$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: zjBXtQ7V6ECxx4/XwFQQsY7iOODWPmGQaVHY9kp1rVc= Subject key identifier: 7A:53:76:26:DD:31:50:74:85:9E:21:7B:1B:67:E8:E7:92:1D:36:AF Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: E2 Signing time: Sun 19 Oct 2025 08:26:32 +0000 Manifest this update: Sun 19 Oct 2025 08:26:31 +0000 Manifest next update: Sun 26 Oct 2025 08:26:31 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: srCFVeWOVLaE7y4Ht2WtzEWsLMYVcdGy8Mglh3MInWQ=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Oct 19 08:26:31 2025 GMT Not After : Oct 26 08:26:31 2025 GMT Subject: CN=68f4a0b7-137a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:e0:aa:14:a3:41:9a:92:3e:8a:df:d5:8d: 32:79:9c:33:b1:64:f2:bd:2e:2f:99:2b:c8:4c:66: 6c:3a:aa:6e:de:8b:08:e6:d7:94:e1:cc:72:92:3f: 60:c0:b3:88:cd:c2:44:c3:00:c6:df:fd:c3:a5:e3: 7d:e0:da:56:72:a8:06:cc:18:d5:15:6f:ad:b1:6f: 2e:c1:16:8e:81:62:cb:b9:d2:67:3a:dc:41:ed:f8: 54:59:3a:34:32:2d:0f:63:1d:f3:df:7b:df:52:4c: d0:5d:e1:85:e1:b7:a7:45:d7:22:d4:c0:42:f0:15: 3b:8d:e7:57:11:0d:3b:10:f0:f0:b8:29:76:68:d1: 60:e3:9b:cf:42:87:4b:4f:bd:81:4e:8e:44:a9:0a: 40:4a:74:04:03:2d:63:3f:ca:60:5d:70:3d:5c:37: 2c:c5:f2:59:f8:6b:75:1a:c5:50:f1:f5:d3:2a:95: 1a:26:bf:7b:f5:38:56:f2:e0:31:30:98:1b:3a:36: 6d:7f:33:eb:21:b5:57:da:d4:3b:04:82:90:e3:91: 5b:d3:ff:bf:85:df:26:90:42:77:69:e7:4e:20:88: 2d:b9:ca:aa:fd:f6:fb:3f:7c:58:5d:f9:7b:5a:39: ab:27:48:9b:d2:20:aa:25:b1:0e:ff:ea:95:53:d3: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:76:26:DD:31:50:74:85:9E:21:7B:1B:67:E8:E7:92:1D:36:AF X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ca:73:a1:c4:2d:c6:31:20:27:ac:88:d0:80:82:4c:93:e6: 6a:35:c2:3a:96:ba:f1:35:d1:0a:9a:b1:cf:4f:df:4a:e4:f4: 87:38:b0:ab:98:ae:4a:8c:e2:40:7a:7c:d8:67:0e:76:7e:cb: 22:38:22:42:4e:66:f1:7a:51:8e:42:5d:74:c8:2b:3a:88:9e: 1d:16:98:c4:b3:da:d8:05:0a:18:de:8b:5b:d8:db:8b:44:29: 2e:9d:23:f9:c3:00:f1:d3:a5:5a:00:15:f4:fc:6f:92:08:d5: 15:ae:d3:ee:6b:45:af:eb:df:0d:4b:df:5c:57:71:dc:ab:2e: d4:0e:d6:98:3d:c3:16:0d:7d:23:27:1f:0d:ce:29:da:e6:e4: b5:2f:df:ea:4f:f0:28:dc:8e:01:76:22:27:30:ac:89:71:1b: d3:65:a8:5e:7c:72:32:0f:7e:c2:1b:60:55:1d:08:da:df:25: 1c:a6:ab:08:ca:31:7e:bc:49:eb:65:ba:50:37:e3:9a:bc:fb: 28:66:89:15:e7:a3:46:9f:72:56:c6:7a:9d:65:f6:cd:3e:b9: a4:d3:02:ac:91:bf:58:a1:55:7d:73:f9:a9:2c:1d:13:f2:d8: d9:68:b4:d9:bc:21:79:16:b6:6e:8f:7c:76:35:68:ac:d6:0b: a3:be:2c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUxMDE5MDgyNjMxWhcNMjUxMDI2MDgyNjMxWjAYMRYwFAYD VQQDEw02OGY0YTBiNy0xMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsfgqhSjQZqSPorf1Y0yeZwzsWTyvS4vmSvITGZsOqpu3osI5teU4cxykj9g wLOIzcJEwwDG3/3DpeN94NpWcqgGzBjVFW+tsW8uwRaOgWLLudJnOtxB7fhUWTo0 Mi0PYx3z33vfUkzQXeGF4benRdci1MBC8BU7jedXEQ07EPDwuCl2aNFg45vPQodL T72BTo5EqQpASnQEAy1jP8pgXXA9XDcsxfJZ+Gt1GsVQ8fXTKpUaJr979ThW8uAx MJgbOjZtfzPrIbVX2tQ7BIKQ45Fb0/+/hd8mkEJ3aedOIIgtucqq/fb7P3xYXfl7 WjmrJ0ib0iCqJbEO/+qVU9OR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpTdibd MVB0hZ4hextn6OeSHTavMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ynOhxC3GMSAnrIjQgIJMk+ZqNcI6lrrxNdEKmrHPT99K5PSHOLCr mK5KjOJAenzYZw52fssiOCJCTmbxelGOQl10yCs6iJ4dFpjEs9rYBQoY3otb2NuL RCkunSP5wwDx06VaABX0/G+SCNUVrtPua0Wv698NS99cV3Hcqy7UDtaYPcMWDX0j Jx8Nzina5uS1L9/qT/Ao3I4BdiInMKyJcRvTZahefHIyD37CG2BVHQja3yUcpqsI yjF+vEnrZbpQN+OavPsoZokV56NGn3JWxnqdZfbNPrmk0wKskb9YoVV9c/mpLB0T 8tjZaLTZvCF5FrZuj3x2NWis1gujvix9 -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:40 2025 by rpki-client