$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: jQ1dwAHNJR4hYMBuxr1QChXqweKi3ZRgv5Wp/zNbpn0= Subject key identifier: 97:FF:07:C8:65:46:08:40:3E:76:1A:95:F9:F6:5E:73:FF:A3:69:0F Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: A8 Signing time: Thu 03 Jul 2025 06:16:43 +0000 Manifest this update: Thu 03 Jul 2025 06:16:42 +0000 Manifest next update: Thu 10 Jul 2025 06:16:42 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: bD8zBKuiVKz9wZE8sZHWZpakjV7EQZq6febotMsORuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Jul 3 06:16:42 2025 GMT Not After : Jul 10 06:16:42 2025 GMT Subject: CN=6866204a-8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:94:73:3b:db:3f:2b:49:fd:75:7a:c0:fd: f0:ab:43:9f:50:50:98:14:3d:dd:99:9f:ac:16:5b: fe:94:ff:30:f4:da:65:71:bf:a5:b3:1c:be:41:4b: bb:ca:8e:1d:9e:d1:0c:9e:9f:8d:35:ae:22:ad:9a: a3:10:9f:87:2a:87:b9:35:af:a0:39:1b:52:f8:ac: 1f:7e:2d:9e:40:c7:b9:00:ac:e4:d6:55:71:27:89: 94:5a:3c:4d:42:80:8e:c0:d4:3d:a3:f3:b7:0b:65: 20:50:1a:46:72:cc:e9:48:44:56:32:0f:0f:a9:5e: f0:99:f0:03:44:61:be:5f:af:f2:0a:73:35:c0:39: 3d:40:77:05:43:ab:83:e9:26:18:52:20:ef:e6:68: 70:a1:8b:bd:e3:dc:58:c5:d1:2f:05:6d:52:cc:51: ca:71:b4:d0:b4:89:20:d1:77:95:ca:16:50:8b:59: c3:ac:b5:79:18:af:69:35:13:77:19:2a:ca:4c:0f: b5:c3:5e:e2:ae:8b:fa:46:87:4c:0b:6f:1c:b0:0b: 24:21:c6:69:a9:12:1a:2a:4a:ed:55:c6:88:b0:fc: 9a:f4:d9:c6:2f:72:bb:0c:0e:f3:cb:68:22:08:d1: ca:10:a4:99:e1:7e:ad:7b:cb:0d:5c:cd:e8:89:9b: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:07:C8:65:46:08:40:3E:76:1A:95:F9:F6:5E:73:FF:A3:69:0F X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7a:04:2b:f7:d5:2b:bd:1b:62:d1:1e:a6:89:de:bd:42:f0: 14:3e:4e:dd:94:8f:9d:5d:b1:70:e8:c2:0a:14:00:b2:a2:c0: 4d:66:dd:a3:d0:fa:4a:20:a4:12:71:ee:78:ae:21:83:48:36: f4:0b:ad:16:3e:87:90:92:e7:0d:b6:64:13:2e:41:fc:ed:80: 59:db:4c:02:5d:20:21:55:ff:7c:af:62:32:7d:fd:df:d5:e3: 7a:7f:a8:54:37:ea:ab:64:b8:df:8a:39:c8:f9:97:8b:c7:35: f1:76:31:f6:07:e5:0d:d1:d8:62:76:33:08:96:57:fd:48:75: 8a:26:30:e7:d8:c2:98:7a:04:40:50:13:db:bd:7c:1c:e1:32: cd:0b:7f:d0:5b:d2:86:0b:bb:58:cf:5b:e2:84:2e:7a:2c:cf: 00:10:fa:9f:b1:83:ff:c8:cb:32:cf:61:f8:97:66:53:35:98: 16:86:65:76:39:26:b4:11:2c:c0:7d:3e:9a:5e:9a:db:09:8f: 74:15:fd:58:28:ca:5e:3b:9a:27:26:57:b2:c7:07:7d:b6:0f: d4:c6:13:4e:dc:6e:7f:c3:3e:74:a2:38:68:3b:15:c7:48:e0: c3:ce:d9:89:10:ab:18:fe:2c:47:2a:4b:b5:ea:f4:73:ff:75: 48:d8:1f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwNzAzMDYxNjQyWhcNMjUwNzEwMDYxNjQyWjAYMRYwFAYD VQQDEw02ODY2MjA0YS04Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYeUczvbPytJ/XV6wP3wq0OfUFCYFD3dmZ+sFlv+lP8w9Nplcb+lsxy+QUu7 yo4dntEMnp+NNa4irZqjEJ+HKoe5Na+gORtS+Kwffi2eQMe5AKzk1lVxJ4mUWjxN QoCOwNQ9o/O3C2UgUBpGcszpSERWMg8PqV7wmfADRGG+X6/yCnM1wDk9QHcFQ6uD 6SYYUiDv5mhwoYu949xYxdEvBW1SzFHKcbTQtIkg0XeVyhZQi1nDrLV5GK9pNRN3 GSrKTA+1w17irov6RodMC28csAskIcZpqRIaKkrtVcaIsPya9NnGL3K7DA7zy2gi CNHKEKSZ4X6te8sNXM3oiZtDyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf/B8hl RghAPnYalfn2XnP/o2kPMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/egQr99UrvRti0R6mid69QvAUPk7dlI+dXbFw6MIKFACyosBNZt2j 0PpKIKQSce54riGDSDb0C60WPoeQkucNtmQTLkH87YBZ20wCXSAhVf98r2Iyff3f 1eN6f6hUN+qrZLjfijnI+ZeLxzXxdjH2B+UN0dhidjMIllf9SHWKJjDn2MKYegRA UBPbvXwc4TLNC3/QW9KGC7tYz1vihC56LM8AEPqfsYP/yMsyz2H4l2ZTNZgWhmV2 OSa0ESzAfT6aXprbCY90Ff1YKMpeO5onJleyxwd9tg/UxhNO3G5/wz50ojhoOxXH SODDztmJEKsY/ixHKku16vRz/3VI2B+L -----END CERTIFICATE-----Generated at Fri Jul 4 19:15:30 2025 by rpki-client