bf:8a:6d:cc:12:c7:c7: af:43:0e:4d:0d:47:d4:c9:09:3d:5d:21:ce:34:1d: 61:26:9e:a2:04:e1:b7:b2:7a:61:70:39:79:52:98: 99:08:1e:30:ca:64:a1:bd:85:80:64:31:e3:a9:72: 34:b7:57:d3:ab:6e:be:3e:8e:51:1e:6a:0d:ce:fc: 65:ba:bc:85:06:74:7d:ab:07:7f:18:05:9d:45:5d: d1:08:bf:ee:5e:be:1d:99:ac:95:37:07:32:2d:4e: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:11:97:1F:81:FF:B1:E0:F2:FE:B5:A7:42:0E:3F:C0:6E:4E:52:BE X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:c8:c7:da:3b:1a:5e:35:89:8f:c3:a2:49:66:15:98:75:4f: 45:21:78:fb:f6:27:e5:1f:ea:04:f3:67:77:39:72:68:0e:b7: 7d:13:72:6f:e5:e3:4f:32:4f:dd:82:18:d1:dd:f5:0b:e0:a2: 03:3c:d9:58:19:d9:bb:67:2b:d3:78:2f:0a:bb:fa:89:8a:84: 0e:83:34:87:a8:5d:71:91:55:ed:c6:40:8b:d1:e1:9a:17:72: b0:e6:52:8a:ad:51:84:61:7f:b9:1d:96:a2:37:95:af:c5:49: 01:f6:e6:cb:0f:99:6d:52:16:06:4d:b7:37:a8:b6:8e:09:f4: 2d:af:4b:84:a7:1c:a4:57:b8:96:62:cd:71:8b:23:fc:d3:5a: b2:0d:97:3f:7f:71:26:bf:f3:6d:c1:77:bc:65:7e:79:ba:65: 5f:c7:f9:eb:f3:f1:f8:84:c3:b6:ba:80:f1:59:31:6e:f7:85: 13:52:91:cf:59:74:dd:e1:6f:ed:04:61:46:8b:ad:37:0a:ad: db:05:88:58:f6:a0:d8:83:ea:a5:ef:ae:9b:2b:b5:cd:14:e9: cc:18:2a:c7:0a:7f:c7:16:7d:d2:66:11:af:82:d3:85:71:97: b2:22:32:92:d2:e1:f7:62:91:f9:51:66:c0:d4:db:7b:60:6b: 22:9c:b8:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwOTA5MDU0NjE5WhcNMjUwOTE2MDU0NjE5WjAYMRYwFAYD VQQDEw02OGJmYmYyYi03ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXQqlanO529Tb+ySryLr+DgaVUkUgU5NH/hXKriz5cgvE4EtlpsyF2jf6vFw owXmwZbwGyfNZJo3VH1lpGRahgslZQ8dCrv0vzbczQnp/hNYFvGWjMGbR+PDJ46a JLqmzVZvCsc9HzgerfIeaDWSjYrJZ93MfJuqpPZqyHbsXgU9Kc1HPFRF683gn3bW kBad0wZbl+hbmNzB3zLVkb+KbcwSx8evQw5NDUfUyQk9XSHONB1hJp6iBOG3snph cDl5UpiZCB4wymShvYWAZDHjqXI0t1fTq26+Po5RHmoNzvxluryFBnR9qwd/GAWd RV3RCL/uXr4dmayVNwcyLU58MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgRlx+B /7Hg8v61p0IOP8BuTlK+MB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQyMfaOxpeNYmPw6JJZhWYdU9FIXj79iflH+oE82d3OXJoDrd9E3Jv 5eNPMk/dghjR3fUL4KIDPNlYGdm7ZyvTeC8Ku/qJioQOgzSHqF1xkVXtxkCL0eGa F3Kw5lKKrVGEYX+5HZaiN5WvxUkB9ubLD5ltUhYGTbc3qLaOCfQtr0uEpxykV7iW Ys1xiyP801qyDZc/f3Emv/NtwXe8ZX55umVfx/nr8/H4hMO2uoDxWTFu94UTUpHP WXTd4W/tBGFGi603Cq3bBYhY9qDYg+ql766bK7XNFOnMGCrHCn/HFn3SZhGvgtOF cZeyIjKS0uH3YpH5UWbA1Nt7YGsinLgq -----END CERTIFICATE-----Generated at Tue Sep 9 13:41:34 2025 by rpki-client