$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: aBHX+b4sTi0+gN6yFrUA8xlLeBmeFqgosqLOoTcAT0I= Subject key identifier: 4E:77:45:64:B0:F4:AB:DA:B2:A2:2D:79:9E:9F:1A:20:7F:3D:06:D5 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 6A Signing time: Mon 03 Nov 2025 06:57:16 +0000 Manifest this update: Mon 03 Nov 2025 06:57:16 +0000 Manifest next update: Mon 10 Nov 2025 06:57:16 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: ESQC+hscn7ByHZ4I9L9pHRjNGT7+hiEFz+WUzrUQTTo=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Nov 3 06:57:16 2025 GMT Not After : Nov 10 06:57:16 2025 GMT Subject: CN=6908524c-6070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:9b:18:25:7a:33:83:58:de:9e:93:9b:63: aa:08:ba:6c:36:7c:56:5b:f6:06:a3:cf:9b:67:b0: dd:ed:35:f3:1d:a2:2e:bd:f7:0c:4a:ea:e2:51:2e: 2b:31:20:7b:32:96:2f:e1:5a:0e:d3:f4:e6:b7:28: 66:ca:b8:18:16:e7:b2:46:4f:1c:ce:df:d2:9e:60: fb:a6:81:90:0e:1f:25:9b:0d:97:b3:dd:f5:46:f6: cd:9a:7b:a3:fc:39:c2:de:83:68:96:df:9d:ea:4e: fe:9d:0c:bc:2b:2a:9d:ed:a0:bd:5e:0b:7b:d9:b4: 77:bf:de:fa:e8:1f:d8:48:77:97:de:ea:69:5d:60: 1c:52:1a:27:b9:3d:6b:6b:04:29:37:fa:05:3b:1a: 83:32:32:68:6d:5c:d6:9f:f7:9a:0f:d6:c7:81:c6: 5a:0a:c8:5d:b8:c6:68:74:5d:e9:d6:ee:ba:71:0d: aa:ed:10:63:4b:04:f6:71:a2:25:75:28:44:2b:29: cf:fc:19:73:9c:db:77:b5:1b:08:c0:a3:0f:e4:82: 76:0a:c5:07:f7:16:a4:a0:1f:d5:95:f9:52:6a:46: 97:43:38:f9:9b:c0:e2:15:d1:32:af:17:c3:c2:eb: 6f:3a:fd:cb:fb:ee:1f:ae:d0:fb:56:94:d6:fc:93: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:45:64:B0:F4:AB:DA:B2:A2:2D:79:9E:9F:1A:20:7F:3D:06:D5 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e1:b6:69:e9:56:6d:1e:7f:29:8d:88:7e:fb:76:e9:92:8c: cd:38:4e:09:65:d9:02:2b:19:bf:b5:1c:c6:83:06:51:73:99: 65:91:97:35:5d:54:8a:04:bc:1b:6f:00:ae:75:a2:10:c0:f9: b2:7b:89:4d:1a:f8:46:aa:5b:c2:b8:c3:34:ed:44:74:1a:8d: dd:8a:ed:e8:3f:de:a4:25:41:0d:59:80:4f:7c:4f:f0:c7:18: ad:f2:63:e3:d1:be:00:a0:d6:f2:3e:37:7f:9d:b1:3b:0e:72: 7e:a7:6a:83:77:c0:0e:14:9c:21:e0:8d:58:5c:89:b7:c1:9f: 5a:57:e1:06:49:5a:05:27:59:9a:50:26:8d:fe:04:05:b8:02: fd:3c:e9:6d:5e:6e:ed:f2:44:96:a8:1d:e8:52:fb:fa:86:21: b7:46:df:35:c1:5d:f3:59:be:17:6a:44:2e:e3:eb:2a:99:17: ea:89:01:91:b4:f4:f2:53:40:40:6c:7e:a5:e7:76:dd:ed:bd: 87:a7:3d:a9:f1:c0:0c:8f:8e:6d:dd:4d:ad:38:be:3f:ef:8d: de:0c:e4:d1:b0:ae:32:51:00:5a:46:7f:d5:46:9c:8f:df:e4: ef:7f:0a:18:dd:09:74:a0:26:ea:52:43:79:49:db:67:e9:fb: 83:e2:7e:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTExMDMwNjU3MTZaFw0yNTExMTAwNjU3MTZaMBgxFjAUBgNV BAMTDTY5MDg1MjRjLTYwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd85sYJXozg1jenpObY6oIumw2fFZb9gajz5tnsN3tNfMdoi699wxK6uJRLisx IHsyli/hWg7T9Oa3KGbKuBgW57JGTxzO39KeYPumgZAOHyWbDZez3fVG9s2ae6P8 OcLeg2iW353qTv6dDLwrKp3toL1eC3vZtHe/3vroH9hId5fe6mldYBxSGie5PWtr BCk3+gU7GoMyMmhtXNaf95oP1seBxloKyF24xmh0XenW7rpxDartEGNLBPZxoiV1 KEQrKc/8GXOc23e1GwjAow/kgnYKxQf3FqSgH9WV+VJqRpdDOPmbwOIV0TKvF8PC 6286/cv77h+u0PtWlNb8k4m7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTndFZLD0 q9qyoi15np8aIH89BtUwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGzhtmnpVm0efymNiH77dumSjM04Tgll2QIrGb+1HMaDBlFzmWWRlzVd VIoEvBtvAK51ohDA+bJ7iU0a+EaqW8K4wzTtRHQajd2K7eg/3qQlQQ1ZgE98T/DH GK3yY+PRvgCg1vI+N3+dsTsOcn6naoN3wA4UnCHgjVhcibfBn1pX4QZJWgUnWZpQ Jo3+BAW4Av086W1ebu3yRJaoHehS+/qGIbdG3zXBXfNZvhdqRC7j6yqZF+qJAZG0 9PJTQEBsfqXndt3tvYenPanxwAyPjm3dTa04vj/vjd4M5NGwrjJRAFpGf9VGnI/f 5O9/ChjdCXSgJupSQ3lJ22fp+4PiftA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:07:07 2025 by rpki-client