$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: U7+Of9ldTI/wfL+wFa60couFggQU2yi2NBHxmNkLnS8= Subject key identifier: B3:76:86:17:BA:40:61:E5:9D:D0:FB:8C:B9:F5:A8:B2:B9:42:8D:74 Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 3A Signing time: Mon 03 Nov 2025 07:31:21 +0000 Manifest this update: Mon 03 Nov 2025 07:31:21 +0000 Manifest next update: Mon 10 Nov 2025 07:31:21 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: MQkgxZO3GTAmRIVV4cWQ5Ln+Eib24Bl+i6r4bhoZBUo=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Nov 3 07:31:21 2025 GMT Not After : Nov 10 07:31:21 2025 GMT Subject: CN=69085a49-aee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:68:99:cf:98:92:87:6a:94:80:a5:c8:fe: 6f:a2:bb:81:d3:6e:e6:ec:65:7a:f5:3b:a6:83:6e: 98:87:bb:4c:2e:48:75:f4:bf:7f:53:ee:3a:dd:33: 09:19:b5:dc:ad:d2:e9:73:f8:9a:58:eb:a1:ab:d5: 98:79:3c:31:2b:e7:b1:cb:f0:e8:42:be:d3:91:59: 78:a1:c6:4b:bc:2d:5b:7f:d0:f8:2f:9c:18:4d:f0: 0b:1a:61:83:ba:ef:ba:b8:68:2b:1e:7e:40:da:2d: e4:03:0e:8b:d0:ac:12:2d:ae:58:c3:85:13:56:6c: a1:c5:96:d5:05:06:6d:3c:a5:f2:a7:e6:62:4c:87: aa:16:57:eb:46:2a:69:01:ac:9d:52:8c:01:b7:1e: b6:41:b9:2b:98:57:60:33:be:bc:22:45:3a:d0:73: 47:c6:c0:8f:e7:37:a8:82:e0:db:78:1f:2c:be:6e: e7:a2:dc:e7:04:dc:6a:70:c1:c2:c7:80:68:d8:2a: 11:8a:43:dc:41:ed:cc:8d:ce:f4:af:df:36:12:77: ac:eb:4c:68:3b:a1:c9:02:77:51:35:f3:d1:33:d3: 94:c1:23:56:99:19:b8:72:18:8f:bd:82:1a:57:7a: d6:e0:16:9f:ca:d0:b3:17:de:29:ba:0a:a6:c3:e6: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:76:86:17:BA:40:61:E5:9D:D0:FB:8C:B9:F5:A8:B2:B9:42:8D:74 X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:20:e8:a7:1e:0b:18:5f:bf:35:5a:23:fd:74:a0:b0:da:ad: 22:cd:f4:bc:66:37:29:95:4f:98:58:8f:e5:8d:13:f8:4e:3a: 8c:28:41:02:95:f7:0b:55:83:39:cb:87:b5:71:c4:75:69:00: 74:f8:6b:48:c7:f5:4e:13:78:cb:d0:b1:66:74:0a:94:e1:c2: cf:a0:38:21:b8:3b:fd:8f:61:b9:d2:d7:a8:a2:87:1a:4b:7c: 64:07:ad:76:b6:30:6d:98:19:05:e0:b3:ac:ea:99:67:81:58: 9b:d6:db:e8:d1:66:77:bf:3a:5d:c1:27:2c:43:15:c7:11:a7: 62:3f:8f:b7:ae:c5:42:45:4e:ed:a1:75:51:7d:8c:a1:af:ea: d8:d7:25:f1:26:09:83:c2:cd:c9:59:3f:ef:da:07:2a:04:5f: 84:55:2a:96:91:d3:30:ff:e0:59:71:bb:c6:b3:b0:0c:77:97: f8:91:bb:07:ff:8c:1d:d9:e0:f2:b6:91:31:ad:52:38:95:6f: 13:0c:8d:0a:09:2d:18:99:28:c1:cd:c7:75:7e:60:10:85:c3: f0:65:04:aa:1a:97:b8:58:a7:46:de:66:f4:20:91:34:8e:16: c4:17:a7:5a:3d:23:99:ff:be:2d:c8:55:60:ba:9b:d8:19:24: 07:ee:f9:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTExMDMwNzMxMjFaFw0yNTExMTAwNzMxMjFaMBgxFjAUBgNV BAMTDTY5MDg1YTQ5LWFlZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfi2iZz5iSh2qUgKXI/m+iu4HTbubsZXr1O6aDbpiHu0wuSHX0v39T7jrdMwkZ tdyt0ulz+JpY66Gr1Zh5PDEr57HL8OhCvtORWXihxku8LVt/0PgvnBhN8AsaYYO6 77q4aCsefkDaLeQDDovQrBItrljDhRNWbKHFltUFBm08pfKn5mJMh6oWV+tGKmkB rJ1SjAG3HrZBuSuYV2AzvrwiRTrQc0fGwI/nN6iC4Nt4Hyy+buei3OcE3GpwwcLH gGjYKhGKQ9xB7cyNzvSv3zYSd6zrTGg7ockCd1E189Ez05TBI1aZGbhyGI+9ghpX etbgFp/K0LMX3im6CqbD5lBRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs3aGF7pA YeWd0PuMufWosrlCjXQwHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkg6KceCxhfvzVaI/10oLDarSLN9LxmNymVT5hYj+WNE/hOOowoQQKV 9wtVgznLh7VxxHVpAHT4a0jH9U4TeMvQsWZ0CpThws+gOCG4O/2PYbnS16iihxpL fGQHrXa2MG2YGQXgs6zqmWeBWJvW2+jRZne/Ol3BJyxDFccRp2I/j7euxUJFTu2h dVF9jKGv6tjXJfEmCYPCzclZP+/aByoEX4RVKpaR0zD/4Flxu8azsAx3l/iRuwf/ jB3Z4PK2kTGtUjiVbxMMjQoJLRiZKMHNx3V+YBCFw/BlBKoal7hYp0beZvQgkTSO FsQXp1o9I5n/vi3IVWC6m9gZJAfu+Vw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:20 2025 by rpki-client