$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: G2jDlQz4+WHUHXrJiecqKJzBuI0h+ZeSmD6djEKVxf4= Subject key identifier: 5B:CB:12:9D:52:84:81:3D:54:EB:76:C1:1C:9E:FB:E5:13:9D:3C:9A Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 093F Signing time: Tue 04 Nov 2025 22:44:00 +0000 Manifest this update: Tue 04 Nov 2025 22:43:59 +0000 Manifest next update: Tue 11 Nov 2025 22:43:59 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: 7SQFfeWNB9bmxjdaA95jekKac4mXacOvUy61nY3F+F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: Nov 4 22:43:59 2025 GMT Not After : Nov 11 22:43:59 2025 GMT Subject: CN=690a81b0-fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:28:c8:83:61:e5:04:bb:3a:82:d7:7f:36: 2d:2d:70:76:be:da:b2:95:00:bd:f6:33:34:cf:06: 7e:f6:7c:f0:63:a9:f1:17:61:1f:fc:54:99:0c:0a: c0:4f:cd:77:79:5e:fd:c1:2d:48:72:d2:4d:e0:8c: 95:7b:6a:0c:c8:b3:ed:e0:3e:84:5a:95:6b:f7:ad: 62:36:ff:a8:cf:89:3f:d4:51:37:c7:f4:eb:3c:35: 18:e7:b6:b6:f0:f9:2b:0a:d6:d9:e2:52:b3:b0:e8: 1b:ca:27:31:71:f8:76:b9:93:a9:62:74:3e:59:56: a7:bc:74:40:87:26:70:5d:08:c6:93:af:6d:9c:89: 8b:44:fd:6b:13:dc:7f:c1:72:49:5a:d4:fb:8d:8c: 25:74:db:61:66:be:ec:63:2b:2b:ba:68:64:2b:e6: 6a:41:fd:ac:75:e9:cf:65:a9:65:c0:bc:ca:28:fa: 45:95:fd:61:39:de:51:3c:32:e4:06:35:6b:bc:02: 42:16:b4:82:bd:1e:b1:61:13:58:2b:b3:78:d4:8c: be:2a:e9:ee:fe:58:48:a9:3b:a5:95:d6:8b:f2:0f: 76:ca:f7:0e:da:42:fe:43:b8:4a:c2:44:03:d7:3f: cd:9b:08:82:2c:ce:33:7e:f1:c4:95:f5:89:e6:70: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:12:9D:52:84:81:3D:54:EB:76:C1:1C:9E:FB:E5:13:9D:3C:9A X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ad:a3:49:00:05:58:3c:c8:35:1a:44:fb:ca:2e:70:24:6a: e2:4e:3a:52:30:1d:7c:95:36:43:1f:47:35:34:2d:8f:97:bd: a5:76:7c:7e:8a:29:b4:88:ea:9d:65:dc:11:db:4a:c5:21:9d: 9c:b5:94:b9:cd:d7:89:52:b5:7e:4e:2b:85:c7:1c:68:ec:df: 65:dc:c0:52:83:bd:39:d8:ed:a2:f9:f9:e3:4d:b5:6c:39:5e: 16:c6:ad:b8:05:21:20:9f:5e:46:07:ae:25:70:6c:83:62:c5: 51:32:20:5d:51:a0:97:91:72:46:18:55:07:e3:3b:74:9e:9d: fc:d7:68:37:a6:a4:ae:94:8d:31:1a:c7:be:e2:1f:29:39:5a: 6b:a1:cd:eb:1d:4f:10:76:9b:81:a8:e5:df:c2:36:55:4c:a5: 00:b2:0c:99:fb:6e:ad:29:46:0d:13:db:73:68:c8:fc:7c:af: 27:05:58:33:3e:c5:ac:d0:4f:8c:bd:2b:73:a3:a8:dd:98:8c: 7c:c4:a0:14:c1:7b:87:21:85:5c:94:81:b4:f1:89:b3:29:ec: b3:2c:07:c9:65:5d:2d:38:f4:bd:bb:0d:a7:4a:aa:6b:62:4b: dc:ac:00:19:9f:85:4f:ed:4c:7b:a2:c4:56:64:45:ea:7e:f9: 2c:5b:64:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUxMTA0MjI0MzU5WhcNMjUxMTExMjI0MzU5WjAYMRYwFAYD VQQDEw02OTBhODFiMC1mYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpIoyINh5QS7OoLXfzYtLXB2vtqylQC99jM0zwZ+9nzwY6nxF2Ef/FSZDArA T813eV79wS1IctJN4IyVe2oMyLPt4D6EWpVr961iNv+oz4k/1FE3x/TrPDUY57a2 8PkrCtbZ4lKzsOgbyicxcfh2uZOpYnQ+WVanvHRAhyZwXQjGk69tnImLRP1rE9x/ wXJJWtT7jYwldNthZr7sYysrumhkK+ZqQf2sdenPZallwLzKKPpFlf1hOd5RPDLk BjVrvAJCFrSCvR6xYRNYK7N41Iy+Kunu/lhIqTulldaL8g92yvcO2kL+Q7hKwkQD 1z/NmwiCLM4zfvHElfWJ5nCVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvLEp1S hIE9VOt2wRye++UTnTyaMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIraNJAAVYPMg1GkT7yi5wJGriTjpSMB18lTZDH0c1NC2Pl72ldnx+ iim0iOqdZdwR20rFIZ2ctZS5zdeJUrV+TiuFxxxo7N9l3MBSg7052O2i+fnjTbVs OV4Wxq24BSEgn15GB64lcGyDYsVRMiBdUaCXkXJGGFUH4zt0np3812g3pqSulI0x Gse+4h8pOVproc3rHU8QdpuBqOXfwjZVTKUAsgyZ+26tKUYNE9tzaMj8fK8nBVgz PsWs0E+MvStzo6jdmIx8xKAUwXuHIYVclIG08YmzKeyzLAfJZV0tOPS9uw2nSqpr YkvcrAAZn4VP7Ux7osRWZEXqfvksW2Rk -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:40 2025 by rpki-client