$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: WAEFoGJmVMeQ78EfspL0tERoyBiPZKJdlpZs2rM37hs= Subject key identifier: E9:A6:FB:DE:E0:A9:C8:C8:2B:B4:45:88:BF:C9:81:07:38:0A:EE:86 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 0132 Signing time: Wed 25 Mar 2026 04:40:46 +0000 Manifest this update: Wed 25 Mar 2026 04:40:46 +0000 Manifest next update: Wed 01 Apr 2026 04:40:46 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: bo9NluDNIR68pMwnWCDOcFjAQ6DuyKXZW2z9z02RjqU=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Mar 25 04:40:46 2026 GMT Not After : Apr 1 04:40:46 2026 GMT Subject: CN=69c3674e-5265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:82:e6:ce:2a:b2:f4:9a:9b:e1:57:17:6f: e0:d5:08:b7:f2:90:59:23:55:b5:4b:07:34:d4:b4: 91:c4:de:b3:1f:3a:98:ea:92:6e:c6:ad:06:6e:05: b1:c6:a0:ee:fa:ad:ea:88:5d:a7:94:39:1e:8b:a9: 12:1a:1c:af:f7:34:20:2e:33:5a:d5:59:de:8d:37: cf:38:c8:b9:e1:b6:2b:66:b9:cf:b8:63:06:94:a5: 61:1f:22:13:2e:e8:28:5d:0e:d2:82:2d:86:46:c8: 3e:19:15:0b:47:94:34:3e:d6:7a:00:ae:73:33:4a: 8a:fe:09:c6:26:19:77:39:92:36:34:a5:d7:03:1e: e9:2b:a3:97:55:21:76:4d:76:57:c3:57:af:79:04: da:17:89:b5:fd:d0:24:b9:ee:76:e3:c4:de:93:9f: 1d:f2:47:c3:e4:3e:e2:d5:dc:0e:9a:9a:68:91:0a: f0:60:d5:da:09:f4:73:69:e8:18:3f:f8:8d:49:a6: a4:97:ce:84:15:f1:64:88:be:77:5c:88:67:fb:62: 16:a5:5b:80:01:91:ed:33:7b:ed:e1:c1:0d:10:a0: df:1f:75:ea:b9:3b:65:a1:3d:1b:e0:55:39:ed:69: 40:22:4b:ed:a4:8a:4d:67:0a:1a:cd:54:58:bf:c3: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A6:FB:DE:E0:A9:C8:C8:2B:B4:45:88:BF:C9:81:07:38:0A:EE:86 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:5c:b2:84:ad:5d:0b:91:d8:25:fa:86:26:aa:ed:09:d2:3a: 3e:fe:89:41:c0:b4:ce:39:1d:e1:c4:11:b7:fa:bc:88:64:b0: 9d:87:ab:ea:6a:97:7e:b1:9f:0f:54:d3:d6:17:9f:22:97:7b: 4e:71:2c:b2:06:b0:23:e3:47:1c:2e:82:1f:21:a2:b7:ae:74: 8c:4a:5d:ca:50:12:35:41:28:9c:c5:dc:ae:13:ed:fb:6a:71: ca:20:8e:fd:56:c4:5e:f0:93:63:b8:67:0c:a5:ab:7d:5a:c7: 58:99:71:46:ab:3d:fb:1a:c5:e2:9c:b7:ac:cb:fd:25:c4:9f: 73:d6:1f:95:2c:da:34:66:c3:67:3a:b0:6b:10:6d:44:88:56: ab:1c:af:67:e0:7b:b7:0d:f6:31:87:be:34:c1:67:c0:45:af: ed:dd:b7:af:b7:83:50:e7:2d:01:34:be:ad:5d:8b:0d:96:78: fe:7e:94:1c:1d:8a:92:b8:72:dc:69:fe:38:4e:d5:3d:d1:ea: e9:e4:c9:c8:a1:c8:23:4a:14:f9:88:d1:97:11:87:b4:5d:c8: d9:1b:eb:d8:7c:77:37:cf:37:f6:1d:35:53:eb:11:73:16:88: ac:b4:7c:f4:6d:40:8a:58:e4:14:16:0b:e3:d2:fc:aa:f4:f9: 47:9b:a5:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjYwMzI1MDQ0MDQ2WhcNMjYwNDAxMDQ0MDQ2WjAYMRYwFAYD VQQDEw02OWMzNjc0ZS01MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCqC5s4qsvSam+FXF2/g1Qi38pBZI1W1Swc01LSRxN6zHzqY6pJuxq0GbgWx xqDu+q3qiF2nlDkei6kSGhyv9zQgLjNa1VnejTfPOMi54bYrZrnPuGMGlKVhHyIT LugoXQ7Sgi2GRsg+GRULR5Q0PtZ6AK5zM0qK/gnGJhl3OZI2NKXXAx7pK6OXVSF2 TXZXw1eveQTaF4m1/dAkue5248Tek58d8kfD5D7i1dwOmppokQrwYNXaCfRzaegY P/iNSaakl86EFfFkiL53XIhn+2IWpVuAAZHtM3vt4cENEKDfH3XquTtloT0b4FU5 7WlAIkvtpIpNZwoazVRYv8P+cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmm+97g qcjIK7RFiL/JgQc4Cu6GMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1FyyhK1dC5HYJfqGJqrtCdI6Pv6JQcC0zjkd4cQRt/q8iGSwnYer6mqXfrGf D1TT1hefIpd7TnEssgawI+NHHC6CHyGit650jEpdylASNUEonMXcrhPt+2pxyiCO /VbEXvCTY7hnDKWrfVrHWJlxRqs9+xrF4py3rMv9JcSfc9YflSzaNGbDZzqwaxBt RIhWqxyvZ+B7tw32MYe+NMFnwEWv7d23r7eDUOctATS+rV2LDZZ4/n6UHB2Kkrhy 3Gn+OE7VPdHq6eTJyKHII0oU+YjRlxGHtF3I2Rvr2Hx3N8839h01U+sRcxaIrLR8 9G1AiljkFBYL49L8qvT5R5ulyA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:18 2026 by rpki-client