$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: kftUApNnUs3wzR/dyZCItQUd3asD65pVo8VnStw7LIY= Subject key identifier: 92:3F:68:08:E0:33:2E:98:EF:46:B1:97:09:4B:1A:DE:BD:D7:7F:AB Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0192 Signing time: Sun 19 Oct 2025 06:04:24 +0000 Manifest this update: Sun 19 Oct 2025 06:04:24 +0000 Manifest next update: Sun 26 Oct 2025 06:04:24 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: eIdIhw8HJc71HtePpKqveHHgj7+O2KS0zu+u6UTQc+w=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: LiaqpSK92cBpFsHl2uGwMK05eZl8TgnXPG5GLO/r81A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Oct 19 06:04:24 2025 GMT Not After : Oct 26 06:04:24 2025 GMT Subject: CN=68f47f68-a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:d4:cc:2e:7e:e4:98:1d:41:02:d1:84:65: 70:6d:5b:89:23:ec:ad:19:f8:23:29:bf:3f:ac:b5: ca:cc:48:ee:e2:65:b2:52:b8:93:d0:8b:2e:83:93: 14:e1:af:a9:c3:b8:36:5b:da:ea:4c:8d:7e:fa:59: f1:53:48:18:55:c2:dc:59:52:f3:32:e2:fa:a8:f4: e5:bd:f3:4d:44:dc:83:cf:1e:4b:55:0b:04:f2:e7: db:d1:f8:d7:d5:c6:d0:ad:cd:80:ee:4d:a3:ad:44: 05:bf:81:a2:c2:6c:f2:9a:d4:82:04:ec:db:6d:c7: 75:10:6a:bc:5e:2e:44:aa:0f:fa:23:a8:35:7e:12: 37:da:69:0f:ec:4a:09:17:de:ed:a2:83:9e:64:6e: ed:54:a3:12:50:e5:c4:67:05:d8:8e:e0:59:e7:cc: 2f:af:29:0f:4c:e1:0a:70:a8:98:c4:62:14:6e:94: 1d:11:77:ac:b1:25:d2:0a:d5:3a:76:d6:f0:e7:49: de:5c:53:1f:a8:f4:ef:40:39:a3:40:9d:0f:00:0c: 2e:6d:54:f2:53:18:36:06:c0:28:b7:48:0f:b3:c7: c8:f9:be:5f:ad:f3:f7:29:df:3a:e9:4d:37:a0:a9: e4:7a:8c:f1:8d:e5:76:64:3d:41:b1:d0:3a:f1:ad: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:68:08:E0:33:2E:98:EF:46:B1:97:09:4B:1A:DE:BD:D7:7F:AB X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:12:4f:2c:98:61:60:bd:ed:9f:0f:73:03:49:4c:04:bd:0b: da:d9:dc:bd:9b:08:56:e3:1e:81:85:1d:5c:96:18:51:0e:47: 7f:69:71:4b:fb:29:00:3e:0b:bf:fc:0b:d6:ff:48:ee:9e:82: ed:d2:e6:02:d2:b2:9e:85:b8:59:cf:76:8e:bb:5b:4f:29:fe: 22:5c:24:26:bb:95:2e:3a:e6:e6:4a:6d:ad:ba:6b:db:d1:42: 59:04:0f:22:9e:f8:79:b4:72:1e:ad:8a:1e:7c:be:0e:46:1e: 41:f8:89:fb:ed:c3:06:dd:5f:7e:98:e8:6d:65:45:71:ae:28: db:9d:44:f1:d8:56:a3:d2:83:88:6d:44:ac:f0:89:bc:fd:0d: 58:62:77:b7:a6:27:ae:1c:1a:2f:6d:5d:ec:12:95:c5:d7:0a: 59:6b:2e:82:09:ba:70:07:7c:41:0c:87:f4:3f:34:22:7e:51: d2:c0:ef:8c:a0:73:56:e0:e9:6d:67:c9:92:73:a0:42:a0:00: b7:3b:4f:96:d3:c0:67:a6:39:15:21:e4:c5:05:98:62:9e:74: fb:e4:a8:7d:68:2a:66:08:7e:fb:ca:4a:cb:10:a7:51:9c:e0: c6:19:bd:b2:81:92:05:59:df:7f:c4:c3:0a:45:73:9e:cd:02: 52:3b:d9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUxMDE5MDYwNDI0WhcNMjUxMDI2MDYwNDI0WjAYMRYwFAYD VQQDEw02OGY0N2Y2OC1hMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtePUzC5+5JgdQQLRhGVwbVuJI+ytGfgjKb8/rLXKzEju4mWyUriT0Isug5MU 4a+pw7g2W9rqTI1++lnxU0gYVcLcWVLzMuL6qPTlvfNNRNyDzx5LVQsE8ufb0fjX 1cbQrc2A7k2jrUQFv4GiwmzymtSCBOzbbcd1EGq8Xi5Eqg/6I6g1fhI32mkP7EoJ F97tooOeZG7tVKMSUOXEZwXYjuBZ58wvrykPTOEKcKiYxGIUbpQdEXessSXSCtU6 dtbw50neXFMfqPTvQDmjQJ0PAAwubVTyUxg2BsAot0gPs8fI+b5frfP3Kd866U03 oKnkeozxjeV2ZD1BsdA68a165wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI/aAjg My6Y70axlwlLGt6913+rMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSEk8smGFgve2fD3MDSUwEvQva2dy9mwhW4x6BhR1clhhRDkd/aXFL +ykAPgu//AvW/0junoLt0uYC0rKehbhZz3aOu1tPKf4iXCQmu5UuOubmSm2tumvb 0UJZBA8invh5tHIerYoefL4ORh5B+In77cMG3V9+mOhtZUVxrijbnUTx2Faj0oOI bUSs8Im8/Q1YYne3pieuHBovbV3sEpXF1wpZay6CCbpwB3xBDIf0PzQiflHSwO+M oHNW4OltZ8mSc6BCoAC3O0+W08BnpjkVIeTFBZhinnT75Kh9aCpmCH77ykrLEKdR nODGGb2ygZIFWd9/xMMKRXOezQJSO9lU -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:34 2025 by rpki-client