$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: IgYPeL2sGkJX6mmJnl+Is2P0nkIIbhcnM7/OdbGAz5k= Subject key identifier: 87:B8:F7:5C:A2:83:90:9F:40:70:2F:11:DD:77:93:DF:E0:CC:99:3C Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:14:15 +0000 Manifest this update: Sat 23 Aug 2025 08:14:15 +0000 Manifest next update: Sat 30 Aug 2025 08:14:15 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: vBhpUrggJUov2fGkR3YWV5X9AXcAnF8P/Y7sqYdbyXY=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Aug 23 08:14:15 2025 GMT Not After : Aug 30 08:14:15 2025 GMT Subject: CN=68a97857-ee97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:93:c1:96:a7:3a:35:3a:0f:e3:33:b6:dd: 56:4b:32:07:a9:c1:8a:de:b3:f0:84:28:93:8a:e5: d3:86:2f:b7:f6:f5:49:a1:15:46:74:54:de:07:bb: dd:fc:1e:c1:fc:0d:00:74:38:6c:a6:c9:c5:c1:d4: fa:28:9b:a6:41:71:40:f7:6a:4e:7b:af:60:f8:52: 19:17:77:a5:fa:33:12:82:fc:f3:19:60:68:82:30: a0:9e:9d:4e:4c:03:d7:b1:85:88:c2:b3:8d:95:53: 5b:28:1d:58:fe:aa:52:8f:22:27:42:37:aa:31:4c: 90:bc:30:ca:69:33:25:59:05:7e:d8:eb:03:85:3a: 17:98:d8:74:c7:1e:26:8b:7c:2d:8a:0e:2d:8a:ce: f8:11:fd:f3:1f:74:c2:71:cd:dc:6d:04:7c:96:d3: 32:c2:ea:5a:cf:87:3a:8a:ff:46:d0:ee:0b:09:e7: b3:34:0c:97:70:ee:fd:f6:e4:61:fb:f8:e7:6d:9d: 88:51:e8:42:fb:19:b1:93:44:7d:cb:75:27:ae:fb: 05:d9:f3:14:ea:1c:ba:ec:7b:c4:4d:d2:f2:65:b0: 6c:5e:9e:32:c5:fa:75:ec:60:2b:69:18:35:93:0b: a4:15:e3:ee:f5:25:f7:6c:b1:76:a4:36:46:b0:16: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B8:F7:5C:A2:83:90:9F:40:70:2F:11:DD:77:93:DF:E0:CC:99:3C X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:76:30:7b:ff:04:27:42:96:db:9e:34:bf:af:95:44:71:24: 54:e5:73:12:5d:ed:69:1b:51:95:e8:0a:1f:fc:4a:a3:26:16: f0:fc:c2:53:a0:92:5a:8d:09:58:ef:bd:03:a8:f2:8f:05:08: 58:96:b0:bf:14:53:58:12:f1:59:f7:2b:af:0e:07:07:e9:bc: 09:f8:8b:d5:fb:8b:91:02:67:c1:4c:e7:f9:54:af:a2:48:09: 2b:a9:ed:77:e1:3e:be:f8:3a:1a:2b:90:a1:e0:2b:dc:63:c3: 66:7e:21:a5:1d:02:16:77:aa:e1:d6:d5:c7:6f:b0:1e:e8:01: f3:03:f4:1b:1b:cf:8c:fa:11:a5:b3:ed:fd:03:b9:a8:62:6a: 17:bf:3a:b3:ce:ee:99:8a:58:fc:b8:02:a2:51:6f:2b:eb:1a: e1:c4:65:a9:1f:7e:cb:cd:10:a4:a6:a8:3a:64:34:7a:6c:44: a4:24:e7:76:a9:33:39:91:78:40:c1:55:e3:7e:c1:ae:43:94: db:66:26:db:33:d4:d2:c6:da:2a:4f:b1:49:ff:86:08:9d:83: 75:9c:0e:9e:81:73:a3:0a:15:13:04:11:a2:70:f6:3b:ca:a9: 0b:bc:93:c9:71:b0:d7:77:ff:5c:1c:a1:98:58:1d:6c:39:ca: 8c:63:14:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTA4MjMwODE0MTVaFw0yNTA4MzAwODE0MTVaMBgxFjAUBgNV BAMTDTY4YTk3ODU3LWVlOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf65PBlqc6NToP4zO23VZLMgepwYres/CEKJOK5dOGL7f29UmhFUZ0VN4Hu938 HsH8DQB0OGymycXB1Poom6ZBcUD3ak57r2D4UhkXd6X6MxKC/PMZYGiCMKCenU5M A9exhYjCs42VU1soHVj+qlKPIidCN6oxTJC8MMppMyVZBX7Y6wOFOheY2HTHHiaL fC2KDi2KzvgR/fMfdMJxzdxtBHyW0zLC6lrPhzqK/0bQ7gsJ57M0DJdw7v325GH7 +OdtnYhR6EL7GbGTRH3LdSeu+wXZ8xTqHLrse8RN0vJlsGxenjLF+nXsYCtpGDWT C6QV4+71JfdssXakNkawFlk5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh7j3XKKD kJ9AcC8R3XeT3+DMmTwwHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKN2MHv/BCdCltueNL+vlURxJFTlcxJd7WkbUZXoCh/8SqMmFvD8wlOg klqNCVjvvQOo8o8FCFiWsL8UU1gS8Vn3K68OBwfpvAn4i9X7i5ECZ8FM5/lUr6JI CSup7XfhPr74OhorkKHgK9xjw2Z+IaUdAhZ3quHW1cdvsB7oAfMD9Bsbz4z6EaWz 7f0Duahiahe/OrPO7pmKWPy4AqJRbyvrGuHEZakffsvNEKSmqDpkNHpsRKQk53ap MzmReEDBVeN+wa5DlNtmJtsz1NLG2ipPsUn/hgidg3WcDp6Bc6MKFRMEEaJw9jvK qQu8k8lxsNd3/1wcoZhYHWw5yoxjFNY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:47 2025 by rpki-client