$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft File: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json) Hash identifier: q3hkkWvJRan6Vtkfor3/JBPa5Ga2f8wT02T0BJtpVKQ= Subject key identifier: 25:02:58:ED:8E:EE:6B:11:B8:09:D0:7C:AC:EB:9C:9B:07:15:6B:BC Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft Manifest number: 014B Signing time: Wed 13 May 2026 05:12:42 +0000 Manifest this update: Wed 13 May 2026 05:12:42 +0000 Manifest next update: Wed 20 May 2026 05:12:42 +0000 Files and hashes: 1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: HoKrrA4px87UdvKJ9UoBSRl+x86qVsezgRN4hPVIdFY=) 2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312 Validity Not Before: May 13 05:12:42 2026 GMT Not After : May 20 05:12:42 2026 GMT Subject: CN=6a04084a-44b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:25:72:0b:c5:3a:47:fc:52:9c:1e:5b:a1: b7:8f:f2:5b:68:31:92:68:fb:25:3f:74:11:91:b4: c9:48:8c:4e:a0:be:bd:ce:07:70:76:d0:3a:92:93: 20:62:be:b2:c2:53:7a:6d:68:4a:28:81:b0:1d:5f: fa:6d:54:ab:ac:5f:f7:b4:53:93:c3:68:94:8f:23: fe:8a:44:d5:84:07:09:39:cd:7c:cc:27:14:f9:6b: 3e:1c:4d:82:52:51:01:75:86:01:7f:4c:c4:c1:f3: d4:46:f9:26:fa:ea:39:f3:bc:9e:93:13:34:37:7f: cf:b4:7c:0d:66:7a:d6:75:39:02:a0:f3:bb:9f:90: 28:fc:d3:20:36:55:9e:7a:0e:88:9b:7f:70:26:0d: f8:5a:ff:1f:64:81:cc:15:f5:ab:f0:ef:8f:a2:32: 76:47:2d:b2:26:6e:1c:c7:20:8c:a4:19:80:de:73: ad:b5:a6:04:89:ba:f4:5b:9b:c5:c1:64:43:23:e4: 1b:8b:7b:25:b1:06:78:68:2c:ba:9a:5d:42:b0:27: 16:fb:1a:7b:b3:55:9e:d2:eb:38:14:c9:de:a2:e2: b1:59:b9:00:2b:72:41:24:c0:f9:93:28:c4:4f:94: 78:a5:23:f6:52:31:bc:b8:de:18:30:33:4b:24:7b: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:58:ED:8E:EE:6B:11:B8:09:D0:7C:AC:EB:9C:9B:07:15:6B:BC X509v3 Authority Key Identifier: keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:38:36:7f:00:63:f3:36:e9:53:d1:b3:6a:e9:b8:26:3e:a0: 2b:cd:c0:1d:a8:bd:6e:69:c0:74:ee:0c:3f:a4:ad:91:8c:51: a4:a4:d3:be:f4:c2:ec:67:6e:f5:a4:0b:fe:5b:b4:5b:b3:8d: 2c:66:7c:ad:5c:ec:f4:11:c9:ba:31:98:ed:a7:b7:ff:a4:46: fb:69:39:44:93:ed:57:ec:a7:ac:e9:4b:10:cc:42:66:3f:9c: 17:dd:74:bb:43:65:f1:27:39:c3:f3:0f:eb:cb:cf:5e:c3:68: c8:2d:3b:23:9c:bd:0d:fe:bd:73:81:c4:21:48:6c:bb:ce:8c: f5:68:e4:d5:d8:71:82:d7:7e:42:42:57:19:b2:e7:97:93:54: e2:1d:54:dc:fe:fa:7a:cf:f6:83:c1:3c:c5:79:dd:76:8d:db: b3:d1:58:d0:3c:52:42:72:20:db:dd:d3:95:f1:18:b4:22:cf: 78:01:10:85:c0:ca:e0:b3:bc:f5:9b:23:08:c3:7e:10:94:d8: a7:66:fb:7c:07:2c:a6:c9:46:7c:27:d9:b0:29:78:0e:75:94: 88:d7:9d:47:20:3a:9d:7f:ec:23:6d:19:c4:9d:8a:28:64:ff: b6:28:bb:57:c7:e7:52:e4:93:2a:cf:6a:2e:c6:8b:1e:63:bc: ed:2a:ec:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF NDNFNkIzMTIwHhcNMjYwNTEzMDUxMjQyWhcNMjYwNTIwMDUxMjQyWjAYMRYwFAYD VQQDEw02YTA0MDg0YS00NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rYlcgvFOkf8UpweW6G3j/JbaDGSaPslP3QRkbTJSIxOoL69zgdwdtA6kpMg Yr6ywlN6bWhKKIGwHV/6bVSrrF/3tFOTw2iUjyP+ikTVhAcJOc18zCcU+Ws+HE2C UlEBdYYBf0zEwfPURvkm+uo587yekxM0N3/PtHwNZnrWdTkCoPO7n5Ao/NMgNlWe eg6Im39wJg34Wv8fZIHMFfWr8O+PojJ2Ry2yJm4cxyCMpBmA3nOttaYEibr0W5vF wWRDI+Qbi3slsQZ4aCy6ml1CsCcW+xp7s1We0us4FMneouKxWbkAK3JBJMD5kyjE T5R4pSP2UjG8uN4YMDNLJHvCmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUCWO2O 7msRuAnQfKzrnJsHFWu8MB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkjg2fwBj8zbpU9Gzaum4Jj6gK83AHai9bmnAdO4MP6StkYxRpKTTvvTC7Gdu 9aQL/lu0W7ONLGZ8rVzs9BHJujGY7ae3/6RG+2k5RJPtV+ynrOlLEMxCZj+cF910 u0Nl8Sc5w/MP68vPXsNoyC07I5y9Df69c4HEIUhsu86M9Wjk1dhxgtd+QkJXGbLn l5NU4h1U3P76es/2g8E8xXnddo3bs9FY0DxSQnIg293TlfEYtCLPeAEQhcDK4LO8 9ZsjCMN+EJTYp2b7fAcspslGfCfZsCl4DnWUiNedRyA6nX/sI20ZxJ2KKGT/tii7 V8fnUuSTKs9qLsaLHmO87SrsKg== -----END CERTIFICATE-----Generated at Wed May 13 15:02:16 2026 by rpki-client