$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: tlL+4W51TgUN//IQLcku+wmLDCXtIV4yUUc6rGqfdE4= Subject key identifier: A2:16:E3:99:D4:0A:CE:1B:90:03:94:C5:3B:2C:77:F6:79:58:79:2E Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 088D Signing time: Sat 10 May 2025 22:31:31 +0000 Manifest this update: Sat 10 May 2025 22:31:31 +0000 Manifest next update: Sat 17 May 2025 22:31:31 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: o748Lygc1ivnDHXhkxx641UHKUb01ytm9KxldblYvlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: May 10 22:31:31 2025 GMT Not After : May 17 22:31:31 2025 GMT Subject: CN=681fd3c3-3091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:2d:6b:bb:23:ec:74:2f:aa:0a:e2:04:ad: de:ef:4a:c9:ed:9b:07:95:3b:5a:75:c5:de:fe:7f: e0:a3:d1:b7:bb:7c:1d:bf:93:3f:b3:7b:56:1c:a4: b7:07:93:84:77:93:3e:e4:e7:ed:78:99:14:ec:83: 80:3c:69:1b:b4:53:b3:99:a5:55:22:0d:b8:34:6e: 57:55:5f:74:d2:03:8a:d4:8f:24:bb:ec:19:80:fd: 69:ea:e9:91:3b:1b:57:37:8c:48:c2:72:e8:01:b3: 98:6c:9b:67:9f:8c:27:71:d8:e1:e1:1c:d4:6f:0b: 36:3d:99:43:7d:67:d2:60:87:f5:4e:49:95:9c:d3: d3:f6:3b:bd:d4:a1:20:2c:90:62:a1:fe:63:e3:53: dd:d9:7f:da:ab:a5:93:0e:5c:9d:ca:71:39:b3:cc: 0f:8c:f1:d1:54:2a:e1:44:cd:bc:ba:89:e4:f9:62: cb:b9:05:cf:c5:4b:51:26:19:4e:83:3e:cb:8f:d5: 6e:8a:1d:80:cc:9f:53:16:25:44:fe:76:a8:38:49: d8:49:4d:0e:9f:10:85:f2:b5:2c:48:cc:bf:c4:38: 15:c0:81:6a:80:d9:61:9e:86:d3:94:29:69:66:a3: 95:08:ce:83:03:26:39:e7:3c:c3:d2:26:95:08:ce: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:E3:99:D4:0A:CE:1B:90:03:94:C5:3B:2C:77:F6:79:58:79:2E X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3a:d1:f2:0d:88:93:99:4c:b1:26:c3:0e:6a:4c:3c:89:52: ba:d3:bb:f0:0b:e7:f8:99:c1:ad:ab:56:0c:5b:b8:60:4e:60: f1:42:f7:32:54:bf:a4:fb:24:87:8a:6a:94:ca:67:34:41:22: 8a:fb:0b:36:95:45:3f:8c:8d:d1:92:48:ed:22:5d:1f:ee:ff: fd:e9:92:35:c7:64:c1:98:a5:56:19:d1:a7:ab:77:1f:d2:3c: 0c:eb:27:e8:8a:70:df:24:d3:fd:6e:7b:5e:2d:49:a3:fb:62: e9:22:5b:91:1b:36:1b:81:de:f9:6a:a8:30:39:5a:de:0c:2d: 97:ae:f4:5a:98:41:bd:92:16:c3:4a:1c:c9:8f:21:d3:52:d9: 6e:5b:d4:54:79:cb:38:e1:e4:2f:8a:cf:18:db:36:db:30:ea: fa:6a:16:ed:45:70:d6:8a:15:32:d4:c7:c1:32:8d:40:16:86: df:48:8f:8f:bc:b6:4f:fb:8b:7a:33:ef:63:e0:c6:04:e9:5d: 00:0b:8c:31:07:a7:c8:71:4b:ab:76:4e:3f:8b:65:b0:1b:13: 19:41:18:e7:dc:f0:1a:92:04:eb:19:18:9e:79:91:bf:fb:62: 98:58:0b:82:8a:d0:5d:44:a0:a9:1e:4e:2e:5c:23:ca:0c:40: dd:96:03:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjUwNTEwMjIzMTMxWhcNMjUwNTE3MjIzMTMxWjAYMRYwFAYD VQQDEw02ODFmZDNjMy0zMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofUta7sj7HQvqgriBK3e70rJ7ZsHlTtadcXe/n/go9G3u3wdv5M/s3tWHKS3 B5OEd5M+5OfteJkU7IOAPGkbtFOzmaVVIg24NG5XVV900gOK1I8ku+wZgP1p6umR OxtXN4xIwnLoAbOYbJtnn4wncdjh4RzUbws2PZlDfWfSYIf1TkmVnNPT9ju91KEg LJBiof5j41Pd2X/aq6WTDlydynE5s8wPjPHRVCrhRM28uonk+WLLuQXPxUtRJhlO gz7Lj9Vuih2AzJ9TFiVE/naoOEnYSU0OnxCF8rUsSMy/xDgVwIFqgNlhnobTlClp ZqOVCM6DAyY55zzD0iaVCM6ZKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIW45nU Cs4bkAOUxTssd/Z5WHkuMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABOtHyDYiTmUyxJsMOakw8iVK607vwC+f4mcGtq1YMW7hgTmDxQvcy VL+k+ySHimqUymc0QSKK+ws2lUU/jI3RkkjtIl0f7v/96ZI1x2TBmKVWGdGnq3cf 0jwM6yfoinDfJNP9bnteLUmj+2LpIluRGzYbgd75aqgwOVreDC2XrvRamEG9khbD ShzJjyHTUtluW9RUecs44eQvis8Y2zbbMOr6ahbtRXDWihUy1MfBMo1AFobfSI+P vLZP+4t6M+9j4MYE6V0AC4wxB6fIcUurdk4/i2WwGxMZQRjn3PAakgTrGRieeZG/ +2KYWAuCitBdRKCpHk4uXCPKDEDdlgMa -----END CERTIFICATE-----Generated at Sun May 11 07:39:21 2025 by rpki-client