$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: zc2PBnalFVa1JPkOn4VCr1CUe1+UtFgVy9GFoEvL5d0= Subject key identifier: 50:12:1B:6F:36:B6:CB:6B:33:59:6F:D5:89:C7:11:F6:DD:EC:92:A2 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0140 Signing time: Tue 13 May 2025 03:35:07 +0000 Manifest this update: Tue 13 May 2025 03:35:06 +0000 Manifest next update: Tue 20 May 2025 03:35:06 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: p8Pc4O5VfwW1j8nXapGWGFvl3S0x7b9k4AquI3TalLg=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: hWNFLgRLV5rq9DJdXOOCkETTtq81cKwNe+EsCM4by08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: May 13 03:35:06 2025 GMT Not After : May 20 03:35:06 2025 GMT Subject: CN=6822bdeb-c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:82:e4:6a:02:0d:97:fb:23:a7:19:d1:e3: cd:a5:86:24:20:6c:f7:a0:4f:62:83:68:ec:76:28: 3a:d9:3f:48:ba:1b:6a:19:11:c5:7f:f2:ff:91:31: 44:2f:1b:ce:33:8b:50:30:06:25:82:9b:fc:8b:f5: 94:3b:fb:fd:31:ba:42:8e:22:a9:4e:a8:34:dc:15: 21:2d:f3:35:36:d6:48:c2:52:0c:82:27:ad:01:e8: b6:ca:b9:34:84:e9:a7:ff:b9:0d:e8:6f:68:8e:d6: e8:b6:f2:d8:a5:6e:af:a7:c2:34:00:8d:71:56:39: e9:f2:07:68:7c:ac:6d:d7:8a:c7:1d:ff:fe:ed:40: 2e:6e:f5:5e:0b:18:7b:0a:24:bf:37:b7:04:a6:7b: fb:56:18:e1:54:99:88:cb:11:4f:31:ff:e4:0d:d5: 5a:6d:0e:e6:50:96:fc:d9:38:d6:72:11:04:73:97: 1b:dd:fd:82:ed:45:61:22:b9:b5:dc:0e:c7:25:1d: 00:8c:18:85:fa:d3:c8:5f:c0:47:3e:46:eb:2a:04: 0b:23:a3:47:eb:6c:2a:74:6b:3e:67:ba:5f:0b:3e: 19:27:f3:58:91:80:ec:e1:7c:7a:d8:1a:f1:94:51: 9f:b4:2d:e6:82:4c:eb:c3:12:3d:60:e8:57:dd:52: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:12:1B:6F:36:B6:CB:6B:33:59:6F:D5:89:C7:11:F6:DD:EC:92:A2 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:66:65:d2:76:65:23:42:92:e4:95:c7:82:62:20:05:63: 38:a5:dd:70:e9:fb:6c:f7:eb:09:63:86:8c:d5:0d:3a:73:98: d5:cf:fe:f2:53:6c:31:34:df:4f:76:e5:9f:b9:3f:d5:c8:7f: f6:a4:38:c3:b4:4f:a4:90:ed:06:0c:13:f4:8d:f0:ef:44:fb: b2:25:bc:72:11:50:27:78:3e:e5:75:ef:19:1d:3d:68:10:6d: 21:e0:ef:79:f5:16:ea:00:83:b1:19:a7:d6:dc:6a:43:14:26: d7:53:dd:bb:10:82:66:cf:76:15:aa:98:e6:f2:ab:26:b8:b9: dc:dc:59:55:d2:7e:51:bd:1b:8a:4b:06:6d:85:40:78:b7:17: c8:db:89:5b:48:b9:69:1b:90:46:02:1d:3d:7c:56:b8:be:80: 09:75:e8:1e:54:73:51:e6:c5:78:ce:93:b8:55:b4:c4:87:dc: 8a:01:ee:a1:2a:a2:0d:d4:6d:a4:a0:51:66:9f:0f:2e:cd:13: f2:60:2f:e2:db:c6:11:b5:12:d7:a2:df:ee:7f:37:ed:89:eb: a4:c2:1b:90:6f:29:fe:bc:7f:f1:f2:7d:64:3d:55:87:ce:95: f8:27:5e:f9:47:74:7d:20:cb:b0:01:91:d8:86:7c:54:87:85: 58:8f:f7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUwNTEzMDMzNTA2WhcNMjUwNTIwMDMzNTA2WjAYMRYwFAYD VQQDEw02ODIyYmRlYi1jMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHyC5GoCDZf7I6cZ0ePNpYYkIGz3oE9ig2jsdig62T9IuhtqGRHFf/L/kTFE LxvOM4tQMAYlgpv8i/WUO/v9MbpCjiKpTqg03BUhLfM1NtZIwlIMgietAei2yrk0 hOmn/7kN6G9ojtbotvLYpW6vp8I0AI1xVjnp8gdofKxt14rHHf/+7UAubvVeCxh7 CiS/N7cEpnv7VhjhVJmIyxFPMf/kDdVabQ7mUJb82TjWchEEc5cb3f2C7UVhIrm1 3A7HJR0AjBiF+tPIX8BHPkbrKgQLI6NH62wqdGs+Z7pfCz4ZJ/NYkYDs4Xx62Brx lFGftC3mgkzrwxI9YOhX3VLAtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFASG282 tstrM1lv1YnHEfbd7JKiMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7+mZl0nZlI0KS5JXHgmIgBWM4pd1w6fts9+sJY4aM1Q06c5jVz/7y U2wxNN9PduWfuT/VyH/2pDjDtE+kkO0GDBP0jfDvRPuyJbxyEVAneD7lde8ZHT1o EG0h4O959RbqAIOxGafW3GpDFCbXU927EIJmz3YVqpjm8qsmuLnc3FlV0n5RvRuK SwZthUB4txfI24lbSLlpG5BGAh09fFa4voAJdegeVHNR5sV4zpO4VbTEh9yKAe6h KqIN1G2koFFmnw8uzRPyYC/i28YRtRLXot/ufzftieukwhuQbyn+vH/x8n1kPVWH zpX4J175R3R9IMuwAZHYhnxUh4VYj/eM -----END CERTIFICATE-----Generated at Tue May 13 22:01:36 2025 by rpki-client