$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: aRc0udpsg2WJLWS8Eyglfjw5C7WF4ruuLRTHLMYwGME= Subject key identifier: 35:6C:EA:00:38:CC:22:2D:D1:9E:C2:5B:BE:D4:A7:03:BE:D2:6C:2A Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0173 Signing time: Sat 23 Aug 2025 03:55:29 +0000 Manifest this update: Sat 23 Aug 2025 03:55:29 +0000 Manifest next update: Sat 30 Aug 2025 03:55:29 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: XLTynpMAfnn04HDLUdYK6Q2Q6pf2/KOOheRmDAalP08=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: hWNFLgRLV5rq9DJdXOOCkETTtq81cKwNe+EsCM4by08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Aug 23 03:55:29 2025 GMT Not After : Aug 30 03:55:29 2025 GMT Subject: CN=68a93bb1-b78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:9b:b2:26:1a:42:53:ee:28:78:22:3b:02: be:6e:06:c1:e9:a4:67:e7:6d:b2:76:f5:da:1d:56: 3d:0a:ce:40:12:0a:e5:07:13:12:36:e4:f3:57:31: 60:c5:1b:8f:7a:f0:8a:37:c5:ab:f8:78:f4:76:03: 08:64:50:8a:47:46:ba:70:2b:11:95:da:6e:0c:91: 77:00:13:82:2e:d6:5d:57:20:64:87:a9:44:f3:54: 1e:5c:1b:69:be:9c:8f:fe:97:6a:e7:68:43:1e:53: db:fc:58:bd:d2:0b:12:f4:1d:b6:bd:08:fc:95:51: 8a:14:87:80:fe:f8:1b:24:9c:b6:05:e9:33:94:87: bb:2c:90:e7:96:e4:ad:dd:87:ba:18:bf:6f:ac:6e: 95:ef:03:17:bb:32:d9:92:9f:07:9a:91:e4:3c:90: 35:2c:04:5e:18:39:f2:6a:ad:19:1d:84:d0:15:d1: 49:77:4e:94:89:0c:c4:34:b4:2f:f9:28:d2:61:62: 12:b1:74:26:e5:a2:39:68:b8:be:88:c3:12:91:25: 2c:d9:65:6b:7a:38:88:52:41:b9:8a:3e:1b:b8:0c: 52:88:18:d8:db:bf:5e:cb:1e:4a:fd:8e:a2:e1:22: 54:b2:3e:22:87:c1:e7:3b:5d:73:92:cf:3d:22:74: f9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6C:EA:00:38:CC:22:2D:D1:9E:C2:5B:BE:D4:A7:03:BE:D2:6C:2A X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a6:a8:7b:af:04:fc:c6:02:10:c5:4d:2f:ae:fb:8d:f5:aa: 1b:af:2b:a1:0f:49:b4:4c:9b:a0:d5:ac:fc:ac:d3:a9:8d:4d: 33:be:4e:a7:56:4f:83:da:a6:da:8e:1f:d3:8d:d8:ec:05:f3: 09:d4:04:86:57:90:12:b0:75:30:d4:39:54:30:18:c1:d0:d9: eb:a4:fa:51:ae:5a:de:e8:d5:d8:6d:07:4d:bc:86:7b:0e:db: 25:2f:ea:e5:ef:08:d5:3a:1e:d6:7e:a5:e3:f6:4c:74:4f:db: 1b:f7:b5:7f:aa:cc:26:c4:d0:98:7c:0c:90:4b:a6:50:c8:ef: 10:52:db:2f:ec:9e:d0:3b:4b:25:5a:21:e0:9b:bd:75:05:8b: 97:7b:4c:54:7f:3a:08:2d:22:32:5e:ec:2c:b1:5d:a3:14:a3: 5d:1f:34:16:81:52:35:b3:14:68:d1:88:7c:34:38:c2:0e:b0: 8c:a3:ee:2a:bb:c3:b3:27:12:65:5e:3a:c8:5f:03:7a:c0:b5: 08:b7:bb:40:52:2c:94:10:da:fa:ad:5b:ab:27:2e:a2:26:e4: 57:a3:ba:ce:b5:26:70:f3:e5:21:ad:34:28:f8:e7:ef:63:55: 4a:55:fd:0b:a5:d8:90:eb:6c:04:3c:a9:df:af:ac:f1:cf:a7: be:77:f7:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUwODIzMDM1NTI5WhcNMjUwODMwMDM1NTI5WjAYMRYwFAYD VQQDEw02OGE5M2JiMS1iNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gubsiYaQlPuKHgiOwK+bgbB6aRn522ydvXaHVY9Cs5AEgrlBxMSNuTzVzFg xRuPevCKN8Wr+Hj0dgMIZFCKR0a6cCsRldpuDJF3ABOCLtZdVyBkh6lE81QeXBtp vpyP/pdq52hDHlPb/Fi90gsS9B22vQj8lVGKFIeA/vgbJJy2BekzlIe7LJDnluSt 3Ye6GL9vrG6V7wMXuzLZkp8HmpHkPJA1LAReGDnyaq0ZHYTQFdFJd06UiQzENLQv +SjSYWISsXQm5aI5aLi+iMMSkSUs2WVrejiIUkG5ij4buAxSiBjY279eyx5K/Y6i 4SJUsj4ih8HnO11zks89InT5twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVs6gA4 zCIt0Z7CW77UpwO+0mwqMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFpqh7rwT8xgIQxU0vrvuN9aobryuhD0m0TJug1az8rNOpjU0zvk6n Vk+D2qbajh/TjdjsBfMJ1ASGV5ASsHUw1DlUMBjB0NnrpPpRrlre6NXYbQdNvIZ7 DtslL+rl7wjVOh7WfqXj9kx0T9sb97V/qswmxNCYfAyQS6ZQyO8QUtsv7J7QO0sl WiHgm711BYuXe0xUfzoILSIyXuwssV2jFKNdHzQWgVI1sxRo0Yh8NDjCDrCMo+4q u8OzJxJlXjrIXwN6wLUIt7tAUiyUENr6rVurJy6iJuRXo7rOtSZw8+UhrTQo+Ofv Y1VKVf0LpdiQ62wEPKnfr6zxz6e+d/e2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:37 2025 by rpki-client