$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: Bz/LgsNkoTnh8k2jFdk9ox/Xoggfnw3v7KUPjRRnfAM= Subject key identifier: F7:D1:0B:8F:3A:C7:A0:8C:42:37:57:F4:D3:6E:93:45:AE:9D:94:4D Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 34 Signing time: Sat 19 Jul 2025 07:52:41 +0000 Manifest this update: Sat 19 Jul 2025 07:52:40 +0000 Manifest next update: Sat 26 Jul 2025 07:52:40 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: 6jbQE4OO4Ufc1JxMBXGLZGxNSMfY86sZe4EpoRKSOu4=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Jul 19 07:52:40 2025 GMT Not After : Jul 26 07:52:40 2025 GMT Subject: CN=687b4ec8-8bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:49:7e:1c:3d:b1:5d:81:96:0a:d0:79:5b: b8:a5:f9:52:b5:83:eb:5e:ac:81:dd:35:36:c6:53: d1:08:64:d6:8c:af:cc:0d:aa:de:fa:62:83:c7:2a: 4e:2c:9e:8c:92:63:30:c5:7f:fa:7d:72:ff:ae:ec: 25:fc:53:b8:bf:4d:c5:a0:28:19:7e:9c:18:76:1c: 3a:76:96:80:e0:06:e3:5c:6c:b3:d6:2d:91:a6:98: f8:5f:7e:b2:33:c4:4d:15:0e:df:62:c4:fa:c2:00: f9:95:41:27:88:6d:c0:7c:36:cd:3b:2f:7d:e0:70: ef:15:54:32:0d:63:3d:49:00:d7:f4:8c:e6:76:21: f9:01:c3:3d:c0:26:01:da:8a:8f:ff:63:4f:0e:e2: 89:cf:13:27:06:2e:2c:38:f5:00:73:eb:fc:41:9e: dd:31:6f:08:48:3b:5a:97:3c:ba:28:16:4e:09:75: 79:63:5b:3c:de:fe:df:ab:99:17:d4:62:a1:93:8c: 9c:93:89:2f:ac:d3:29:e2:b2:89:89:6f:6e:f6:6f: 47:21:f8:8e:1c:a5:27:f1:fc:e5:e3:b8:45:1a:21: 66:b7:f6:16:d0:7b:44:e4:b6:ee:b0:2c:39:e6:01: 8c:ed:4a:62:b7:69:04:6a:bd:80:79:b5:b7:e3:02: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D1:0B:8F:3A:C7:A0:8C:42:37:57:F4:D3:6E:93:45:AE:9D:94:4D X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:17:56:20:23:42:f4:01:42:cb:c4:d6:02:9b:5e:5d:30:06: 66:db:67:15:81:49:a2:12:12:87:f4:e2:74:36:79:7c:12:72: 27:c5:c8:cb:72:42:bd:45:77:8a:3d:c7:e4:ef:88:e8:0f:b1: 34:be:4a:6c:f9:40:85:03:be:a5:3b:b1:5b:f3:03:85:5c:6e: 1d:8d:84:f8:ff:a8:38:28:0e:f9:ed:3a:06:49:62:18:ae:b8: ff:3c:7e:3e:c1:70:60:fd:ba:8d:a8:4b:cf:d0:68:aa:44:fc: 58:a6:74:a9:e8:2f:9e:24:85:6b:04:dd:a7:1a:5a:0c:58:e6: fa:5d:78:a9:70:6b:e5:97:b1:82:dc:d6:d7:cf:ed:c0:17:31: 25:71:5e:89:bb:8b:9b:a3:fb:80:37:54:73:77:98:fc:0c:02: 7b:7b:cf:c2:2f:32:93:d4:14:c6:33:7a:2e:66:0b:4d:7d:5b: 82:ca:29:fd:57:49:1f:85:58:f2:eb:64:98:26:6f:ff:5f:33: d5:46:1d:4d:28:cd:dd:c4:f2:c9:63:93:23:d0:33:ed:d2:3b: 39:43:f5:8a:b9:84:f3:e4:03:f8:e9:f1:13:e3:bb:6c:28:14: 00:1c:97:c3:74:df:af:c7:e3:a7:f9:d1:87:79:15:9e:4a:70: 62:51:08:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTA3MTkwNzUyNDBaFw0yNTA3MjYwNzUyNDBaMBgxFjAUBgNV BAMTDTY4N2I0ZWM4LThiYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSn0l+HD2xXYGWCtB5W7il+VK1g+terIHdNTbGU9EIZNaMr8wNqt76YoPHKk4s noySYzDFf/p9cv+u7CX8U7i/TcWgKBl+nBh2HDp2loDgBuNcbLPWLZGmmPhffrIz xE0VDt9ixPrCAPmVQSeIbcB8Ns07L33gcO8VVDINYz1JANf0jOZ2IfkBwz3AJgHa io//Y08O4onPEycGLiw49QBz6/xBnt0xbwhIO1qXPLooFk4JdXljWzze/t+rmRfU YqGTjJyTiS+s0ynisomJb272b0ch+I4cpSfx/OXjuEUaIWa39hbQe0Tktu6wLDnm AYztSmK3aQRqvYB5tbfjApUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU99ELjzrH oIxCN1f0026TRa6dlE0wHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANYXViAjQvQBQsvE1gKbXl0wBmbbZxWBSaISEof04nQ2eXwScifFyMty Qr1Fd4o9x+TviOgPsTS+Smz5QIUDvqU7sVvzA4Vcbh2NhPj/qDgoDvntOgZJYhiu uP88fj7BcGD9uo2oS8/QaKpE/FimdKnoL54khWsE3acaWgxY5vpdeKlwa+WXsYLc 1tfP7cAXMSVxXom7i5uj+4A3VHN3mPwMAnt7z8IvMpPUFMYzei5mC019W4LKKf1X SR+FWPLrZJgmb/9fM9VGHU0ozd3E8sljkyPQM+3SOzlD9Yq5hPPkA/jp8RPju2wo FAAcl8N036/H46f50Yd5FZ5KcGJRCPg= -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:02 2025 by rpki-client