$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: Ls9crHHZr2J3oANR6OCFvOE17GL7gatlox6zB9JWm/g= Subject key identifier: 61:86:83:47:CB:CD:7F:B7:34:C8:3F:45:D4:0A:BD:AD:AF:70:30:94 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 10 Signing time: Mon 05 May 2025 06:53:09 +0000 Manifest this update: Mon 05 May 2025 06:53:08 +0000 Manifest next update: Mon 12 May 2025 06:53:08 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: ry8vUBvNodRjOmEN+Xm5B8fbtYEK7OR1AW/Yak2+6qM=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: May 5 06:53:08 2025 GMT Not After : May 12 06:53:08 2025 GMT Subject: CN=68186055-1bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:bf:18:29:62:b2:d6:53:ca:21:c5:42:c9: e1:bf:92:ee:71:8c:f1:c7:73:cd:33:11:ed:de:e4: c3:ad:ab:93:ac:b8:b4:75:27:e8:c3:26:01:21:81: e5:ef:d1:d8:b6:25:bf:c6:17:1d:6f:41:b9:28:c1: 4a:62:ba:09:53:bb:72:0f:f0:39:30:0a:d7:73:cd: 66:3c:73:28:2e:b5:bf:c4:a7:b3:67:13:79:6b:4b: 8a:7b:d7:42:ae:8c:d9:87:60:fc:43:30:78:aa:2d: b3:88:d6:84:19:a7:1e:1c:72:0c:30:07:e3:7b:65: 9e:66:57:75:c4:0c:e2:e3:e9:18:48:0c:62:55:d4: a5:41:1a:7d:f7:e8:36:ce:59:87:e7:e4:5f:2a:f7: 5b:78:56:05:ef:cd:80:ee:2b:3b:6a:40:32:b5:f6: 1a:ca:b6:bc:f3:df:01:33:5e:03:e3:24:5a:20:84: c7:3e:00:fa:4f:06:53:ad:c7:54:9b:60:b4:df:92: ba:15:8c:ca:16:7c:6c:e5:d3:38:56:63:ab:61:03: ec:be:7b:61:b1:cd:dd:48:5e:ac:f2:e8:3b:38:3e: 33:af:35:23:41:19:cf:ec:8d:9f:07:39:b5:9d:af: ca:0b:c9:93:41:ca:51:bc:2d:23:56:76:62:03:3e: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:83:47:CB:CD:7F:B7:34:C8:3F:45:D4:0A:BD:AD:AF:70:30:94 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e4:3c:5e:29:c1:87:bb:e2:32:08:e2:f9:3f:7f:24:a0:db: f3:c1:68:0b:9b:32:9e:f2:cf:90:89:5d:95:47:2b:a4:35:4b: c9:04:16:90:93:96:ce:f0:23:0f:14:e3:d8:54:5c:7a:f1:72: c3:7c:42:aa:74:6d:c3:26:d3:21:62:ce:d0:c2:5c:2f:44:59: 93:da:b5:12:56:bf:b3:f7:d3:18:d5:e4:94:bd:0f:c5:5a:5d: a4:cc:41:c1:15:4a:dd:c9:54:be:9c:ef:e9:7e:0f:c9:30:c6: 31:85:fa:ad:b2:9f:6c:c6:8e:60:6b:69:b4:0e:bb:52:77:40: b6:b9:7b:8b:96:f3:be:20:fc:ba:76:85:c8:29:74:e7:3b:8e: 9c:74:c4:1e:c0:15:a2:62:03:3c:45:55:65:b1:f2:60:b1:97: e9:ae:c6:9b:22:fd:4f:04:a2:e4:6e:11:59:e8:b6:39:38:1d: 2a:3f:d7:f7:2c:df:6f:79:ab:eb:87:90:9d:23:8f:b3:20:b1: 4d:79:12:45:d4:e5:b9:2e:48:a1:64:11:de:db:37:43:2b:33: 5f:38:e6:44:2c:85:4b:2a:11:fb:42:0d:db:06:77:f7:8b:67: 45:b9:3d:56:c5:92:0a:a4:94:19:cb:e2:05:f5:30:ac:ac:a6: 2c:59:72:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTA1MDUwNjUzMDhaFw0yNTA1MTIwNjUzMDhaMBgxFjAUBgNV BAMTDTY4MTg2MDU1LTFiYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9x78YKWKy1lPKIcVCyeG/ku5xjPHHc80zEe3e5MOtq5OsuLR1J+jDJgEhgeXv 0di2Jb/GFx1vQbkowUpiuglTu3IP8DkwCtdzzWY8cygutb/Ep7NnE3lrS4p710Ku jNmHYPxDMHiqLbOI1oQZpx4ccgwwB+N7ZZ5mV3XEDOLj6RhIDGJV1KVBGn336DbO WYfn5F8q91t4VgXvzYDuKztqQDK19hrKtrzz3wEzXgPjJFoghMc+APpPBlOtx1Sb YLTfkroVjMoWfGzl0zhWY6thA+y+e2Gxzd1IXqzy6Ds4PjOvNSNBGc/sjZ8HObWd r8oLyZNBylG8LSNWdmIDPgVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYYaDR8vN f7c0yD9F1Aq9ra9wMJQwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADTkPF4pwYe74jII4vk/fySg2/PBaAubMp7yz5CJXZVHK6Q1S8kEFpCT ls7wIw8U49hUXHrxcsN8Qqp0bcMm0yFiztDCXC9EWZPatRJWv7P30xjV5JS9D8Va XaTMQcEVSt3JVL6c7+l+D8kwxjGF+q2yn2zGjmBrabQOu1J3QLa5e4uW874g/Lp2 hcgpdOc7jpx0xB7AFaJiAzxFVWWx8mCxl+muxpsi/U8EouRuEVnotjk4HSo/1/cs 3295q+uHkJ0jj7MgsU15EkXU5bkuSKFkEd7bN0MrM1845kQshUsqEftCDdsGd/eL Z0W5PVbFkgqklBnL4gX1MKyspixZcmc= -----END CERTIFICATE-----Generated at Wed May 7 00:23:02 2025 by rpki-client