$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: Q9patIlxn9j8BnD4t7P1h0j0QCugvfohlWQYKql5WWY= Subject key identifier: 64:BF:B1:0B:E9:56:5C:BB:AD:19:BD:83:04:DD:B4:6D:77:AA:79:87 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 0138 Signing time: Sun 05 Apr 2026 04:48:04 +0000 Manifest this update: Sun 05 Apr 2026 04:48:03 +0000 Manifest next update: Sun 12 Apr 2026 04:48:03 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: qcj+AcJCZJgH53ioTy/+oilMsVypv7Ifgwh83QTY1MM=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Apr 5 04:48:03 2026 GMT Not After : Apr 12 04:48:03 2026 GMT Subject: CN=69d1e983-d8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:7c:6c:53:ba:da:e9:46:10:3a:ab:ae:9e: 22:ef:61:65:38:37:08:e6:6c:b6:03:3a:d8:db:67: 05:54:f4:ad:50:0a:24:1b:d1:9a:9d:c6:12:b0:12: a4:18:ba:22:4e:d9:d7:ff:06:86:61:af:58:0e:21: 87:60:8a:92:30:21:9c:a1:40:fc:69:5c:08:02:d2: 98:92:1c:e9:b3:2e:64:67:a9:1a:5e:92:96:11:3b: 18:fb:43:72:c9:4b:fc:16:c9:2a:7d:70:02:cb:e5: 4f:f3:1f:c7:51:cf:03:78:97:a7:54:09:3e:a4:f9: 66:90:70:4f:73:14:93:4c:bb:3d:50:42:7d:8e:c4: 0f:11:2a:97:0b:3e:78:aa:54:32:5a:02:a1:2f:ee: a6:94:3a:87:b9:05:60:c1:ca:dc:c0:2b:49:5c:69: e5:be:4f:66:c9:c0:be:0e:1f:ce:45:a6:0c:71:0c: 71:0b:a9:ce:f5:2d:df:06:87:4f:87:f2:e7:b2:2b: 11:88:0c:76:f4:75:44:74:2b:88:e2:68:42:2a:ab: dd:e2:83:0d:5f:af:c4:0b:2a:f4:47:6a:3b:40:75: fc:a3:41:a1:dd:c1:0b:c5:4e:e5:14:a0:be:11:10: c7:c2:7d:f5:e1:5e:20:b5:65:8a:79:42:f8:65:3f: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:B1:0B:E9:56:5C:BB:AD:19:BD:83:04:DD:B4:6D:77:AA:79:87 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7b:78:c8:58:c6:a1:68:c6:6e:0f:df:c3:a0:a1:6f:5a:99: ab:95:4f:8a:1c:df:f8:62:a1:18:99:d2:e9:20:43:74:ca:8f: 74:99:38:3c:86:42:c9:26:33:44:c3:2c:a2:81:78:37:c4:0a: b8:db:33:34:a4:12:57:58:91:21:00:05:52:67:7e:ae:c7:87: 4b:89:ba:cf:f2:e0:63:24:a2:7b:af:51:ba:14:d8:34:4a:0e: 00:5d:e8:5a:b8:9d:bd:e2:eb:65:df:00:d9:01:73:8c:03:e6: 1b:2c:d8:24:f9:0a:a5:f5:3f:f3:2b:d4:8a:3a:53:b7:f4:e2: 05:e5:59:e1:6c:e4:09:4c:3d:cd:23:4b:7d:5f:be:17:8b:99: ab:27:2d:39:af:e5:3e:a7:24:63:f1:1d:0a:79:7a:80:6d:04: 88:0e:d6:a2:3b:d0:cd:ce:63:f4:3b:e5:8e:fb:02:be:4f:e3: 61:e7:7f:4b:e4:7c:5a:f1:41:e7:1b:b0:c7:8c:1c:f6:fe:35: eb:74:39:09:ed:9f:9c:70:fe:74:f2:cb:c9:1f:4f:41:6c:c2: d6:cb:30:fd:f6:43:55:85:0d:a7:06:4b:fe:d1:9e:a8:7b:03: 60:bf:51:0c:9b:34:b9:cf:a0:04:c2:8a:b9:d9:af:cf:cb:ae: e8:1c:04:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjYwNDA1MDQ0ODAzWhcNMjYwNDEyMDQ0ODAzWjAYMRYwFAYD VQQDEw02OWQxZTk4My1kOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl98bFO62ulGEDqrrp4i72FlODcI5my2AzrY22cFVPStUAokG9GancYSsBKk GLoiTtnX/waGYa9YDiGHYIqSMCGcoUD8aVwIAtKYkhzpsy5kZ6kaXpKWETsY+0Ny yUv8FskqfXACy+VP8x/HUc8DeJenVAk+pPlmkHBPcxSTTLs9UEJ9jsQPESqXCz54 qlQyWgKhL+6mlDqHuQVgwcrcwCtJXGnlvk9mycC+Dh/ORaYMcQxxC6nO9S3fBodP h/LnsisRiAx29HVEdCuI4mhCKqvd4oMNX6/ECyr0R2o7QHX8o0Gh3cELxU7lFKC+ ERDHwn314V4gtWWKeUL4ZT+7LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGS/sQvp Vly7rRm9gwTdtG13qnmHMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3t4yFjGoWjGbg/fw6Chb1qZq5VPihzf+GKhGJnS6SBDdMqPdJk4PIZCySYz RMMsooF4N8QKuNszNKQSV1iRIQAFUmd+rseHS4m6z/LgYySie69RuhTYNEoOAF3o WridveLrZd8A2QFzjAPmGyzYJPkKpfU/8yvUijpTt/TiBeVZ4WzkCUw9zSNLfV++ F4uZqyctOa/lPqckY/EdCnl6gG0EiA7WojvQzc5j9DvljvsCvk/jYed/S+R8WvFB 5xuwx4wc9v4163Q5Ce2fnHD+dPLLyR9PQWzC1ssw/fZDVYUNpwZL/tGeqHsDYL9R DJs0uc+gBMKKudmvz8uu6BwErg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:13 2026 by rpki-client