$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: qjG373yFwgpD7gv09vLlRGvaIfzXxA9+Kmm+eFmGZbI= Subject key identifier: 3B:08:B3:07:FD:16:1E:9D:97:EB:01:F0:A2:7F:F4:6A:2B:42:16:BC Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 0618 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 08A1 Signing time: Sat 31 May 2025 23:02:53 +0000 Manifest this update: Sat 31 May 2025 23:02:52 +0000 Manifest next update: Sat 07 Jun 2025 23:02:52 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: fJSAiUv083/ej+TliLPk6dcpnEiunfGx9uOT45hTnL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1560 (0x618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: May 31 23:02:52 2025 GMT Not After : Jun 7 23:02:52 2025 GMT Subject: CN=683b8a9d-453c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:49:9e:af:19:01:81:1d:bf:71:bb:2e:b9: fd:f1:83:b2:be:68:69:10:75:11:9d:20:54:65:22: b4:ea:55:2b:f4:08:cb:03:63:26:e2:81:96:68:ca: 2d:42:31:25:cf:63:63:23:a5:0e:a3:7b:b6:45:b2: 7f:a1:40:12:ab:f0:c4:84:f0:cd:95:af:8e:70:05: 2b:82:d1:86:60:27:4b:50:cf:e9:c8:70:25:ae:bc: 21:f0:66:b3:7b:43:e8:8d:5e:7f:24:aa:93:ec:6e: e2:a3:49:84:8c:32:d3:ab:78:26:9b:f4:46:ac:1f: d9:56:bb:4a:dd:44:2b:06:95:90:75:ba:55:85:10: 4b:06:a5:55:e6:59:f1:f7:ef:1e:b5:a4:90:0d:62: d3:e3:a2:bc:72:cf:72:30:6c:1c:84:29:d0:b9:ba: 63:d1:74:00:82:15:b9:e0:81:1d:a3:ee:d8:b9:cb: bf:9a:d6:ee:4a:e8:7c:2c:33:be:72:c7:b3:ab:c4: a7:9e:e9:b5:dd:8f:7d:09:ce:7c:80:07:e6:55:d3: 29:2e:2a:66:bb:d4:6f:ee:c3:22:d8:cb:f5:0b:5c: 3b:ae:b9:2d:7c:66:4d:e8:e9:4f:82:43:db:51:35: 31:03:06:96:b8:e1:08:fe:3e:05:b7:a9:71:64:23: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:B3:07:FD:16:1E:9D:97:EB:01:F0:A2:7F:F4:6A:2B:42:16:BC X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b5:cf:e1:9c:ee:06:8a:3e:b7:43:d0:77:a8:59:46:84:70: 94:fe:7f:3e:af:41:3d:42:2b:f6:fa:f1:48:3c:5d:07:5b:cf: 1b:a1:68:80:6a:0e:3b:3a:34:95:bf:e5:da:d7:1c:12:72:ed: 6b:3f:fa:e6:eb:8e:e6:5c:6a:9c:fd:34:e7:3e:70:d7:e1:21: 09:6b:8c:91:42:f9:89:01:77:18:67:5f:e4:f8:2b:fa:6e:0e: 9d:5e:cf:3d:a9:04:29:d6:c8:a9:a9:a0:80:a0:6e:60:c3:d5: 2e:f6:3b:02:9e:1c:f2:77:d6:6d:80:5f:5a:41:7e:ee:4c:13: 17:ae:6a:21:4c:6f:92:b8:dd:5d:87:12:16:1d:04:f6:f2:74: d6:f9:35:a2:30:f3:ac:35:91:cb:47:29:11:9b:6b:79:e7:6e: 37:51:16:7a:0f:c8:71:bb:3f:ab:ed:48:67:41:7c:13:e0:22: 17:1d:1d:f9:d6:df:61:9e:01:01:2f:62:9c:61:a2:55:83:8b: 3c:04:be:86:d9:ab:69:d0:b6:a5:73:74:51:e0:fc:fd:6a:eb: 64:ce:3c:bb:55:25:f4:fd:53:3a:cc:2a:1f:19:36:59:34:3d: d7:5a:08:cd:2f:17:40:7c:85:0f:83:a4:34:b0:a0:a0:ec:1d: 11:b8:58:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUwNTMxMjMwMjUyWhcNMjUwNjA3MjMwMjUyWjAYMRYwFAYD VQQDEw02ODNiOGE5ZC00NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SNJnq8ZAYEdv3G7Lrn98YOyvmhpEHURnSBUZSK06lUr9AjLA2Mm4oGWaMot QjElz2NjI6UOo3u2RbJ/oUASq/DEhPDNla+OcAUrgtGGYCdLUM/pyHAlrrwh8Gaz e0PojV5/JKqT7G7io0mEjDLTq3gmm/RGrB/ZVrtK3UQrBpWQdbpVhRBLBqVV5lnx 9+8etaSQDWLT46K8cs9yMGwchCnQubpj0XQAghW54IEdo+7Yucu/mtbuSuh8LDO+ csezq8Snnum13Y99Cc58gAfmVdMpLipmu9Rv7sMi2Mv1C1w7rrktfGZN6OlPgkPb UTUxAwaWuOEI/j4Ft6lxZCMNTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsIswf9 Fh6dl+sB8KJ/9GorQha8MB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANtc/hnO4Gij63Q9B3qFlGhHCU/n8+r0E9Qiv2+vFIPF0HW88boWiA ag47OjSVv+Xa1xwScu1rP/rm647mXGqc/TTnPnDX4SEJa4yRQvmJAXcYZ1/k+Cv6 bg6dXs89qQQp1sipqaCAoG5gw9Uu9jsCnhzyd9ZtgF9aQX7uTBMXrmohTG+SuN1d hxIWHQT28nTW+TWiMPOsNZHLRykRm2t55243URZ6D8hxuz+r7UhnQXwT4CIXHR35 1t9hngEBL2KcYaJVg4s8BL6G2atp0Lalc3RR4Pz9autkzjy7VSX0/VM6zCofGTZZ ND3XWgjNLxdAfIUPg6Q0sKCg7B0RuFid -----END CERTIFICATE-----Generated at Mon Jun 2 06:34:54 2025 by rpki-client