$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: zWcrZq6o/8mPTVNKNsabHBgV5pm9yAwy55IksRHpEiw= Subject key identifier: 85:27:9B:25:29:C1:BF:CB:CE:7F:7E:49:A4:F5:C0:CF:8C:C3:4E:6B Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:07:10 +0000 Manifest this update: Sun 19 Oct 2025 11:07:09 +0000 Manifest next update: Sun 26 Oct 2025 11:07:09 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: 84bnElaBb4hDnR+AUR/o6hIBHdRYHJWiDFVi2vB0/kQ=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Oct 19 11:07:09 2025 GMT Not After : Oct 26 11:07:09 2025 GMT Subject: CN=68f4c65e-c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:e9:65:80:17:ba:7e:1c:5b:92:0f:12:11: 7c:ee:a7:9d:ee:c9:c7:50:17:6e:79:20:5d:58:ea: 08:27:41:ce:8a:96:14:54:62:66:19:83:56:85:59: 99:c5:a6:bf:6c:bb:44:cf:d4:86:10:b9:de:6d:ee: ad:06:21:f5:3b:e3:34:cf:ea:43:a5:62:3d:b5:9b: 25:7f:61:13:bc:c1:cb:96:d3:45:80:64:86:15:31: 9f:c2:0a:10:60:21:a0:bf:2b:c5:99:05:62:23:8d: b7:53:b7:63:8f:56:bf:8f:11:48:ec:26:67:f5:1a: d4:42:74:c5:2d:2f:5a:ab:19:fe:bc:fd:f5:ce:21: 80:0a:e3:87:29:52:95:f8:81:e4:b4:25:bb:f7:39: 67:bb:97:ce:26:c0:20:03:ad:38:b6:a5:6b:3a:6c: b3:03:ea:b1:eb:d9:9f:30:b7:b8:dc:fa:e5:ac:92: 3e:a8:13:4d:02:8f:57:ea:68:bf:e9:81:43:12:86: 32:ed:c6:56:97:6f:6e:f0:f1:ec:3e:6f:19:a9:1c: 13:87:6e:24:fc:cc:0d:12:8a:0a:63:d2:49:50:f0: 23:4c:6f:29:98:3c:4d:c7:99:95:c7:a3:b1:1e:39: 3a:c8:ad:47:81:b8:a0:49:68:18:5c:01:29:03:31: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:9B:25:29:C1:BF:CB:CE:7F:7E:49:A4:F5:C0:CF:8C:C3:4E:6B X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:db:46:92:4d:44:af:f9:3e:5e:51:ab:34:69:e5:80:7a:82: 85:79:a3:23:50:44:da:93:8f:4e:05:bd:43:c4:8f:f8:86:be: 86:9a:d9:3e:bf:15:89:57:2e:43:6b:fb:60:0e:1c:8b:87:7a: 8e:58:e0:da:94:b3:62:18:f2:91:0b:06:6a:41:67:d4:15:ef: ac:6c:a4:7e:0e:09:cd:de:06:13:4b:c8:df:0e:8b:09:ef:5c: 70:3d:27:13:ac:0e:9f:78:16:eb:62:11:0a:e5:03:9c:d5:10: ef:6c:6b:2e:dc:9b:8e:c5:c7:91:6a:9e:09:ca:ff:ee:b9:7d: 47:78:67:fe:73:42:aa:dd:cc:a0:65:ca:48:47:d7:31:27:0c: 55:c8:0d:5e:0f:d2:11:f6:d6:b7:3c:b0:19:98:6e:a6:c6:3f: d2:a9:48:54:cf:72:1e:f6:27:50:a7:31:c4:0d:a2:70:f9:5d: f3:ed:64:6e:28:aa:d0:4a:bf:4c:2b:a3:a1:fc:8e:3f:74:2c: e2:23:2f:a2:67:68:84:15:39:82:75:63:65:79:5b:12:0e:bd: a7:49:8f:f6:0c:cb:48:fb:90:e2:69:ea:47:f9:00:be:71:ad: dc:05:c1:c6:d0:e0:b8:ef:91:d8:d3:47:f0:91:0f:03:33:6e: 38:1b:a2:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTEwMTkxMTA3MDlaFw0yNTEwMjYxMTA3MDlaMBgxFjAUBgNV BAMTDTY4ZjRjNjVlLWM2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIAullgBe6fhxbkg8SEXzup53uycdQF255IF1Y6ggnQc6KlhRUYmYZg1aFWZnF pr9su0TP1IYQud5t7q0GIfU74zTP6kOlYj21myV/YRO8wcuW00WAZIYVMZ/CChBg IaC/K8WZBWIjjbdTt2OPVr+PEUjsJmf1GtRCdMUtL1qrGf68/fXOIYAK44cpUpX4 geS0Jbv3OWe7l84mwCADrTi2pWs6bLMD6rHr2Z8wt7jc+uWskj6oE00Cj1fqaL/p gUMShjLtxlaXb27w8ew+bxmpHBOHbiT8zA0Sigpj0klQ8CNMbymYPE3HmZXHo7Ee OTrIrUeBuKBJaBhcASkDMRYvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhSebJSnB v8vOf35JpPXAz4zDTmswHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3bRpJNRK/5Pl5RqzRp5YB6goV5oyNQRNqTj04FvUPEj/iGvoaa2T6/ FYlXLkNr+2AOHIuHeo5Y4NqUs2IY8pELBmpBZ9QV76xspH4OCc3eBhNLyN8Oiwnv XHA9JxOsDp94FutiEQrlA5zVEO9say7cm47Fx5FqngnK/+65fUd4Z/5zQqrdzKBl ykhH1zEnDFXIDV4P0hH21rc8sBmYbqbGP9KpSFTPch72J1CnMcQNonD5XfPtZG4o qtBKv0wro6H8jj90LOIjL6JnaIQVOYJ1Y2V5WxIOvadJj/YMy0j7kOJp6kf5AL5x rdwFwcbQ4LjvkdjTR/CRDwMzbjgbojw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:16 2025 by rpki-client