$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: uUlrcnuvER8dGej1sAEFTaycPQ+o3V/KNF9xwhCzC7M= Subject key identifier: 9B:BF:B4:05:3E:EC:40:65:40:36:CB:FE:DC:26:73:99:92:1E:A4:42 Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 08D3 Signing time: Sun 20 Jul 2025 22:58:49 +0000 Manifest this update: Sun 20 Jul 2025 22:58:49 +0000 Manifest next update: Sun 27 Jul 2025 22:58:49 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: Slen9kCPPAHme7OcUa/NTv6BIpnCJftMT9jjDCYxgrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: Jul 20 22:58:49 2025 GMT Not After : Jul 27 22:58:49 2025 GMT Subject: CN=687d74a9-c2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:b0:2d:4c:44:30:73:ee:29:d1:da:b4:60: 90:dc:f4:d3:8d:1e:8e:98:cc:31:2d:50:15:ba:82: d0:45:7a:be:48:c6:dc:9d:5b:b0:07:6d:a8:15:9c: 3d:44:df:51:3d:7d:fa:ba:61:70:69:73:71:55:74: b0:73:c1:6c:ad:4f:69:39:5d:62:7c:ce:fc:60:38: ba:64:36:82:c3:5f:74:46:21:e1:b2:c7:71:52:12: 35:57:3f:6e:e9:4a:0b:e4:78:4b:09:c8:6c:d7:22: 7c:df:3f:1a:ed:09:e9:d4:8e:c9:f3:df:6e:c8:60: 9a:5f:b5:2b:78:b9:c5:81:1c:05:52:e6:24:dc:6b: cc:66:c3:34:57:16:e8:34:bd:71:71:96:e8:e9:2f: d5:14:73:e1:dc:5d:f1:ef:bf:9b:02:64:09:c0:a7: ab:60:63:19:bc:4b:1a:1b:e2:73:39:8c:7e:ab:da: 05:87:cc:af:88:78:06:1a:4e:86:e6:8f:b1:fc:a4: 91:d0:67:fc:da:e3:94:0c:94:98:0b:81:ca:f4:70: 58:35:8e:7d:97:85:7c:37:85:f1:8a:da:1b:32:c0: eb:d8:c4:30:50:61:1a:fa:85:30:26:b9:a4:3b:ae: 99:ff:9d:ac:d1:f0:af:4d:4d:9b:8a:4a:fc:88:8e: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:B4:05:3E:EC:40:65:40:36:CB:FE:DC:26:73:99:92:1E:A4:42 X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:44:2c:fb:9d:d9:96:6f:ee:c6:00:b4:cc:d9:47:00:75:e5: af:c3:f9:01:78:ba:ad:b5:80:b5:0c:ec:28:c6:14:6d:65:90: 75:98:d2:21:32:0a:ca:7c:0f:94:65:ca:2a:ca:93:62:a2:91: 5a:4a:62:d8:15:a1:16:4c:1b:78:d4:62:1d:43:ad:3e:d6:e4: 90:ab:a5:5f:90:c8:a1:7a:4f:9e:95:19:67:71:b6:e7:c4:75: 3d:0b:64:f2:a2:03:e4:c3:16:0d:bf:8c:b5:f1:0d:bd:0a:39: 5e:89:3e:f4:c9:ed:98:1a:92:29:e3:9e:c1:d3:3f:e5:9f:f8: 42:26:ce:fa:05:49:8b:c4:30:d0:53:43:ec:c5:eb:2c:f5:5d: c1:b9:23:9d:2e:53:9d:fe:9a:7c:86:1d:73:60:97:a8:ec:e5: 63:c4:1e:17:c8:6d:da:10:2c:24:e5:7f:75:c7:82:35:d4:d9: 27:75:ef:65:ca:2e:27:fb:eb:c2:7f:8b:29:67:1e:7e:e5:76: 33:62:69:6c:d9:29:90:c1:14:64:70:71:a4:5e:4d:1b:b0:8f: c6:3a:5b:67:9b:90:09:98:a7:01:d3:3d:e6:fd:b3:f4:36:2f: 1d:7f:cd:57:0c:a6:c9:0d:46:7f:11:2f:3d:42:b1:92:a3:a9: 40:3a:c6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUwNzIwMjI1ODQ5WhcNMjUwNzI3MjI1ODQ5WjAYMRYwFAYD VQQDEw02ODdkNzRhOS1jMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vuwLUxEMHPuKdHatGCQ3PTTjR6OmMwxLVAVuoLQRXq+SMbcnVuwB22oFZw9 RN9RPX36umFwaXNxVXSwc8FsrU9pOV1ifM78YDi6ZDaCw190RiHhssdxUhI1Vz9u 6UoL5HhLCchs1yJ83z8a7Qnp1I7J899uyGCaX7UreLnFgRwFUuYk3GvMZsM0Vxbo NL1xcZbo6S/VFHPh3F3x77+bAmQJwKerYGMZvEsaG+JzOYx+q9oFh8yviHgGGk6G 5o+x/KSR0Gf82uOUDJSYC4HK9HBYNY59l4V8N4XxitobMsDr2MQwUGEa+oUwJrmk O66Z/52s0fCvTU2bikr8iI6S7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu/tAU+ 7EBlQDbL/twmc5mSHqRCMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsRCz7ndmWb+7GALTM2UcAdeWvw/kBeLqttYC1DOwoxhRtZZB1mNIh MgrKfA+UZcoqypNiopFaSmLYFaEWTBt41GIdQ60+1uSQq6VfkMihek+elRlncbbn xHU9C2TyogPkwxYNv4y18Q29CjleiT70ye2YGpIp457B0z/ln/hCJs76BUmLxDDQ U0Psxess9V3BuSOdLlOd/pp8hh1zYJeo7OVjxB4XyG3aECwk5X91x4I11Nknde9l yi4n++vCf4spZx5+5XYzYmls2SmQwRRkcHGkXk0bsI/GOltnm5AJmKcB0z3m/bP0 Ni8df81XDKbJDUZ/ES89QrGSo6lAOsYo -----END CERTIFICATE-----Generated at Mon Jul 21 05:50:28 2025 by rpki-client