$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: 8LhGIBqENioYoYqjfFDtDoghfdCldobAnhJuWY+w5Gg= Subject key identifier: 95:0F:54:4E:AC:A9:DB:F8:ED:4A:CE:FA:F6:52:5E:61:E3:5E:D7:35 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0223 Signing time: Thu 23 Jul 2026 04:04:22 +0000 Manifest this update: Thu 23 Jul 2026 04:04:21 +0000 Manifest next update: Thu 30 Jul 2026 04:04:21 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: KQFBzA9Lk72vU5l1yHRS2FBOeoTT9N19BFmg4HlX5xY=) 2: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 3: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Jul 23 04:04:21 2026 GMT Not After : Jul 30 04:04:21 2026 GMT Subject: CN=6a6192c6-b997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:f8:cd:f6:2b:33:be:36:34:dc:a7:fe:43: 85:99:a8:d5:bc:a0:b3:52:40:a3:0c:74:f2:92:cf: 3b:d9:74:9b:1f:4e:06:27:65:35:01:84:1a:40:e5: 44:93:1f:53:96:c3:41:c3:5e:f4:b5:39:bc:e9:9e: 50:64:0d:28:ce:81:69:dd:28:4e:f3:07:f6:88:79: d6:06:b0:1a:8d:d1:65:49:6b:12:4e:bd:8c:ff:9c: ae:e1:2f:25:c6:ab:49:ec:69:19:96:c5:40:4b:3a: 5d:6f:81:92:1a:c5:83:fc:6f:9c:85:df:69:db:fe: 88:63:3f:10:c3:7b:ee:be:19:ad:36:10:c6:a2:98: c9:0d:44:be:93:10:49:8a:4a:75:11:b5:5e:e3:2a: 01:55:ad:c0:ad:16:c2:a6:3b:86:99:d1:d5:06:ee: f9:d0:87:b1:59:58:9c:3e:98:f2:b5:72:9f:8e:41: b2:0c:d2:f6:2a:36:68:0b:4b:20:00:c9:47:88:f9: fe:1e:31:31:f4:c9:12:de:aa:c6:7c:d9:ef:61:ff: ec:e9:35:4f:97:af:a9:2f:73:39:96:50:76:67:14: 0d:29:09:1f:da:c8:06:53:b7:20:36:2d:4a:0c:e7: 70:7e:93:bd:6e:88:18:12:6d:d0:f8:4f:5c:02:83: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:54:4E:AC:A9:DB:F8:ED:4A:CE:FA:F6:52:5E:61:E3:5E:D7:35 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:33:e8:c7:c4:8b:9e:a2:bf:12:6b:8a:fb:c3:13:f2:42: 7b:ad:38:09:d4:01:a9:9d:75:1d:e4:46:ed:f0:dc:dd:71:90: cb:79:dc:ec:05:ff:bd:c9:e5:be:47:7b:d2:d8:3d:fd:74:1c: 85:e0:ce:84:44:47:8d:78:00:a3:7e:db:5f:00:a2:84:5c:d8: fc:cb:76:ee:5a:36:92:b0:dd:e0:bc:42:d8:c8:90:ad:19:0f: d1:22:eb:ec:72:c2:45:17:5b:60:1e:93:b4:c7:c5:86:80:3d: a9:aa:ab:79:0a:a8:3f:49:65:cf:3a:27:1a:3f:00:64:fc:c5: 58:2b:b7:9d:72:88:a8:4d:0a:4c:8c:fd:5c:04:2a:5c:dc:e7: b8:55:3c:f7:27:4c:b4:58:4d:7a:46:e6:6b:ae:db:f4:24:26: 93:d6:17:32:0a:28:f1:39:86:dc:ed:83:6d:60:a0:2c:5d:e0: c1:c4:ab:22:1d:f4:ae:7f:c6:7b:96:23:6d:a7:0d:a7:7b:5f: 6c:aa:09:2d:13:c1:cc:da:5c:11:54:1e:1d:ac:03:99:df:34: 11:2e:52:88:64:76:ab:f6:3f:9b:f0:02:a9:37:77:f4:83:38: c6:96:75:13:11:a3:1d:69:db:7e:8f:17:3c:31:a7:95:86:c8: d2:1f:82:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwNzIzMDQwNDIxWhcNMjYwNzMwMDQwNDIxWjAYMRYwFAYD VQQDEw02YTYxOTJjNi1iOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7v4zfYrM742NNyn/kOFmajVvKCzUkCjDHTyks872XSbH04GJ2U1AYQaQOVE kx9TlsNBw170tTm86Z5QZA0ozoFp3ShO8wf2iHnWBrAajdFlSWsSTr2M/5yu4S8l xqtJ7GkZlsVASzpdb4GSGsWD/G+chd9p2/6IYz8Qw3vuvhmtNhDGopjJDUS+kxBJ ikp1EbVe4yoBVa3ArRbCpjuGmdHVBu750IexWVicPpjytXKfjkGyDNL2KjZoC0sg AMlHiPn+HjEx9MkS3qrGfNnvYf/s6TVPl6+pL3M5llB2ZxQNKQkf2sgGU7cgNi1K DOdwfpO9bogYEm3Q+E9cAoNSJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUPVE6s qdv47UrO+vZSXmHjXtc1MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvS0z6MfEi56ivxJrivvDE/JCe604CdQBqZ11HeRG7fDc3XGQy3nc7AX/vcnl vkd70tg9/XQcheDOhERHjXgAo37bXwCihFzY/Mt27lo2krDd4LxC2MiQrRkP0SLr 7HLCRRdbYB6TtMfFhoA9qaqreQqoP0llzzonGj8AZPzFWCu3nXKIqE0KTIz9XAQq XNznuFU89ydMtFhNekbma67b9CQmk9YXMgoo8TmG3O2DbWCgLF3gwcSrIh30rn/G e5YjbacNp3tfbKoJLRPBzNpcEVQeHawDmd80ES5SiGR2q/Y/m/ACqTd39IM4xpZ1 ExGjHWnbfo8XPDGnlYbI0h+CBg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:32 2026 by rpki-client