
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier: mKwdr1NWiSVrNYBpTQ/QLLdVwgSqL90xAH+QFs8CyHI=
Subject key identifier: D1:83:52:36:03:6E:9C:4C:A1:8A:90:5C:F5:88:05:DF:F6:4F:B0:C5
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number: 0171
Signing time: Thu 23 Jul 2026 06:16:20 +0000
Manifest this update: Thu 23 Jul 2026 06:16:20 +0000
Manifest next update: Thu 30 Jul 2026 06:16:20 +0000
Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: jDMNbaYvFk+6pZmp+LNDTWga4a9heYUqsEZro4HmVJk=)
2: 87FEDB446B9B11F1A0F959156D47A888.roa (hash: puaYmraHKaDMLjz2a7HMedJgxaZ/2MzUtX95c64CBvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Jul 23 06:16:20 2026 GMT
Not After : Jul 30 06:16:20 2026 GMT
Subject: CN=6a61b1b4-1e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:4a:44:af:32:ca:91:a8:79:96:fd:8d:7b:
81:5d:28:c5:18:ae:19:7d:f9:b3:14:eb:2e:d3:04:
c1:07:85:cf:ab:f9:db:72:94:a3:e5:96:ef:53:5c:
99:c5:3d:1b:80:a7:20:ec:07:0c:43:be:c7:fb:c1:
22:6b:96:ae:1e:f9:22:43:b8:45:bd:93:f6:97:d4:
04:da:f2:36:bf:d1:70:a5:e4:4d:c6:10:40:6c:db:
c4:e9:2c:c2:44:16:c0:67:6b:49:35:fd:9f:85:d6:
99:72:e9:a1:c8:50:c1:f6:4e:65:94:a9:1c:fe:e9:
2b:44:00:5d:d4:ed:f1:70:0c:5e:aa:ff:7f:88:a5:
8e:06:a3:06:3a:e3:fe:2b:20:0b:58:96:17:b6:01:
6c:85:40:33:aa:f2:6f:79:7f:b8:00:04:e5:8e:00:
b4:c1:e9:62:09:ce:13:ce:a8:b6:23:fd:ea:5e:30:
0c:08:f4:ec:8a:34:ee:36:54:cb:4b:23:23:59:24:
02:c7:e3:08:6c:a0:37:29:a8:d0:28:6a:48:6d:66:
7c:d8:90:90:61:e8:a2:a8:62:14:dd:49:3d:ae:a5:
7d:de:b0:1a:8f:51:d1:0f:0e:5e:a7:3f:96:71:1e:
5f:54:bc:76:af:6f:fe:a0:31:1e:e6:43:c3:e3:f8:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:52:36:03:6E:9C:4C:A1:8A:90:5C:F5:88:05:DF:F6:4F:B0:C5
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:57:97:62:fe:88:b5:69:af:d0:c6:c0:f8:8b:0a:06:55:
af:a2:32:4b:5a:f9:2d:6c:09:1a:68:e9:3e:6f:1f:a1:40:10:
32:23:a3:ab:b6:11:9a:02:c3:97:c8:eb:d0:d7:93:c8:cb:53:
b0:e2:da:25:6c:60:a9:ec:97:21:87:fa:dd:3a:70:c3:b4:82:
2d:52:a9:b9:12:64:b1:79:21:2c:17:81:c0:1f:ff:37:c0:19:
cf:f1:04:17:80:35:80:2e:3f:7d:09:f0:65:01:7f:9b:2c:9f:
23:d9:ae:bf:12:de:64:09:82:92:d5:4e:a3:37:a8:5e:62:70:
de:62:49:ed:03:60:f8:c4:53:a4:cf:92:6b:f8:fc:34:b9:5e:
b0:de:88:e3:fc:91:8a:2a:24:a7:94:95:23:37:0c:7c:70:eb:
3f:8b:8d:ca:3a:cf:68:89:50:87:0a:1e:35:43:bf:15:42:78:
78:c8:60:60:d5:4f:c4:9f:f6:a6:7a:fa:f5:b6:62:b8:b0:e6:
de:6d:16:45:36:21:00:eb:3d:4d:d5:b2:31:20:08:fc:df:45:
3f:13:d2:33:f3:ab:38:da:0c:8d:e3:12:1c:7b:46:a5:0b:bb:
78:fe:1b:7c:c0:2f:08:02:4e:96:43:be:ab:68:4f:ef:e2:65:
f3:3d:87:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF
NDNFNkIzMTIwHhcNMjYwNzIzMDYxNjIwWhcNMjYwNzMwMDYxNjIwWjAYMRYwFAYD
VQQDEw02YTYxYjFiNC0xZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5dKRK8yypGoeZb9jXuBXSjFGK4ZffmzFOsu0wTBB4XPq/nbcpSj5ZbvU1yZ
xT0bgKcg7AcMQ77H+8Eia5auHvkiQ7hFvZP2l9QE2vI2v9FwpeRNxhBAbNvE6SzC
RBbAZ2tJNf2fhdaZcumhyFDB9k5llKkc/ukrRABd1O3xcAxeqv9/iKWOBqMGOuP+
KyALWJYXtgFshUAzqvJveX+4AATljgC0weliCc4Tzqi2I/3qXjAMCPTsijTuNlTL
SyMjWSQCx+MIbKA3KajQKGpIbWZ82JCQYeiiqGIU3Uk9rqV93rAaj1HRDw5epz+W
cR5fVLx2r2/+oDEe5kPD4/h42wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGDUjYD
bpxMoYqQXPWIBd/2T7DFMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2
NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR
R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYlXl2L+iLVpr9DGwPiLCgZVr6IyS1r5LWwJGmjpPm8foUAQMiOjq7YRmgLD
l8jr0NeTyMtTsOLaJWxgqeyXIYf63Tpww7SCLVKpuRJksXkhLBeBwB//N8AZz/EE
F4A1gC4/fQnwZQF/myyfI9muvxLeZAmCktVOozeoXmJw3mJJ7QNg+MRTpM+Sa/j8
NLlesN6I4/yRiiokp5SVIzcMfHDrP4uNyjrPaIlQhwoeNUO/FUJ4eMhgYNVPxJ/2
pnr69bZiuLDm3m0WRTYhAOs9TdWyMSAI/N9FPxPSM/OrONoMjeMSHHtGpQu7eP4b
fMAvCAJOlkO+q2hP7+Jl8z2HCA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:55 2026 by rpki-client