$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: x4q6yEVaIcxw1tb/cbeasbt1i4EY8z6hgHvEzeFo05M= Subject key identifier: 4A:7B:FE:C0:EC:C7:8D:EA:86:35:C8:CD:65:D5:E1:AD:64:81:7C:CD Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 97 Signing time: Sat 31 May 2025 05:52:36 +0000 Manifest this update: Sat 31 May 2025 05:52:35 +0000 Manifest next update: Sat 07 Jun 2025 05:52:35 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: 6x4oHkeyrRwvohlIGwdtLha0qhZakW9aYXBnnlw2QGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: May 31 05:52:35 2025 GMT Not After : Jun 7 05:52:35 2025 GMT Subject: CN=683a9923-7512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:00:9f:a4:4c:ed:f0:76:7d:10:8e:4d:14: 78:96:11:bd:27:a0:e3:88:e6:8f:76:d5:ba:cd:4a: ff:62:90:4a:72:f9:fe:60:94:af:d7:27:1a:13:48: 78:2d:d8:8a:86:ef:7f:20:58:69:1d:1a:98:3a:59: b9:37:0e:90:aa:2c:43:79:c6:47:68:9a:87:4e:f8: 6f:4c:ec:2d:e4:f7:49:8b:87:12:17:cb:d9:84:e0: 65:f4:5d:55:9c:55:89:da:04:4d:5d:fc:7a:f5:e4: 5d:d4:8a:7f:1a:df:06:07:7e:97:19:e7:81:e8:b3: aa:d5:3e:6e:5a:17:f5:9a:cb:c1:f1:01:5e:c7:97: 1e:08:9f:74:67:44:61:51:2f:c2:7f:55:f4:6f:5c: 27:38:d6:9d:92:a4:06:d3:8d:b4:8f:74:24:47:2c: 4a:e2:f5:85:69:c1:03:41:25:13:03:4f:e7:de:39: 72:dc:9a:e3:e8:3e:1a:b9:05:73:c3:59:a4:47:7d: 96:01:e6:5d:00:3b:61:db:e3:a1:73:1f:2f:67:b6: 57:77:35:87:64:df:3d:2e:99:ce:0b:6e:22:f5:dd: 2a:8f:b6:db:29:af:d8:e4:6d:3b:dc:1c:52:36:5e: f4:cb:83:27:73:0b:b2:1d:99:41:1d:1a:b1:a7:15: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:FE:C0:EC:C7:8D:EA:86:35:C8:CD:65:D5:E1:AD:64:81:7C:CD X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:54:06:f9:8d:54:0c:0c:f3:42:71:ca:01:38:e4:59:51: 76:97:a1:c7:c0:14:73:54:05:f1:31:eb:16:ae:53:2f:4f:29: fa:47:2f:3f:8d:5b:3e:a7:3f:b5:30:4e:6f:82:19:c1:e3:f4: a3:92:c1:7d:b3:e7:58:ae:86:e2:ca:a3:6d:7f:2f:1f:3e:18: ad:be:ae:9e:25:d1:a6:c8:4d:f1:77:4b:4e:21:34:85:37:b6: c9:98:a3:eb:b6:ae:2c:5c:21:3a:52:41:33:67:48:d4:7c:a5: 44:e8:c4:46:c4:95:e2:24:19:07:46:36:21:c0:41:40:50:ac: 65:f6:0a:f2:34:b5:4c:39:12:f3:c7:bb:16:db:f3:ac:1e:8a: 97:ae:7a:9d:c8:04:c3:10:11:90:ca:20:35:8b:7f:47:07:48: 5d:10:b6:11:98:db:c6:21:7b:0a:86:d9:41:8f:31:4f:a7:51: 21:86:36:99:c2:a0:04:6d:ee:c2:0c:2e:fe:d5:32:2d:c0:2e: 7f:29:7a:a0:0c:c4:b7:cc:3f:d5:20:9a:8a:a8:f9:c2:91:6e: 7a:df:5d:41:d6:a0:01:02:c1:e8:59:04:76:23:40:9c:34:61: 83:4c:98:6f:b6:73:83:c7:04:2c:96:46:0c:ae:f4:03:1d:67: 00:8c:9e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwNTMxMDU1MjM1WhcNMjUwNjA3MDU1MjM1WjAYMRYwFAYD VQQDEw02ODNhOTkyMy03NTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymkAn6RM7fB2fRCOTRR4lhG9J6DjiOaPdtW6zUr/YpBKcvn+YJSv1ycaE0h4 LdiKhu9/IFhpHRqYOlm5Nw6QqixDecZHaJqHTvhvTOwt5PdJi4cSF8vZhOBl9F1V nFWJ2gRNXfx69eRd1Ip/Gt8GB36XGeeB6LOq1T5uWhf1msvB8QFex5ceCJ90Z0Rh US/Cf1X0b1wnONadkqQG0420j3QkRyxK4vWFacEDQSUTA0/n3jly3Jrj6D4auQVz w1mkR32WAeZdADth2+Ohcx8vZ7ZXdzWHZN89LpnOC24i9d0qj7bbKa/Y5G073BxS Nl70y4MncwuyHZlBHRqxpxW6dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp7/sDs x43qhjXIzWXV4a1kgXzNMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgiVQG+Y1UDAzzQnHKATjkWVF2l6HHwBRzVAXxMesWrlMvTyn6Ry8/ jVs+pz+1ME5vghnB4/SjksF9s+dYrobiyqNtfy8fPhitvq6eJdGmyE3xd0tOITSF N7bJmKPrtq4sXCE6UkEzZ0jUfKVE6MRGxJXiJBkHRjYhwEFAUKxl9gryNLVMORLz x7sW2/OsHoqXrnqdyATDEBGQyiA1i39HB0hdELYRmNvGIXsKhtlBjzFPp1EhhjaZ wqAEbe7CDC7+1TItwC5/KXqgDMS3zD/VIJqKqPnCkW56311B1qABAsHoWQR2I0Cc NGGDTJhvtnODxwQslkYMrvQDHWcAjJ6g -----END CERTIFICATE-----Generated at Sat May 31 17:49:36 2025 by rpki-client