$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: BITmXi1nytzRD/sFlp3OvGyabrzEff/g9udBhqIgeBk= Subject key identifier: 4C:DF:81:0B:09:61:9F:CF:F6:BF:A0:DF:B0:79:07:5F:48:DB:F6:14 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0247 Signing time: Sun 27 Sep 2026 02:50:28 +0000 Manifest this update: Sun 27 Sep 2026 02:50:28 +0000 Manifest next update: Sun 04 Oct 2026 02:50:28 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: T8wJZW4dPw1PdBmetD0jZdtw1fGPbYgna4Sk3zOhIUw=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: jDTXO9qP7keTH1YjNzPh9yzgUIJHfXRIy6LzaiPiKVw=) 3: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: qokU/ZkJRohn5FsvwtzsCJWdRpAc+XjoHM2gwlTsRJk=) 4: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: SkNwUmLJ74SfA59Yhk/sbqZ/iuszj8FDd+djHLsmqIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Sep 27 02:50:28 2026 GMT Not After : Oct 4 02:50:28 2026 GMT Subject: CN=6ab88474-88a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cf:26:42:8b:00:0f:40:71:49:ea:69:2f:2b: 8b:ed:46:bb:78:14:35:25:9d:ed:c7:60:e7:d9:89: d4:27:b0:43:30:d9:0d:a7:45:3a:ec:79:22:df:0f: 00:2b:4f:2b:96:24:89:31:28:e8:ba:94:1a:bd:f6: f0:81:2b:a8:9b:41:ad:c3:ef:d4:28:6e:c5:99:67: c5:73:73:0c:59:c8:cc:36:fd:16:26:c8:65:b0:19: 9e:83:be:89:ad:bc:db:a1:ef:4b:e2:d1:d5:23:e3: 69:00:aa:8d:53:c8:66:25:fd:43:7f:d4:da:0f:23: 86:8c:6d:b4:c1:25:7e:9d:0a:45:a0:3c:c1:a1:88: 32:e4:28:b3:e9:a3:ab:7b:53:dd:01:0a:e4:9b:db: c8:1e:66:30:4e:57:9f:bd:42:4f:45:d9:c6:cb:72: ce:55:68:16:b4:cd:71:ea:95:81:17:3e:6d:a8:c7: 36:ef:3a:d7:ff:ed:88:76:0f:bb:ef:4a:2a:c5:1f: c5:ea:c8:84:0b:16:44:a1:47:6e:35:38:50:7f:a2: 6b:80:71:1e:0c:67:d9:af:ce:cd:f0:e6:44:3e:94: db:9d:3b:fd:ce:ee:15:64:be:2d:d6:9b:4c:d8:77: 0b:61:57:3f:36:a3:08:8a:7f:e9:66:4d:3e:bd:45: 35:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:81:0B:09:61:9F:CF:F6:BF:A0:DF:B0:79:07:5F:48:DB:F6:14 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:32:d9:e4:35:9a:d0:b1:fe:71:2f:bc:60:6b:a5:05:ce: 35:d2:58:d8:19:49:bf:14:fe:66:94:27:9e:b6:82:0b:1b:57: 19:28:79:2e:d3:0e:9f:6c:d8:d4:bf:4b:74:a9:76:50:15:d0: 4b:fb:d9:85:65:6c:ab:a6:93:65:db:2e:e2:59:56:3a:2f:27: 20:fa:b6:e5:7c:6a:c0:fd:5d:37:27:ea:d0:76:4d:d8:b9:b0: 04:c7:42:df:bb:1e:9f:9a:9a:13:24:84:12:e9:d9:57:7e:5c: d7:43:8d:f2:5b:8f:47:92:39:0c:5f:a3:29:37:a7:e8:ab:ab: c0:d2:e2:86:e4:04:10:82:85:52:8e:b7:83:0d:d1:6d:94:92: f1:a0:28:86:08:3e:fd:aa:c0:e0:ff:e8:d6:b4:85:ea:31:20: 04:7c:47:d4:15:13:8b:7b:fe:42:00:2c:fd:bf:ad:10:f5:55: 4c:e5:8f:04:b7:31:03:08:40:8f:e6:9d:16:12:aa:bd:e4:43: 3e:84:50:a1:26:ed:23:f8:79:d9:a8:36:48:d3:b3:00:0f:c9: aa:c6:68:12:d3:4e:3f:da:a5:ba:1c:7a:24:1a:42:eb:56:3a: 9e:5d:21:08:1a:a3:72:7f:f6:e9:8d:ae:7c:6a:2a:e9:1b:a5: cf:75:6a:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwOTI3MDI1MDI4WhcNMjYxMDA0MDI1MDI4WjAYMRYwFAYD VQQDEw02YWI4ODQ3NC04OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M8mQosAD0BxSeppLyuL7Ua7eBQ1JZ3tx2Dn2YnUJ7BDMNkNp0U67Hki3w8A K08rliSJMSjoupQavfbwgSuom0Gtw+/UKG7FmWfFc3MMWcjMNv0WJshlsBmeg76J rbzboe9L4tHVI+NpAKqNU8hmJf1Df9TaDyOGjG20wSV+nQpFoDzBoYgy5Ciz6aOr e1PdAQrkm9vIHmYwTlefvUJPRdnGy3LOVWgWtM1x6pWBFz5tqMc27zrX/+2Idg+7 70oqxR/F6siECxZEoUduNThQf6JrgHEeDGfZr87N8OZEPpTbnTv9zu4VZL4t1ptM 2HcLYVc/NqMIin/pZk0+vUU1zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzfgQsJ YZ/P9r+g37B5B19I2/YUMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUs8y2eQ1mtCx/nEvvGBrpQXONdJY2BlJvxT+ZpQnnraCCxtXGSh5LtMOn2zY 1L9LdKl2UBXQS/vZhWVsq6aTZdsu4llWOi8nIPq25XxqwP1dNyfq0HZN2LmwBMdC 37sen5qaEySEEunZV35c10ON8luPR5I5DF+jKTen6KurwNLihuQEEIKFUo63gw3R bZSS8aAohgg+/arA4P/o1rSF6jEgBHxH1BUTi3v+QgAs/b+tEPVVTOWPBLcxAwhA j+adFhKqveRDPoRQoSbtI/h52ag2SNOzAA/JqsZoEtNOP9qluhx6JBpC61Y6nl0h CBqjcn/26Y2ufGoq6Rulz3VqIg== -----END CERTIFICATE-----Generated at Sun Sep 27 16:36:14 2026 by rpki-client