$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: gd0GPZGjhlB9V4L58YJ3c+ObQFGnHWDZMEarmynlEEo= Subject key identifier: 28:A8:7F:53:96:80:E1:41:6F:E9:8A:81:74:17:7D:ED:92:5F:6B:52 Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 1F Signing time: Tue 09 Sep 2025 08:02:05 +0000 Manifest this update: Tue 09 Sep 2025 08:02:05 +0000 Manifest next update: Tue 16 Sep 2025 08:02:05 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: PNNJqzLCOc+cWsitei7XstRv07tbTUjp1poIKxYBh2c=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Sep 9 08:02:05 2025 GMT Not After : Sep 16 08:02:05 2025 GMT Subject: CN=68bfdefd-b277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:9e:21:f6:22:e0:2b:66:72:61:23:96:c7: 73:31:b4:6f:51:35:fd:93:5c:c1:db:f3:a4:65:f5: 0e:36:d4:2c:71:ac:d0:9f:81:88:34:d7:6b:97:76: 41:5e:d6:39:b7:cd:82:91:38:59:91:10:6b:ab:ed: 9e:00:34:46:2c:6f:89:f2:9e:c7:54:41:b1:4b:26: de:4a:a6:c5:2f:cb:a1:2a:f3:20:4a:93:d7:bf:d3: b9:ee:17:a7:1f:c0:b0:12:77:8a:f0:4e:2d:e0:a1: 32:50:da:43:85:4e:6d:7d:d3:7e:19:47:9e:51:74: c2:b0:27:43:54:6a:2c:9e:64:d4:f9:65:3f:37:d0: a9:17:d2:41:6b:8b:77:f1:99:36:9c:97:31:b5:5c: a6:45:64:27:27:51:32:e3:04:b4:ee:f3:9f:2e:1d: e0:58:6f:5e:4f:9f:df:f4:3b:e3:09:d8:3c:c6:35: b5:76:20:69:f3:72:0f:dd:e8:d2:14:4b:c6:bd:dd: ac:76:46:0c:21:ac:45:64:e5:d3:10:a4:55:e4:55: 9b:45:79:45:17:9e:8c:fb:54:39:2e:e6:45:80:39: 69:97:c4:b2:3f:c8:34:d9:d8:82:7d:03:2c:3c:53: 1f:fa:c6:09:65:be:7a:b0:a9:2c:ee:ae:26:fa:46: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:7F:53:96:80:E1:41:6F:E9:8A:81:74:17:7D:ED:92:5F:6B:52 X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:67:a4:c9:84:fd:f2:58:43:bd:df:c9:3f:4d:4f:85:0d: 6b:a3:5e:9c:c1:ab:9a:fe:91:b2:3b:6c:28:6f:3c:e4:f5:80: e8:47:a5:e8:82:a6:53:45:54:6f:67:50:c5:ee:73:99:12:29: c4:d7:5e:b9:8f:de:cb:cc:bd:3d:76:21:4e:55:9c:3e:f7:cc: b8:ab:e2:6a:a5:dc:ae:60:57:e6:bd:b2:81:e0:db:68:f3:6b: 88:cf:e5:90:c3:61:c4:cb:06:9a:06:17:2b:30:47:d1:6a:a6: 09:94:28:ea:f1:cf:59:5f:3a:de:53:61:22:f3:d9:ab:27:6c: 80:c7:d6:d6:ae:3b:1d:81:ba:38:34:c3:c2:f6:9d:39:7f:17: 01:04:0c:c4:54:61:c0:13:bc:f5:82:46:b2:19:f1:54:19:97: e6:79:5b:03:a9:5e:e9:4a:3e:ad:b6:4f:d2:74:58:45:75:d1: c7:0d:78:db:ed:e6:7a:d6:38:9d:e9:0a:e2:74:0f:f0:04:9b: d8:b6:36:8e:a3:86:aa:97:28:f0:79:a6:e6:69:ae:14:d5:0d: 2e:8f:a4:b1:ea:54:23:21:3b:97:e1:5e:8f:14:4a:e8:61:4e: b3:62:fc:73:7d:71:51:ac:d8:45:e4:02:e8:b8:cb:9c:fa:4b: 95:63:97:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTA5MDkwODAyMDVaFw0yNTA5MTYwODAyMDVaMBgxFjAUBgNV BAMTDTY4YmZkZWZkLWIyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAHJ4h9iLgK2ZyYSOWx3MxtG9RNf2TXMHb86Rl9Q421CxxrNCfgYg012uXdkFe 1jm3zYKROFmREGur7Z4ANEYsb4nynsdUQbFLJt5KpsUvy6Eq8yBKk9e/07nuF6cf wLASd4rwTi3goTJQ2kOFTm19034ZR55RdMKwJ0NUaiyeZNT5ZT830KkX0kFri3fx mTaclzG1XKZFZCcnUTLjBLTu858uHeBYb15Pn9/0O+MJ2DzGNbV2IGnzcg/d6NIU S8a93ax2RgwhrEVk5dMQpFXkVZtFeUUXnoz7VDku5kWAOWmXxLI/yDTZ2IJ9Ayw8 Ux/6xgllvnqwqSzurib6Rh6bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKKh/U5aA 4UFv6YqBdBd97ZJfa1IwHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGH4Z6TJhP3yWEO938k/TU+FDWujXpzBq5r+kbI7bChvPOT1gOhHpeiC plNFVG9nUMXuc5kSKcTXXrmP3svMvT12IU5VnD73zLir4mql3K5gV+a9soHg22jz a4jP5ZDDYcTLBpoGFyswR9FqpgmUKOrxz1lfOt5TYSLz2asnbIDH1tauOx2Bujg0 w8L2nTl/FwEEDMRUYcATvPWCRrIZ8VQZl+Z5WwOpXulKPq22T9J0WEV10ccNeNvt 5nrWOJ3pCuJ0D/AEm9i2No6jhqqXKPB5puZprhTVDS6PpLHqVCMhO5fhXo8USuhh TrNi/HN9cVGs2EXkAui4y5z6S5Vjl+g= -----END CERTIFICATE-----Generated at Tue Sep 9 10:57:58 2025 by rpki-client