$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: 7FamRC/Y8n9WEC6Vc0emjsfgKqXGuFp/EBeF0wlJY4c= Subject key identifier: B9:24:06:C0:22:5E:BD:2A:83:7B:3D:EE:05:81:7A:62:BC:45:E6:91 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 2A Signing time: Sun 29 Jun 2025 06:45:32 +0000 Manifest this update: Sun 29 Jun 2025 06:45:31 +0000 Manifest next update: Sun 06 Jul 2025 06:45:31 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: ywnpOvK65TK+WEYqt9wds0fuVus3h100xdSyfBBprqY=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Jun 29 06:45:31 2025 GMT Not After : Jul 6 06:45:31 2025 GMT Subject: CN=6860e10c-7763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:dd:c7:e8:4d:fb:78:54:0a:08:99:87:46: a5:ac:5e:91:d8:53:c0:f3:b1:c2:86:5e:9c:0a:ac: 82:1a:5c:6c:bb:3f:c3:8f:8d:d1:80:ac:77:f5:96: 20:2d:1a:47:2b:7c:fe:09:c0:ed:7c:62:de:7b:7e: bd:8f:73:1b:70:d5:7b:05:41:2b:80:08:ac:aa:a4: c1:09:8c:f5:85:06:5e:ea:c8:e0:5c:a6:c5:5a:ee: 62:3e:4b:a9:1a:34:ab:21:15:e4:db:7a:76:2e:21: 27:f2:2f:2a:3f:4e:e7:f4:9e:d4:7e:de:35:d8:21: 29:a3:6f:af:dd:99:17:dc:fd:4c:96:d3:ff:27:a6: ef:2f:4b:3e:61:7f:85:dd:81:f6:00:8c:4d:93:a0: e2:4f:9a:b1:2b:85:0d:4e:d5:f4:3e:6c:de:36:b7: ba:56:80:8c:5e:7d:b2:31:d6:88:a5:d0:a9:ce:d5: 19:60:a8:57:24:4f:ef:58:d1:56:97:50:97:a8:1a: a1:89:1c:fd:f0:52:93:82:02:d8:62:fb:dd:40:52: 31:e8:6e:62:89:5e:0f:e7:1f:ea:24:05:43:2e:c8: 7e:92:87:30:8b:7a:f9:9a:75:20:22:2e:c2:e8:74: fc:aa:4a:6c:43:9d:3d:5b:10:e3:8a:33:4e:b8:83: 7f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:24:06:C0:22:5E:BD:2A:83:7B:3D:EE:05:81:7A:62:BC:45:E6:91 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ad:b8:df:42:da:78:cf:20:84:f2:a4:95:a2:88:88:b7:c9: cc:85:b1:e1:39:b8:a5:9e:0b:a0:be:6b:7c:cf:10:4d:d1:15: 4c:0e:78:cd:4a:bd:ca:0e:ad:f6:26:36:60:79:66:6e:db:89: e7:cc:5c:79:c3:91:f6:53:3c:c9:da:72:58:74:67:13:1a:7e: f0:2d:06:67:40:28:95:57:a9:31:79:30:9e:a6:9c:10:a6:8a: a0:ac:6e:86:4b:04:e3:97:5a:71:cf:ad:73:dd:5d:96:8c:b0: f8:5c:8e:c1:9f:42:85:57:d5:1e:59:44:ef:7d:d6:f1:17:ef: d2:d0:d8:ef:00:f6:ed:e1:8d:64:91:30:98:52:25:ba:ef:94: 5d:a7:1e:8e:64:a7:6b:49:88:ae:96:7a:fe:dd:53:87:82:59: 22:56:ab:84:ad:a4:5b:f1:54:4f:0e:9f:84:3c:e6:1f:69:1f: 72:9c:06:4c:b3:47:31:5e:db:8a:ad:77:3f:ca:91:c5:95:52: 87:d5:d8:c1:16:36:4e:75:1c:1a:90:cb:bb:3a:43:78:4f:e9: 92:5c:24:b0:60:fc:c0:bb:d7:2b:7c:3d:8b:d4:84:32:5b:d5: be:21:e3:08:b5:0b:b2:68:66:e6:8d:9b:c9:98:40:b7:07:b8: 73:03:d1:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTA2MjkwNjQ1MzFaFw0yNTA3MDYwNjQ1MzFaMBgxFjAUBgNV BAMTDTY4NjBlMTBjLTc3NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAa93H6E37eFQKCJmHRqWsXpHYU8DzscKGXpwKrIIaXGy7P8OPjdGArHf1liAt GkcrfP4JwO18Yt57fr2Pcxtw1XsFQSuACKyqpMEJjPWFBl7qyOBcpsVa7mI+S6ka NKshFeTbenYuISfyLyo/Tuf0ntR+3jXYISmjb6/dmRfc/UyW0/8npu8vSz5hf4Xd gfYAjE2ToOJPmrErhQ1O1fQ+bN42t7pWgIxefbIx1oil0KnO1RlgqFckT+9Y0VaX UJeoGqGJHP3wUpOCAthi+91AUjHobmKJXg/nH+okBUMuyH6ShzCLevmadSAiLsLo dPyqSmxDnT1bEOOKM064g3/dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuSQGwCJe vSqDez3uBYF6YrxF5pEwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqtuN9C2njPIITypJWiiIi3ycyFseE5uKWeC6C+a3zPEE3RFUwOeM1K vcoOrfYmNmB5Zm7biefMXHnDkfZTPMnaclh0ZxMafvAtBmdAKJVXqTF5MJ6mnBCm iqCsboZLBOOXWnHPrXPdXZaMsPhcjsGfQoVX1R5ZRO991vEX79LQ2O8A9u3hjWSR MJhSJbrvlF2nHo5kp2tJiK6Wev7dU4eCWSJWq4StpFvxVE8On4Q85h9pH3KcBkyz RzFe24qtdz/KkcWVUofV2MEWNk51HBqQy7s6Q3hP6ZJcJLBg/MC71yt8PYvUhDJb 1b4h4wi1C7JoZuaNm8mYQLcHuHMD0Qs= -----END CERTIFICATE-----Generated at Sun Jun 29 21:44:22 2025 by rpki-client