$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: g3CP10OTK//XnqC7map/J9hYuVqRpoDyz+DAIWFuMVM= Subject key identifier: E7:1D:49:45:27:72:4D:72:D9:BF:66:29:B9:59:9E:09:7A:E0:B6:E6 Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 05:56:26 +0000 Manifest this update: Sat 23 Aug 2025 05:56:26 +0000 Manifest next update: Sat 30 Aug 2025 05:56:26 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: SYdTlJ4dXDmyTXPIUfu+DQaqXj+z1E1lTRvm70RhW/I=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: A4sHQNLm53WkHUfkAR92GeqCH5PTVPwr29Q4OBZl+0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: Aug 23 05:56:26 2025 GMT Not After : Aug 30 05:56:26 2025 GMT Subject: CN=68a9580a-e16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e5:26:a5:11:d2:ac:ef:e7:a1:6d:2f:6f:9c: a7:65:12:d4:4b:91:58:3c:43:a2:b2:9e:97:bb:3f: a6:d5:89:56:d6:98:bb:ca:89:d6:f3:09:8e:c4:15: 2e:48:a6:a7:84:c6:99:82:ed:d7:d1:e2:12:cd:24: b1:92:13:88:a3:f8:05:47:bf:d1:31:43:53:1c:f8: 8c:c0:dc:4f:6c:84:ad:1f:c1:0b:a0:58:9c:b6:15: 4e:1d:1a:59:7a:ed:73:52:d6:70:30:fe:98:1d:f3: ca:43:e4:34:15:08:34:01:7c:29:fc:9a:11:a2:00: 45:39:9b:a5:c2:55:60:15:d6:24:57:b3:62:b3:25: 2c:7a:eb:18:c7:7a:5e:ed:d1:28:c6:14:a6:82:b8: bf:5d:40:0e:31:76:6a:9b:9d:39:d8:91:a3:d4:c9: a1:9e:94:a5:29:08:16:84:f3:02:6e:f0:80:20:a0: 4c:9d:a2:86:5a:05:e3:cf:4e:d1:0d:2a:d0:35:04: 2a:49:e4:5b:43:95:a9:4f:e8:94:e7:ca:1f:11:b5: e1:ea:16:9f:f8:d3:99:2d:a5:06:85:68:ab:9d:77: b1:61:0e:07:f3:87:fd:b9:8d:4b:11:94:e4:a7:fe: 74:11:0d:d1:ca:da:bf:2c:26:35:41:12:83:1b:1c: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1D:49:45:27:72:4D:72:D9:BF:66:29:B9:59:9E:09:7A:E0:B6:E6 X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e0:2f:14:40:7f:89:28:4c:cf:ec:7a:6e:be:80:05:22:26: 5a:be:99:39:ed:81:d6:dc:f2:16:41:cb:f6:47:51:31:85:6f: 7a:b5:be:cf:8d:61:e6:52:af:af:5d:2b:0e:c4:51:16:77:de: 3a:85:5c:23:03:69:9f:67:89:ca:d5:22:3b:5c:5d:4b:63:39: 9e:dd:7f:c2:44:2b:62:0c:92:9c:1b:9b:62:e8:48:be:89:60: a0:83:97:4f:46:20:9d:d6:43:b8:df:cb:5e:0f:09:7d:7f:9c: 2b:eb:db:25:36:57:8e:30:89:88:e1:0e:93:6d:d9:8a:2d:59: 56:dd:63:03:58:3f:55:6c:b7:27:86:8b:db:31:14:eb:72:2c: 81:ef:38:d7:33:22:02:9f:d6:7d:b7:a5:0a:32:67:ae:e4:66: ab:68:7f:93:c1:99:8b:2a:f3:be:bd:d8:45:23:78:bb:67:db: 20:90:4a:b3:ae:1a:7c:7f:53:4c:0c:7b:73:c2:db:6b:2e:4e: 04:ef:bd:92:15:4a:e3:93:c3:a3:67:a4:ec:44:cb:0e:71:b0: 3e:49:73:71:f5:65:93:0a:de:d5:68:fb:22:12:b0:08:c8:64: 15:15:c5:35:65:47:fb:bd:89:2e:b0:cf:a8:df:f1:4b:eb:2f: 7d:43:25:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjUwODIzMDU1NjI2WhcNMjUwODMwMDU1NjI2WjAYMRYwFAYD VQQDEw02OGE5NTgwYS1lMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eUmpRHSrO/noW0vb5ynZRLUS5FYPEOisp6Xuz+m1YlW1pi7yonW8wmOxBUu SKanhMaZgu3X0eISzSSxkhOIo/gFR7/RMUNTHPiMwNxPbIStH8ELoFicthVOHRpZ eu1zUtZwMP6YHfPKQ+Q0FQg0AXwp/JoRogBFOZulwlVgFdYkV7NisyUseusYx3pe 7dEoxhSmgri/XUAOMXZqm5052JGj1MmhnpSlKQgWhPMCbvCAIKBMnaKGWgXjz07R DSrQNQQqSeRbQ5WpT+iU58ofEbXh6haf+NOZLaUGhWirnXexYQ4H84f9uY1LEZTk p/50EQ3Rytq/LCY1QRKDGxw39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcdSUUn ck1y2b9mKblZngl64LbmMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4C8UQH+JKEzP7HpuvoAFIiZavpk57YHW3PIWQcv2R1ExhW96tb7P jWHmUq+vXSsOxFEWd946hVwjA2mfZ4nK1SI7XF1LYzme3X/CRCtiDJKcG5ti6Ei+ iWCgg5dPRiCd1kO438teDwl9f5wr69slNleOMImI4Q6TbdmKLVlW3WMDWD9VbLcn hovbMRTrciyB7zjXMyICn9Z9t6UKMmeu5GaraH+TwZmLKvO+vdhFI3i7Z9sgkEqz rhp8f1NMDHtzwttrLk4E772SFUrjk8OjZ6TsRMsOcbA+SXNx9WWTCt7VaPsiErAI yGQVFcU1ZUf7vYkusM+o3/FL6y99QyVy -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:43 2025 by rpki-client