$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: OHmmkXWCXYTXm4HnhaIaVYybWuda+/Ts/lKQ+Wk488Y= Subject key identifier: 5C:F6:6A:08:29:EE:4A:BD:78:E4:9B:A6:52:85:1D:80:20:48:F5:2C Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0158 Signing time: Tue 01 Jul 2025 04:33:52 +0000 Manifest this update: Tue 01 Jul 2025 04:33:51 +0000 Manifest next update: Tue 08 Jul 2025 04:33:51 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: qJoOgM5mQMOXA0z/Mzloeo9EQLbDVU8KgH9ulLXGp+o=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: hWNFLgRLV5rq9DJdXOOCkETTtq81cKwNe+EsCM4by08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Jul 1 04:33:51 2025 GMT Not After : Jul 8 04:33:51 2025 GMT Subject: CN=6863652f-36d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8f:1e:eb:28:6c:f8:f6:e5:74:b6:37:15:3f: a5:27:0e:09:0e:49:e8:8c:c6:82:9c:d1:15:cb:35: 65:14:2b:1f:9d:83:d9:12:83:1c:3b:46:73:bc:2d: a6:71:00:a6:ef:ed:76:c2:c6:02:cc:cd:92:86:8d: f4:c6:5f:b2:cb:1b:24:16:78:c1:b6:1d:58:cf:5d: 83:10:93:8f:cd:c5:fb:df:fd:df:b2:d5:59:c1:e5: fa:5a:b8:31:f5:b7:27:7d:f4:19:38:b6:5e:32:53: e0:a3:71:4b:61:37:dc:87:bf:7b:04:12:1f:e1:e3: dd:3f:07:ff:fd:f3:b4:89:bd:11:a2:24:71:26:38: 4b:db:d4:d1:53:2c:50:b3:56:05:08:f1:b3:dd:85: 05:2c:8d:a4:f5:fa:5c:71:e7:8b:de:21:02:e0:72: f5:a6:29:3a:00:81:d7:f8:88:58:a7:9c:ec:de:b6: 90:1f:74:5d:9f:37:81:df:50:5a:a3:cf:d7:fa:e8: a7:df:c0:6c:9a:4f:8f:03:e0:d3:cb:f0:fa:d5:ef: c3:5b:bc:ac:17:24:51:a8:73:33:1b:37:91:e1:32: dc:53:9c:03:83:4f:5b:e1:68:fa:80:fa:f9:a4:87: aa:25:54:43:a7:83:04:65:17:a4:ed:d5:e3:25:a1: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:6A:08:29:EE:4A:BD:78:E4:9B:A6:52:85:1D:80:20:48:F5:2C X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:07:9c:a9:d0:d0:b3:3b:3d:f1:e0:d9:7f:c5:fb:7d:fa: 79:b8:7a:ca:80:71:e7:69:77:0f:69:4e:a8:cd:ac:8c:d7:53: 0f:4d:8e:21:41:fe:f0:59:8e:40:1e:9f:c4:5a:3b:4e:a7:26: cc:6c:fe:df:7a:cd:ee:07:2f:58:a2:32:53:4f:1a:7b:10:b1: b7:c9:37:ac:d0:9c:8c:31:e0:ee:2d:00:44:f9:ea:b9:6b:0c: 11:2c:49:3c:a2:d8:ee:3a:22:9a:62:c2:86:f8:2c:55:f4:36: 5a:c9:1e:11:3b:1b:08:b8:b5:19:10:9b:93:63:9a:00:ba:98: a4:e5:2c:a3:33:71:d0:53:c4:fe:5e:93:69:76:dd:9d:1a:99: 53:34:50:47:f5:4f:7c:58:cc:d4:e8:c2:fc:07:ea:e2:d8:e8: 03:f4:7f:2e:21:8a:97:38:f1:85:03:21:77:af:f2:94:f4:be: 69:66:bf:57:82:8a:0e:bb:08:5f:87:47:3d:e1:85:6e:07:d2: 66:53:24:6a:8f:ca:a5:39:1d:86:d7:0d:6a:e3:be:4d:ed:ca: 59:af:a3:ea:e0:2d:e9:65:52:4b:d4:f9:7d:ae:69:bd:e5:6f: 9d:68:4c:17:23:33:c3:d1:e1:66:59:b9:f6:8a:b9:62:c9:f3: 71:97:9f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUwNzAxMDQzMzUxWhcNMjUwNzA4MDQzMzUxWjAYMRYwFAYD VQQDEw02ODYzNjUyZi0zNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA548e6yhs+PbldLY3FT+lJw4JDknojMaCnNEVyzVlFCsfnYPZEoMcO0ZzvC2m cQCm7+12wsYCzM2Sho30xl+yyxskFnjBth1Yz12DEJOPzcX73/3fstVZweX6Wrgx 9bcnffQZOLZeMlPgo3FLYTfch797BBIf4ePdPwf//fO0ib0RoiRxJjhL29TRUyxQ s1YFCPGz3YUFLI2k9fpcceeL3iEC4HL1pik6AIHX+IhYp5zs3raQH3RdnzeB31Ba o8/X+uin38Bsmk+PA+DTy/D61e/DW7ysFyRRqHMzGzeR4TLcU5wDg09b4Wj6gPr5 pIeqJVRDp4MEZRek7dXjJaGXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz2aggp 7kq9eOSbplKFHYAgSPUsMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1DQecqdDQszs98eDZf8X7ffp5uHrKgHHnaXcPaU6ozayM11MPTY4h Qf7wWY5AHp/EWjtOpybMbP7fes3uBy9YojJTTxp7ELG3yTes0JyMMeDuLQBE+eq5 awwRLEk8otjuOiKaYsKG+CxV9DZayR4ROxsIuLUZEJuTY5oAupik5SyjM3HQU8T+ XpNpdt2dGplTNFBH9U98WMzU6ML8B+ri2OgD9H8uIYqXOPGFAyF3r/KU9L5pZr9X gooOuwhfh0c94YVuB9JmUyRqj8qlOR2G1w1q475N7cpZr6Pq4C3pZVJL1Pl9rmm9 5W+daEwXIzPD0eFmWbn2irliyfNxl591 -----END CERTIFICATE-----Generated at Wed Jul 2 22:31:05 2025 by rpki-client