$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: yCgIni2HXZXzuIkgyIw0pk3K4IrZg1PaUJFZvaca/Os= Subject key identifier: F2:B1:BA:3B:4D:98:E5:95:82:2C:9D:11:7D:45:E5:6C:F0:A2:94:2A Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 04 Signing time: Sat 19 Jul 2025 08:30:00 +0000 Manifest this update: Sat 19 Jul 2025 08:30:00 +0000 Manifest next update: Sat 26 Jul 2025 08:30:00 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: BBLl2hWDP4KLunko1A6or/u6PKXeb4d4d9QfdxPaYZM=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Jul 19 08:30:00 2025 GMT Not After : Jul 26 08:30:00 2025 GMT Subject: CN=687b5788-214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:36:d1:51:15:40:b4:d8:d5:e4:ce:55:9c: ce:38:c5:47:5a:ac:a6:9a:a1:2f:57:96:29:ae:3f: bf:55:d3:d9:00:25:3b:4a:e7:c4:d7:d0:40:68:39: 15:62:ae:e5:5f:67:20:f9:ad:1c:20:81:3c:c3:be: e7:fa:24:8a:db:48:05:7a:67:4d:97:13:8b:26:22: 5f:68:a1:70:e8:09:0c:8f:bf:2e:7d:36:41:3b:e6: e2:7b:c7:d3:5b:1f:37:79:c2:02:d6:b3:aa:92:ee: 34:6a:67:fd:ee:9c:0d:a7:f4:6e:e2:4a:47:fc:61: c1:be:db:06:64:b2:f6:00:38:4f:1b:6c:f7:84:37: b0:c1:a6:ba:2e:15:38:ac:52:60:33:68:5b:79:4a: 6f:8f:76:97:3d:d9:0e:f4:89:dd:03:2e:3b:46:0f: b6:e5:a5:c5:16:0b:82:e0:c5:cd:28:d4:e3:33:67: 2b:3b:c2:29:ce:e8:6a:de:45:4d:fe:75:61:5e:19: bc:01:71:d1:f2:b6:58:52:a0:b0:02:a5:f3:fd:42: 3b:b6:d2:aa:84:71:e2:f6:a8:bb:3d:b0:d6:44:b6: 86:d4:6e:0e:c5:2a:bc:e4:a1:f1:07:71:72:ea:0c: 9a:f4:1c:96:a1:3c:48:d5:63:0b:df:b3:d5:51:c7: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B1:BA:3B:4D:98:E5:95:82:2C:9D:11:7D:45:E5:6C:F0:A2:94:2A X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:5d:9c:15:c6:38:06:a9:8f:29:e5:ed:69:3c:1d:9f:c4:50: ca:80:16:cb:de:e9:bb:3c:11:2e:d6:4c:e8:d8:35:69:cd:86: c6:24:ab:a0:7a:68:93:25:14:5a:87:71:30:f7:22:09:4b:4a: b0:d2:72:92:50:ee:7a:a6:ff:ef:c6:d6:ff:e4:23:b3:b2:83: 6d:9f:ed:39:23:ce:67:0b:2f:19:da:29:14:7b:fd:d2:5e:5b: aa:70:4e:5a:f9:a8:ec:83:d3:65:16:39:ec:29:a5:4e:50:f6: 44:8d:6b:63:df:e2:9d:6a:05:55:08:8a:d2:a1:13:17:c1:e6: e6:37:ba:2a:6a:91:13:1b:e2:8e:2b:47:c8:62:9e:7b:dd:d8: 1f:c4:16:c9:9d:4d:26:7d:4e:49:25:17:12:b2:95:c5:1f:eb: 9b:ef:fd:6b:24:7d:d1:cd:e2:8b:e2:fa:a7:02:15:55:30:45: 59:37:0e:83:e3:0d:dc:aa:84:3e:12:e4:9c:11:af:aa:af:df: 90:42:90:37:bc:90:0b:cc:57:b3:df:32:8d:9b:75:d5:ad:36: 98:50:ba:ae:82:45:04:d5:26:fc:a5:78:4d:3f:31:37:21:92: 51:23:dc:02:cc:48:0b:11:01:cf:fb:c7:59:7f:f5:dc:74:6f: c8:83:ae:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTA3MTkwODMwMDBaFw0yNTA3MjYwODMwMDBaMBgxFjAUBgNV BAMTDTY4N2I1Nzg4LTIxNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBbzbRURVAtNjV5M5VnM44xUdarKaaoS9XlimuP79V09kAJTtK58TX0EBoORVi ruVfZyD5rRwggTzDvuf6JIrbSAV6Z02XE4smIl9ooXDoCQyPvy59NkE75uJ7x9Nb Hzd5wgLWs6qS7jRqZ/3unA2n9G7iSkf8YcG+2wZksvYAOE8bbPeEN7DBprouFTis UmAzaFt5Sm+Pdpc92Q70id0DLjtGD7blpcUWC4Lgxc0o1OMzZys7winO6GreRU3+ dWFeGbwBcdHytlhSoLACpfP9Qju20qqEceL2qLs9sNZEtobUbg7FKrzkofEHcXLq DJr0HJahPEjVYwvfs9VRx/1lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8rG6O02Y 5ZWCLJ0RfUXlbPCilCowHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANldnBXGOAapjynl7Wk8HZ/EUMqAFsve6bs8ES7WTOjYNWnNhsYkq6B6 aJMlFFqHcTD3IglLSrDScpJQ7nqm/+/G1v/kI7Oyg22f7TkjzmcLLxnaKRR7/dJe W6pwTlr5qOyD02UWOewppU5Q9kSNa2Pf4p1qBVUIitKhExfB5uY3uipqkRMb4o4r R8hinnvd2B/EFsmdTSZ9TkklFxKylcUf65vv/WskfdHN4ovi+qcCFVUwRVk3DoPj DdyqhD4S5JwRr6qv35BCkDe8kAvMV7PfMo2bddWtNphQuq6CRQTVJvyleE0/MTch klEj3ALMSAsRAc/7x1l/9dx0b8iDrjs= -----END CERTIFICATE-----Generated at Sun Jul 20 03:43:11 2025 by rpki-client