$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: vNTiN+0grZV40D1KupTKXjqgzjR2DV/l0XqgjXubw3Q= Subject key identifier: F8:B8:2B:3C:E9:60:04:22:8C:FA:7E:71:AF:5D:9E:C4:4F:11:E3:C8 Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 08AD Signing time: Thu 12 Jun 2025 22:29:54 +0000 Manifest this update: Thu 12 Jun 2025 22:29:53 +0000 Manifest next update: Thu 19 Jun 2025 22:29:53 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: q1AApyP+kLj8GqluCj/6Y0UwjHXSqnb42UVXciYOc9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: Jun 12 22:29:53 2025 GMT Not After : Jun 19 22:29:53 2025 GMT Subject: CN=684b54e1-959e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6f:07:5d:dc:42:0d:92:b6:fb:65:43:24:d3: 46:4f:57:3f:87:18:bb:18:7e:cc:71:e1:65:84:51: 61:50:65:03:47:65:b1:33:e0:7d:28:21:82:f6:23: 57:21:ca:5c:10:b9:3c:4f:a4:ff:a7:bd:70:ac:7c: 0d:14:12:e9:24:28:63:c2:21:ae:aa:5d:78:80:6e: ba:49:22:43:09:f7:3a:61:d0:89:c6:ef:31:99:d8: 80:3f:6b:8f:a0:02:19:a2:d0:34:91:48:ed:0d:b7: 4d:3a:9b:2b:e7:89:ac:63:20:b5:82:7f:33:b8:7b: 00:20:e0:1d:1a:57:4d:ca:78:bb:81:1f:b4:7e:06: 2e:4c:89:d1:6a:ea:5b:1c:7e:2e:83:a0:79:89:8f: c2:0d:7d:01:d4:bf:15:a2:2e:f2:0e:0c:d6:32:20: 61:5e:6f:de:5f:49:f7:60:96:9b:86:b1:48:14:9a: 4b:47:e0:4a:7b:57:46:af:da:da:3e:6d:a1:f8:9e: 6f:4b:25:f9:bd:fb:fa:e2:85:b9:7d:55:06:e9:24: 60:4a:28:b2:cd:98:3a:28:6b:ef:fe:f2:61:8d:4a: 83:ad:c6:87:4e:a0:d1:5b:dc:9c:37:7f:11:a0:0c: ad:aa:71:9b:64:92:53:69:36:5f:f3:de:d4:95:c3: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:2B:3C:E9:60:04:22:8C:FA:7E:71:AF:5D:9E:C4:4F:11:E3:C8 X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:49:8c:fd:6e:8d:03:06:7c:2d:05:91:f4:e9:61:67:55:dc: 28:8e:7d:b5:1e:c3:d0:2b:17:df:e2:77:4b:f5:df:e8:aa:e5: 02:c0:d5:fb:c0:cb:9f:2a:f9:fa:d7:be:6b:e0:6d:bd:86:13: d9:ae:41:87:8d:5a:25:08:57:3e:9d:3c:e1:a5:da:e9:41:1b: 30:33:36:d3:dd:57:dc:59:2a:38:69:27:66:54:3f:44:29:f6: 2b:7c:cf:cd:64:06:40:ac:b5:15:9c:2d:fb:73:aa:46:20:21: 79:21:4d:e5:78:61:45:0c:c5:ae:4c:54:0a:0f:cb:9f:73:7b: 56:a4:d3:91:15:67:99:37:2c:ef:cc:d2:8a:92:59:49:a9:42: 90:bb:c8:65:4d:55:46:dd:2a:a7:48:88:53:2c:93:61:39:50: e2:12:4c:b3:b5:73:2d:ea:7a:a3:6d:fe:9a:25:c5:13:83:1c: a4:75:50:19:74:d8:80:71:52:ff:f4:bb:8e:f1:1d:64:e9:d2: 93:13:19:d7:00:00:71:f2:7e:e1:a1:51:12:74:dd:66:9a:47: 54:e0:54:6e:fd:96:e8:46:2e:08:0f:a7:5a:b9:58:d0:56:5f: 7d:c4:68:ed:13:33:81:14:ce:09:2e:81:52:a1:56:8c:6f:4a: bc:93:44:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUwNjEyMjIyOTUzWhcNMjUwNjE5MjIyOTUzWjAYMRYwFAYD VQQDEw02ODRiNTRlMS05NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+G8HXdxCDZK2+2VDJNNGT1c/hxi7GH7MceFlhFFhUGUDR2WxM+B9KCGC9iNX IcpcELk8T6T/p71wrHwNFBLpJChjwiGuql14gG66SSJDCfc6YdCJxu8xmdiAP2uP oAIZotA0kUjtDbdNOpsr54msYyC1gn8zuHsAIOAdGldNyni7gR+0fgYuTInRaupb HH4ug6B5iY/CDX0B1L8Voi7yDgzWMiBhXm/eX0n3YJabhrFIFJpLR+BKe1dGr9ra Pm2h+J5vSyX5vfv64oW5fVUG6SRgSiiyzZg6KGvv/vJhjUqDrcaHTqDRW9ycN38R oAytqnGbZJJTaTZf897UlcPjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi4Kzzp YAQijPp+ca9dnsRPEePIMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0SYz9bo0DBnwtBZH06WFnVdwojn21HsPQKxff4ndL9d/oquUCwNX7 wMufKvn6175r4G29hhPZrkGHjVolCFc+nTzhpdrpQRswMzbT3VfcWSo4aSdmVD9E KfYrfM/NZAZArLUVnC37c6pGICF5IU3leGFFDMWuTFQKD8ufc3tWpNORFWeZNyzv zNKKkllJqUKQu8hlTVVG3SqnSIhTLJNhOVDiEkyztXMt6nqjbf6aJcUTgxykdVAZ dNiAcVL/9LuO8R1k6dKTExnXAABx8n7hoVESdN1mmkdU4FRu/ZboRi4ID6dauVjQ Vl99xGjtEzOBFM4JLoFSoVaMb0q8k0Sb -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:55 2025 by rpki-client