$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: 5tgKP9mAHkknPRIJtqZCgX/5pVgDUyY4MIctlFfuVzs= Subject key identifier: 23:E4:A3:70:57:49:3A:1F:C5:A2:B7:0A:26:84:A3:06:15:45:1B:56 Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: E1 Signing time: Wed 23 Sep 2026 06:21:04 +0000 Manifest this update: Wed 23 Sep 2026 06:21:04 +0000 Manifest next update: Wed 30 Sep 2026 06:21:04 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: VVubfOhlWqJwsrlr0/6Y7/uMsFDTVEhnGyF7eR4xIfI=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: TZHZVxW7CCxI2mCLIvTu0gRF/uCRxB2tLN96dmNIMvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Sep 23 06:21:04 2026 GMT Not After : Sep 30 06:21:04 2026 GMT Subject: CN=6ab36fd0-402f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:52:89:c7:cd:36:f6:99:74:84:5d:80:f9: 4a:f9:2e:79:07:b1:e9:6c:10:ff:df:ad:01:ea:59: 63:8c:78:98:19:72:a1:e5:51:c4:cb:0e:ec:85:a7: 29:ce:e5:ee:b9:a9:59:26:71:4d:8f:77:85:5e:1b: 4e:4c:e4:7e:6d:cb:d4:7b:e2:cc:bb:17:68:89:5d: 52:fa:a0:23:93:dd:2a:32:3a:41:5a:d2:0c:7a:ee: 08:df:04:65:7a:d0:aa:36:38:11:10:ee:4e:11:c3: 1a:f2:a1:07:e4:6a:d1:35:12:95:8f:aa:7c:1d:ed: 1b:71:1a:c2:5a:a0:f0:a2:3c:24:a5:21:84:5c:13: 68:55:3c:3b:9a:5f:55:25:cc:65:5f:9e:71:dd:68: 0a:3b:ee:7f:cf:cd:4a:08:64:03:68:2a:58:1d:4e: 9d:bb:d6:65:7a:7c:ea:06:1a:9a:ba:e1:da:13:28: 9f:04:72:ae:b6:fe:99:f8:b7:ee:f9:8d:96:66:b2: d4:a2:7a:4c:78:47:29:68:53:05:fc:2d:a0:7d:01: f9:a8:17:7c:9c:67:71:0c:b1:19:21:38:e8:d3:a8: 0b:ae:b5:4c:f9:6f:ed:8b:68:f4:9a:b3:a2:55:a0: 6a:d5:72:e0:a6:66:9e:d4:2a:3e:34:78:32:87:08: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:A3:70:57:49:3A:1F:C5:A2:B7:0A:26:84:A3:06:15:45:1B:56 X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8f:68:d2:ef:dd:3b:8e:23:c1:ad:a8:45:25:40:dc:2b:7d: db:63:c7:4c:a1:f4:a3:6d:47:53:60:f1:2e:68:13:1a:da:56: a0:97:ed:a9:63:71:c5:a6:51:4a:da:8c:8d:83:86:f2:0f:d4: 37:e4:ed:2e:e1:5a:f9:61:95:97:b8:d7:5a:ed:ba:87:b7:a2: c1:68:36:9e:fe:c3:9c:91:ff:c3:01:bd:4a:06:83:9f:6c:13: 7e:27:4e:cd:76:81:5a:59:a7:13:55:b5:1e:b7:97:71:89:69: 0f:e9:b3:e6:b7:40:a7:90:a2:4f:b2:f1:23:79:a3:c1:ff:5f: bf:41:30:15:6e:d3:2f:16:90:a9:7e:c2:a1:eb:5f:21:69:07: 45:f7:6d:99:47:40:b2:3e:fa:4e:4c:9b:1d:fe:a9:13:44:c5: 63:6d:58:93:cf:bd:a0:69:c4:77:3b:15:1d:e1:0e:2d:72:73: 6f:44:53:f7:9d:da:81:8f:4e:6c:f5:4b:a7:58:98:c4:eb:d5: 5f:df:f1:6e:be:3e:4d:a7:1d:3c:33:cb:f4:ed:10:29:76:53: b4:de:55:7c:05:72:01:64:ee:60:fc:e5:70:f7:c6:75:57:5b: 99:8c:da:ad:56:95:a1:8d:6e:55:ed:0d:8c:d1:04:06:44:54: 1a:87:0d:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBEQzMxMTAvBgNVBAUTKDVDQkY4QjA0NDA2RkZGNTMyNjkzMDdCQTc0OTI3MjFG REMzRkIxMkIwHhcNMjYwOTIzMDYyMTA0WhcNMjYwOTMwMDYyMTA0WjAYMRYwFAYD VQQDEw02YWIzNmZkMC00MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulFSicfNNvaZdIRdgPlK+S55B7HpbBD/360B6lljjHiYGXKh5VHEyw7shacp zuXuualZJnFNj3eFXhtOTOR+bcvUe+LMuxdoiV1S+qAjk90qMjpBWtIMeu4I3wRl etCqNjgREO5OEcMa8qEH5GrRNRKVj6p8He0bcRrCWqDwojwkpSGEXBNoVTw7ml9V JcxlX55x3WgKO+5/z81KCGQDaCpYHU6du9ZlenzqBhqauuHaEyifBHKutv6Z+Lfu +Y2WZrLUonpMeEcpaFMF/C2gfQH5qBd8nGdxDLEZITjo06gLrrVM+W/ti2j0mrOi VaBq1XLgpmae1Co+NHgyhwhjmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPko3BX STofxaK3CiaEowYVRRtWMB8GA1UdIwQYMBaAFFy/iwRAb/9TJpMHunSSch/cP7Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMERDMy9EMDYxRjU0MjYx NTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8xTW1rd2U2ZEpKeUg5d19z U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MERDMy9EMDYxRjU0MjYxNTYxMUYwOTFCMTBFNkFDNEY5QUUwMi9YTC1MQkVCdl8x TW1rd2U2ZEpKeUg5d19zU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoo9o0u/dO44jwa2oRSVA3Ct922PHTKH0o21HU2DxLmgTGtpWoJftqWNxxaZR StqMjYOG8g/UN+TtLuFa+WGVl7jXWu26h7eiwWg2nv7DnJH/wwG9SgaDn2wTfidO zXaBWlmnE1W1HreXcYlpD+mz5rdAp5CiT7LxI3mjwf9fv0EwFW7TLxaQqX7Coetf IWkHRfdtmUdAsj76TkybHf6pE0TFY21Yk8+9oGnEdzsVHeEOLXJzb0RT953agY9O bPVLp1iYxOvVX9/xbr4+TacdPDPL9O0QKXZTtN5VfAVyAWTuYPzlcPfGdVdbmYza rVaVoY1uVe0NjNEEBkRUGocNLg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:17:44 2026 by rpki-client