$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: IC5yvbov+YErThKnxCIN6AwkoSpIs7bEaZ7Vn74XC1M= Subject key identifier: 2C:97:0C:2E:4E:47:7B:6D:14:AF:0B:B5:8A:BA:70:3B:64:8C:A1:B8 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 014F Signing time: Thu 21 May 2026 05:11:03 +0000 Manifest this update: Thu 21 May 2026 05:11:02 +0000 Manifest next update: Thu 28 May 2026 05:11:02 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: ksefXoTDWnuprvrxAPGZZVPHuJznj8qZwANrDC/Dpf0=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: May 21 05:11:02 2026 GMT Not After : May 28 05:11:02 2026 GMT Subject: CN=6a0e93e7-d22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:92:57:77:74:fd:cb:98:c8:25:10:c4:da: 06:9a:b3:c0:d9:7c:57:86:e1:76:da:0d:7b:70:ce: 71:3c:30:93:30:56:8f:30:3d:60:6c:7a:5e:49:eb: 97:b1:7d:68:75:5e:f0:62:05:4d:90:ce:f1:04:59: 3b:fd:4b:ce:4d:8e:99:41:b1:4f:58:ab:98:63:e7: 61:7d:0d:fd:fd:3c:00:b4:50:13:8b:2c:0d:8e:84: 4e:38:96:42:6a:f2:d4:8e:5f:fa:3d:58:84:42:d7: af:b0:fb:39:6d:92:85:d1:18:a6:5e:2b:70:d2:2e: e3:6f:83:c7:4c:c7:0f:81:80:de:04:3b:50:5d:b7: 0f:09:c5:2f:90:f6:a6:1b:2f:3e:6f:aa:52:df:53: fc:da:e5:c3:52:f0:7a:5c:b8:bf:ed:c0:db:db:c4: 3f:ff:36:19:19:3c:86:d5:88:2b:e3:90:06:6d:b2: 56:73:ca:09:c8:fd:9e:66:65:ce:5f:75:57:24:84: 18:fc:77:25:bc:6c:92:4d:7a:19:0a:ee:05:a1:ed: 5e:e1:68:99:49:9c:f6:8c:9d:4a:1a:50:f5:5b:0f: 22:7a:7e:22:0d:0d:6a:fd:d3:81:96:fc:c4:a4:8c: 3e:db:5f:ed:27:c8:54:2c:d7:f0:cd:d3:43:a7:fc: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:0C:2E:4E:47:7B:6D:14:AF:0B:B5:8A:BA:70:3B:64:8C:A1:B8 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:eb:18:34:dc:cf:a5:a8:52:49:ce:2d:09:92:a7:80:3c:1f: ae:b2:bf:c6:41:a9:84:3c:54:4d:2a:09:c2:d1:80:16:38:8e: 7a:c6:10:65:22:70:0b:55:7a:19:1d:90:51:c2:95:69:ef:d6: 04:38:4c:70:55:b2:b9:c0:ca:69:76:08:fb:4d:9c:7c:0f:ec: 5e:b0:44:69:a7:9e:7f:48:e4:1a:a5:c0:79:15:d7:b3:eb:0f: b4:dc:c7:5d:3f:90:64:32:24:4f:da:58:8e:28:00:b3:95:3b: 73:dc:f8:d3:b4:75:c2:c0:28:09:87:86:7e:c6:a1:96:d7:a6: d4:24:03:99:70:09:ed:0b:4e:9c:8e:b1:05:b3:94:5e:74:ec: 51:41:05:fe:7d:04:81:e3:84:94:88:ff:9d:2b:24:85:e9:d5: 10:16:2b:8e:51:33:a2:ae:4a:75:54:fa:03:d0:56:25:62:44: ca:be:4f:c6:fa:91:3f:07:de:a4:42:55:22:bb:4a:48:89:83: ba:f6:86:97:79:c4:d2:63:3b:cf:a6:f0:ed:d0:17:85:82:f9: 35:1f:db:b4:94:3a:8e:64:f3:38:54:52:64:e1:d8:56:cc:fd: b0:b4:18:6a:35:1a:6b:d1:e4:2e:a9:36:03:fc:13:43:1e:b9: 6d:03:34:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjYwNTIxMDUxMTAyWhcNMjYwNTI4MDUxMTAyWjAYMRYwFAYD VQQDEw02YTBlOTNlNy1kMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAle6SV3d0/cuYyCUQxNoGmrPA2XxXhuF22g17cM5xPDCTMFaPMD1gbHpeSeuX sX1odV7wYgVNkM7xBFk7/UvOTY6ZQbFPWKuYY+dhfQ39/TwAtFATiywNjoROOJZC avLUjl/6PViEQtevsPs5bZKF0RimXitw0i7jb4PHTMcPgYDeBDtQXbcPCcUvkPam Gy8+b6pS31P82uXDUvB6XLi/7cDb28Q//zYZGTyG1Ygr45AGbbJWc8oJyP2eZmXO X3VXJIQY/HclvGySTXoZCu4Foe1e4WiZSZz2jJ1KGlD1Ww8ien4iDQ1q/dOBlvzE pIw+21/tJ8hULNfwzdNDp/yEbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyXDC5O R3ttFK8LtYq6cDtkjKG4MB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOsYNNzPpahSSc4tCZKngDwfrrK/xkGphDxUTSoJwtGAFjiOesYQZSJwC1V6 GR2QUcKVae/WBDhMcFWyucDKaXYI+02cfA/sXrBEaaeef0jkGqXAeRXXs+sPtNzH XT+QZDIkT9pYjigAs5U7c9z407R1wsAoCYeGfsahltem1CQDmXAJ7QtOnI6xBbOU XnTsUUEF/n0EgeOElIj/nSskhenVEBYrjlEzoq5KdVT6A9BWJWJEyr5PxvqRPwfe pEJVIrtKSImDuvaGl3nE0mM7z6bw7dAXhYL5NR/btJQ6jmTzOFRSZOHYVsz9sLQY ajUaa9HkLqk2A/wTQx65bQM05g== -----END CERTIFICATE-----Generated at Thu May 21 09:39:23 2026 by rpki-client