$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: 4YX32iZj5zRrcgjgl6nncbqz+E66j6aEVKdU/TW94yg= Subject key identifier: 9A:74:BF:9E:69:B5:12:F1:33:D1:AF:12:B2:3D:09:CB:5E:A0:EF:39 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 63 Signing time: Sun 19 Oct 2025 10:24:16 +0000 Manifest this update: Sun 19 Oct 2025 10:24:15 +0000 Manifest next update: Sun 26 Oct 2025 10:24:15 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: /R7IgscBnbla0LX7LFPkqs0RgL+5OBV7pO5xtPN6NcU=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Oct 19 10:24:15 2025 GMT Not After : Oct 26 10:24:15 2025 GMT Subject: CN=68f4bc4f-32d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:d5:72:5e:4c:24:8b:2a:40:81:2f:23:f4: 3e:d5:cb:b9:50:d1:23:0c:fd:78:e9:29:99:da:aa: 43:3b:58:3d:30:54:8c:e9:5e:a1:09:3b:3c:ce:12: 39:e7:07:5d:6e:69:ce:51:ac:ae:8c:e6:c4:28:16: f3:e3:4f:b5:cc:a9:9f:37:29:86:4d:ff:d1:fc:3e: f2:7f:b5:3b:1d:03:d3:81:ac:49:2a:ad:f1:b6:8d: f5:3f:df:cf:21:a9:8f:45:e5:88:c5:48:55:0e:d5: 31:4e:6f:05:83:65:40:d2:23:d3:32:3a:ed:d5:86: f4:3d:f6:24:00:9b:7c:2f:3c:da:b8:48:e2:14:fe: fa:25:26:e8:e4:b7:cb:49:53:53:5f:c9:5e:e5:fa: 3d:10:00:fa:04:f0:28:e2:8a:8c:c0:ad:91:55:d2: f3:9c:35:96:a8:4e:bc:b3:5c:39:8c:7f:06:d0:bd: 0a:aa:89:4d:e9:88:4a:87:ea:13:6d:7a:b4:4a:f4: 52:f6:53:29:d2:45:f6:9c:13:98:fc:31:b5:e7:f3: 2c:a3:4a:92:18:17:f9:e9:68:95:ea:53:12:cf:b4: 09:12:14:04:75:83:f8:ca:fe:e9:9f:71:1b:6c:c6: 3e:35:9a:dd:a3:6e:1f:2a:42:c8:52:b2:19:fe:ad: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:74:BF:9E:69:B5:12:F1:33:D1:AF:12:B2:3D:09:CB:5E:A0:EF:39 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:01:a8:de:bd:5d:a7:f8:7b:9b:76:2d:3c:9c:7f:7e:ed:4b: d5:d7:db:88:d0:87:3a:6c:33:a1:ee:41:80:5f:de:b1:2a:19: dc:97:90:5a:22:51:2b:0b:1f:95:d9:19:94:3b:24:ba:cd:11: 75:71:26:8e:91:2d:9f:4f:5c:47:70:29:6e:4f:76:4a:0c:dc: 35:ad:d2:49:b1:b2:db:1f:9b:f6:21:2e:a9:8a:68:7a:e8:e7: c6:9e:68:f1:a1:a9:81:7f:5d:97:7d:45:20:7a:02:19:f7:35: af:b5:c5:aa:67:a5:0b:b9:e8:ab:47:c0:e6:73:d2:67:58:83: 86:86:4e:72:c7:29:35:3f:73:6f:3c:3a:60:34:8e:1c:da:49: 54:c1:f7:56:cb:4b:94:6b:2c:17:12:f0:f3:5a:c8:60:a9:95: 95:44:1e:24:13:d2:13:29:68:6f:6a:53:e1:b8:e8:33:c9:a9: 09:ed:48:bc:e2:6d:7f:0f:04:8f:e9:d5:bf:fb:83:68:18:53: 7d:6f:3c:1a:e6:8e:f6:5b:cf:07:59:8d:86:5d:d3:ae:cc:38: 65:56:00:f1:5e:79:a5:04:ba:3c:62:2a:7e:22:f1:b0:37:43: 86:db:28:b2:9c:67:70:1e:a3:26:12:67:90:8d:f3:12:0f:5f: 90:42:39:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTEwMTkxMDI0MTVaFw0yNTEwMjYxMDI0MTVaMBgxFjAUBgNV BAMTDTY4ZjRiYzRmLTMyZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtAdVyXkwkiypAgS8j9D7Vy7lQ0SMM/XjpKZnaqkM7WD0wVIzpXqEJOzzOEjnn B11uac5RrK6M5sQoFvPjT7XMqZ83KYZN/9H8PvJ/tTsdA9OBrEkqrfG2jfU/388h qY9F5YjFSFUO1TFObwWDZUDSI9MyOu3VhvQ99iQAm3wvPNq4SOIU/volJujkt8tJ U1NfyV7l+j0QAPoE8CjiiozArZFV0vOcNZaoTryzXDmMfwbQvQqqiU3piEqH6hNt erRK9FL2UynSRfacE5j8MbXn8yyjSpIYF/npaJXqUxLPtAkSFAR1g/jK/umfcRts xj41mt2jbh8qQshSshn+rV77AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmnS/nmm1 EvEz0a8Ssj0Jy16g7zkwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcBqN69Xaf4e5t2LTycf37tS9XX24jQhzpsM6HuQYBf3rEqGdyXkFoi USsLH5XZGZQ7JLrNEXVxJo6RLZ9PXEdwKW5PdkoM3DWt0kmxstsfm/YhLqmKaHro 58aeaPGhqYF/XZd9RSB6Ahn3Na+1xapnpQu56KtHwOZz0mdYg4aGTnLHKTU/c288 OmA0jhzaSVTB91bLS5RrLBcS8PNayGCplZVEHiQT0hMpaG9qU+G46DPJqQntSLzi bX8PBI/p1b/7g2gYU31vPBrmjvZbzwdZjYZd067MOGVWAPFeeaUEujxiKn4i8bA3 Q4bbKLKcZ3AeoyYSZ5CN8xIPX5BCOQA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:11 2025 by rpki-client