$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: mWPJK9XAqTt20EKTIMYuKLKydoVpMR1cssfnKat5BlA= Subject key identifier: 41:23:9F:0D:A1:5E:DA:4C:C3:64:36:39:8D:00:93:D1:16:E4:F4:A0 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 3D Signing time: Tue 05 Aug 2025 08:08:57 +0000 Manifest this update: Tue 05 Aug 2025 08:08:57 +0000 Manifest next update: Tue 12 Aug 2025 08:08:56 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: oMQFPMtTpBlrgGMXYP96GjFW2XbJdWKQAHc+v1z/fo8=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Aug 5 08:08:57 2025 GMT Not After : Aug 12 08:08:56 2025 GMT Subject: CN=6891bc19-bfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:a4:7e:f2:6c:64:e3:fc:7c:4e:af:1a:45: 82:a4:e8:ea:0f:2a:20:92:19:3a:bc:7c:f5:1f:2f: f9:51:71:78:34:d5:b6:59:b6:31:14:4b:d8:b5:09: 26:10:94:c1:80:cb:86:0e:54:3b:b8:74:6b:2c:63: 65:c4:60:ed:cc:99:82:af:d9:07:b6:4b:2d:82:b9: 86:02:fc:85:8a:69:03:7e:fc:c2:cc:a3:b0:b4:de: e2:08:1a:05:87:f4:44:34:31:ab:bf:1a:c4:e9:2f: 90:a6:3e:6a:d5:c9:0d:e0:3c:ba:fd:5f:2e:ff:7e: 9e:ee:49:fe:c5:e2:a2:20:4e:64:da:6c:a2:b3:c5: c3:65:48:6a:f1:2f:45:de:89:e6:90:a7:ae:38:c4: 25:39:70:f6:cc:f1:f4:e9:9c:f2:37:8a:b8:83:5d: 62:d2:12:d3:7f:e4:7a:5a:4b:a8:4b:25:23:dd:e7: 99:b7:99:15:0d:55:34:22:5a:30:01:72:10:9f:44: ff:20:00:01:8f:c3:bd:eb:87:a9:2d:70:81:99:2b: 2e:0e:3e:67:17:54:99:45:d8:36:43:e1:e0:8b:28: 0e:e2:9f:a5:f0:db:98:65:e5:15:bf:5a:f1:3e:63: f8:56:4e:4f:2b:cf:1d:d0:3b:a8:19:03:55:aa:ae: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:9F:0D:A1:5E:DA:4C:C3:64:36:39:8D:00:93:D1:16:E4:F4:A0 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:51:a7:fd:cb:8c:81:7b:1a:77:df:ee:6f:24:3a:a0:67:14: 9a:9c:d8:83:ce:7f:b8:fb:04:00:f0:7a:9f:80:51:48:8e:f7: 49:a1:12:53:2e:90:90:e2:9e:b5:8b:5a:1a:68:a9:4e:74:5a: f5:98:96:17:4f:b6:5f:87:eb:75:e7:3a:b3:86:79:a1:9e:ab: 9c:38:74:44:e2:34:7b:8c:86:c6:61:57:e8:9d:c8:03:e3:82: 84:19:15:a5:19:75:b0:93:e7:6d:94:79:df:fb:26:1f:f1:d0: 31:79:5e:75:85:01:e3:09:1a:c8:f0:f7:6c:69:88:d9:96:17: fd:e4:b4:a5:3d:34:bb:8f:e2:30:a2:a2:a8:07:35:80:a7:2b: 26:57:80:4e:08:51:4b:b0:d3:1c:48:a9:c4:c1:3e:08:f5:88: 3f:ff:34:4b:da:98:91:33:cd:6a:d1:0b:d2:61:b9:c5:06:c5: 9d:13:49:3a:f4:42:76:22:5e:a2:7d:c2:b2:3c:2c:ed:31:cf: 6f:55:12:8b:95:cb:65:74:6c:8c:1d:2b:d0:2a:4f:b3:7f:f5: 80:3a:20:85:92:81:de:41:34:6e:d3:ee:cc:e8:c7:7d:4d:e9: 27:69:31:a9:57:e2:cb:6e:20:af:20:48:3a:cb:cd:b4:a9:f4: d5:ec:83:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTA4MDUwODA4NTdaFw0yNTA4MTIwODA4NTZaMBgxFjAUBgNV BAMTDTY4OTFiYzE5LWJmYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC126R+8mxk4/x8Tq8aRYKk6OoPKiCSGTq8fPUfL/lRcXg01bZZtjEUS9i1CSYQ lMGAy4YOVDu4dGssY2XEYO3MmYKv2Qe2Sy2CuYYC/IWKaQN+/MLMo7C03uIIGgWH 9EQ0Mau/GsTpL5CmPmrVyQ3gPLr9Xy7/fp7uSf7F4qIgTmTabKKzxcNlSGrxL0Xe ieaQp644xCU5cPbM8fTpnPI3iriDXWLSEtN/5HpaS6hLJSPd55m3mRUNVTQiWjAB chCfRP8gAAGPw73rh6ktcIGZKy4OPmcXVJlF2DZD4eCLKA7in6Xw25hl5RW/WvE+ Y/hWTk8rzx3QO6gZA1Wqrn5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQSOfDaFe 2kzDZDY5jQCT0Rbk9KAwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFRp/3LjIF7Gnff7m8kOqBnFJqc2IPOf7j7BADwep+AUUiO90mhElMu kJDinrWLWhpoqU50WvWYlhdPtl+H63XnOrOGeaGeq5w4dETiNHuMhsZhV+idyAPj goQZFaUZdbCT522Ued/7Jh/x0DF5XnWFAeMJGsjw92xpiNmWF/3ktKU9NLuP4jCi oqgHNYCnKyZXgE4IUUuw0xxIqcTBPgj1iD//NEvamJEzzWrRC9JhucUGxZ0TSTr0 QnYiXqJ9wrI8LO0xz29VEouVy2V0bIwdK9AqT7N/9YA6IIWSgd5BNG7T7szox31N 6SdpMalX4stuIK8gSDrLzbSp9NXsg48= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:19 2025 by rpki-client