$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: d7xxEl06ceduQhYfrP805EVT5ahjH5cInIrhx29Ghkk= Subject key identifier: 5C:AE:93:62:07:6E:98:1D:AE:7F:5D:3D:BC:68:57:0F:13:BF:47:AB Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 092F Signing time: Sun 19 Oct 2025 00:14:40 +0000 Manifest this update: Sun 19 Oct 2025 00:14:40 +0000 Manifest next update: Sun 26 Oct 2025 00:14:40 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: 0U02LmWGOdXEyQfXIzvSANzGcV9kktZpqf7IVuxL/9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: Oct 19 00:14:40 2025 GMT Not After : Oct 26 00:14:40 2025 GMT Subject: CN=68f42d70-c8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:bf:28:71:38:08:0b:af:29:0f:b8:cb:d2: 76:ae:d0:ad:c0:d5:0f:77:1b:3e:ed:12:ef:4c:50: 61:38:0c:f3:85:53:aa:e5:39:d0:56:7f:39:3d:ef: 18:cf:06:f5:39:4d:ca:73:90:3a:08:ee:c2:18:f6: f7:f6:24:af:1c:89:aa:29:c4:0b:a1:46:df:82:ad: 21:c0:09:1d:01:fa:6c:cd:42:17:b8:8a:17:4b:8c: 97:8f:d5:ae:27:9a:6c:01:ce:a3:3b:5b:4a:d7:90: 7c:60:83:51:eb:cd:a2:bd:85:2c:bf:ff:d4:2a:e4: 24:e4:2f:c5:23:dc:6b:2b:fd:33:92:20:c7:20:d8: 2b:19:5b:b1:09:90:c7:a6:37:51:ef:64:1d:91:ac: 59:00:32:ef:c9:42:6b:19:f6:34:e1:02:22:f8:c3: 95:01:74:f6:77:45:d2:e4:3b:b4:9e:e8:ee:a2:9f: 9e:4d:d8:a0:53:4b:93:35:7c:95:0b:63:c2:bb:33: e1:fa:82:f9:cf:72:8a:df:56:95:33:8e:f5:6c:4b: 1b:c5:8c:ae:31:66:66:c3:28:8e:a1:c4:21:ad:3d: 46:06:54:f3:d8:cf:6f:9d:d2:65:74:d0:25:0b:ae: 70:4a:58:d6:d6:27:d4:30:ab:0a:ad:c3:9f:7b:dc: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AE:93:62:07:6E:98:1D:AE:7F:5D:3D:BC:68:57:0F:13:BF:47:AB X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:24:bd:90:37:7c:37:20:94:bd:36:fc:16:6b:11:d3:a8:84: d4:3d:99:75:0d:31:8f:cb:74:7b:5a:ac:30:ac:97:d2:09:68: a0:ce:c8:af:98:36:c5:1d:8e:09:7a:f5:ba:69:d8:6a:c0:11: 2d:1b:e3:73:00:11:4d:38:38:a9:03:c2:e5:90:aa:8a:23:30: 76:13:15:b2:5a:7e:cb:09:14:34:62:bd:ac:18:2f:dc:aa:29: 89:3e:b0:b8:bf:0b:cb:7a:62:04:a8:71:a4:41:ce:6e:4c:c9: f7:37:7e:c3:83:6e:fa:38:21:c5:5d:b2:e4:63:0b:dd:27:5c: 5d:5d:90:26:d4:f1:8f:46:05:fb:78:78:2c:c9:58:72:8d:62: 34:dd:66:15:16:10:50:aa:ba:5e:b5:cc:12:5e:f3:4f:bc:ca: 09:95:f9:ed:ee:15:42:ff:dd:3f:27:00:9f:c6:37:61:48:67: 9d:e6:cf:6c:ec:50:1a:3a:9b:3f:ca:49:32:07:37:a7:a2:a8: 13:41:e0:a3:c4:a5:2e:84:23:08:9a:4c:3b:9f:9a:10:e2:ad: 89:a1:1e:b8:48:da:ec:60:7e:da:55:26:02:e8:1a:8f:96:74: 59:42:e5:24:a8:8a:68:fd:5f:d4:39:5b:58:b1:5c:d4:8d:ca: fd:60:7e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUxMDE5MDAxNDQwWhcNMjUxMDI2MDAxNDQwWjAYMRYwFAYD VQQDEw02OGY0MmQ3MC1jOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VO/KHE4CAuvKQ+4y9J2rtCtwNUPdxs+7RLvTFBhOAzzhVOq5TnQVn85Pe8Y zwb1OU3Kc5A6CO7CGPb39iSvHImqKcQLoUbfgq0hwAkdAfpszUIXuIoXS4yXj9Wu J5psAc6jO1tK15B8YINR682ivYUsv//UKuQk5C/FI9xrK/0zkiDHINgrGVuxCZDH pjdR72QdkaxZADLvyUJrGfY04QIi+MOVAXT2d0XS5Du0nujuop+eTdigU0uTNXyV C2PCuzPh+oL5z3KK31aVM471bEsbxYyuMWZmwyiOocQhrT1GBlTz2M9vndJldNAl C65wSljW1ifUMKsKrcOfe9yz6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyuk2IH bpgdrn9dPbxoVw8Tv0erMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvJL2QN3w3IJS9NvwWaxHTqITUPZl1DTGPy3R7WqwwrJfSCWigzsiv mDbFHY4JevW6adhqwBEtG+NzABFNODipA8LlkKqKIzB2ExWyWn7LCRQ0Yr2sGC/c qimJPrC4vwvLemIEqHGkQc5uTMn3N37Dg276OCHFXbLkYwvdJ1xdXZAm1PGPRgX7 eHgsyVhyjWI03WYVFhBQqrpetcwSXvNPvMoJlfnt7hVC/90/JwCfxjdhSGed5s9s 7FAaOps/ykkyBzenoqgTQeCjxKUuhCMImkw7n5oQ4q2JoR64SNrsYH7aVSYC6BqP lnRZQuUkqIpo/V/UOVtYsVzUjcr9YH5h -----END CERTIFICATE-----Generated at Tue Oct 21 03:06:28 2025 by rpki-client