
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier: OQgHkusoz+A0dJ5tDZGJbIVRIcWq6qhwUZDcIC5LOaM=
Subject key identifier: 04:A4:28:3D:67:9E:E9:4B:02:52:13:A4:AF:3C:43:81:F9:03:5C:5C
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number: 016E
Signing time: Fri 17 Jul 2026 05:51:03 +0000
Manifest this update: Fri 17 Jul 2026 05:51:03 +0000
Manifest next update: Fri 24 Jul 2026 05:51:03 +0000
Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: HMrTj4ZhqGQ4EKOH9xePeKE4wp9nZ7vTSBFbWG1WGSk=)
2: 87FEDB446B9B11F1A0F959156D47A888.roa (hash: puaYmraHKaDMLjz2a7HMedJgxaZ/2MzUtX95c64CBvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Jul 17 05:51:03 2026 GMT
Not After : Jul 24 05:51:03 2026 GMT
Subject: CN=6a59c2c7-1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:45:ea:5e:90:12:5c:e5:23:66:cd:aa:63:
53:3b:b0:7c:b7:8d:13:de:91:ce:5c:fe:5c:bd:fc:
44:9c:e5:8e:d2:f2:27:48:db:85:77:e9:90:a0:b2:
af:f5:9a:00:5c:a5:cf:18:90:79:ac:0b:7c:cb:4d:
ef:78:10:9e:79:f5:7e:ac:47:f7:0a:de:0e:56:88:
ce:3b:6c:66:d4:c3:9b:a5:f4:4a:d0:06:b5:6c:bd:
71:5d:62:1a:5f:2c:78:2a:ee:9e:d0:6f:90:7a:55:
e9:65:ea:10:09:58:74:9d:0a:be:d3:cd:40:50:97:
e3:61:71:0f:49:35:e0:21:45:3b:5c:fc:c4:f6:b9:
85:86:8d:7d:a8:60:e4:85:41:29:25:0f:47:6c:1a:
e0:1b:49:1d:34:bc:0a:46:c1:08:d8:f5:06:aa:52:
56:6e:d7:25:c6:98:14:ee:96:f0:f1:ec:9d:2f:4b:
48:49:80:38:67:e2:96:e0:59:fd:3a:cf:71:f7:b2:
51:09:90:b0:f7:d3:c1:11:5d:32:5a:a7:06:27:d3:
30:87:7d:d7:b9:a7:c1:ce:ee:48:df:31:8c:0e:1b:
0f:b6:27:83:cd:17:3e:49:9d:05:63:d0:42:d3:45:
97:8e:84:e0:30:11:34:94:38:9f:77:fb:49:5b:36:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:28:3D:67:9E:E9:4B:02:52:13:A4:AF:3C:43:81:F9:03:5C:5C
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:da:6e:af:32:7f:de:20:ab:b5:bd:b8:bd:8d:c6:d1:ae:
b5:db:00:35:05:f7:39:4e:e8:98:44:9d:5d:ae:24:40:09:0c:
15:09:6a:04:a8:3b:d1:a5:5f:89:96:86:14:1c:ed:47:d4:0e:
da:73:c5:3b:d6:ed:8c:17:53:c4:57:a1:3a:06:a7:ae:a1:2e:
30:da:bb:9a:68:32:11:23:45:c0:f5:d9:1d:a8:bf:fc:7c:33:
8d:a7:e4:62:01:fd:e5:83:35:98:35:d8:69:32:6b:5f:4d:49:
d6:66:97:ef:0f:3a:de:bb:3b:43:da:b7:3d:5d:5e:39:75:7a:
20:09:51:a7:24:05:54:33:10:96:7a:8f:de:01:ec:f1:9f:a1:
20:cc:27:5c:f5:80:43:72:78:d9:7e:26:84:ba:f4:ce:e1:ca:
4c:8f:f0:70:e3:3c:2b:16:39:5c:25:f3:01:8e:77:86:06:d9:
83:58:b8:d7:a0:3f:8d:41:a2:03:e2:86:67:72:30:1a:3e:13:
53:20:df:02:ab:d2:07:51:6c:9d:55:fc:75:c3:f9:e8:e2:b6:
a0:73:28:ad:cf:ac:51:93:f8:f4:c3:83:4f:d2:e6:1a:de:88:
47:74:b1:bc:85:f8:2b:02:4d:04:2d:b2:6a:67:f3:a4:0c:83:
a1:cc:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:28:42 2026 by rpki-client