$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: 6hN64XdlVbTNAbTUTjaT2MAighyJUB96Bs3j57q2eXI= Subject key identifier: E0:46:D6:54:9B:8D:70:13:A9:AD:14:3E:6F:81:D3:3D:2C:DB:22:F6 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 01E7 Signing time: Wed 25 Mar 2026 02:46:16 +0000 Manifest this update: Wed 25 Mar 2026 02:46:16 +0000 Manifest next update: Wed 01 Apr 2026 02:46:16 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: afFmwNvYzzFzhqhyIFcPPvryQQHIY4NXTZfi/cWuuKU=) 2: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 3: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Mar 25 02:46:16 2026 GMT Not After : Apr 1 02:46:16 2026 GMT Subject: CN=69c34c78-a673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:af:f5:4a:b2:de:df:92:ca:7a:82:64:0f: 3b:56:2f:74:3e:76:cf:89:c6:e4:e8:21:28:e5:8b: 30:3d:cc:a4:02:a1:36:27:f7:06:40:a8:05:43:95: 69:e3:7e:c5:e7:35:49:af:e1:89:e5:48:08:6d:1b: 6c:37:05:84:c7:33:50:a2:b9:41:e6:41:5d:aa:03: 2c:0e:73:17:d9:44:9d:19:30:67:3f:72:ac:b8:93: 46:4e:ae:1f:dd:b5:19:e0:66:3b:d9:e5:34:48:ef: e8:2a:94:97:50:de:76:3d:80:2a:64:81:27:53:95: e2:61:6d:d2:9a:36:21:ea:14:4e:1c:c2:75:ce:5f: 3c:64:04:dc:0a:8f:1c:dc:fc:a8:a3:b2:f8:fc:af: eb:64:f9:e7:e2:3d:5d:26:00:e0:f9:e1:93:86:90: 7a:c2:9a:73:0e:24:9b:83:67:8b:9c:3b:7f:27:66: 31:cb:0d:6a:cb:db:4a:9f:ba:89:54:a0:74:ea:a2: e2:6f:a6:82:e0:93:72:8d:ba:3d:1b:59:12:53:4a: 0b:5c:ea:a9:22:e0:fe:a2:91:91:b9:5e:80:ae:1b: 31:85:49:85:99:c6:dd:73:8f:68:26:09:e0:b6:e8: 3a:c2:ae:08:5f:1a:e9:38:12:40:00:2d:97:1d:dd: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:D6:54:9B:8D:70:13:A9:AD:14:3E:6F:81:D3:3D:2C:DB:22:F6 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:3a:fb:07:e3:e5:4c:38:66:ec:46:aa:65:39:e1:fd:6c: 35:5d:62:5c:33:a7:53:0d:6f:d0:99:bc:26:52:26:8b:8a:18: a4:45:59:46:96:16:68:80:3b:99:7e:1e:61:b0:ab:cf:19:33: b9:50:63:67:88:2e:76:fd:fc:63:81:fb:ca:68:2a:ca:f1:a6: 74:c5:1a:04:14:01:79:11:95:e5:94:54:70:f1:a3:b2:30:01: 3c:91:d4:79:18:c8:ba:3e:4f:ec:b4:2c:1b:f7:86:10:1f:c0: 79:d8:99:83:c1:01:8d:78:14:46:b5:26:83:a2:fd:8c:6b:04: ea:81:26:cc:fe:6b:64:aa:a5:99:07:1d:2d:3e:3f:40:46:f4: 33:d6:4a:f2:35:5d:9b:be:e7:32:29:6f:f1:61:9c:f9:72:fe: d5:b6:ba:a9:83:d7:be:3b:e3:28:76:5c:bf:c2:43:68:9d:a6: 76:6f:b4:e2:f3:10:d1:6f:04:29:93:a5:6f:a8:6f:9d:66:65: 81:0b:bd:27:5a:fb:18:43:eb:e5:24:72:ba:28:31:26:62:76: 16:62:c8:c2:41:f3:c0:96:b7:a2:1a:b7:03:75:52:fd:b4:4f: 99:6b:df:5d:e7:5c:5c:bd:8f:f0:2f:65:a9:3c:7b:88:70:ab: f0:80:9e:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwMzI1MDI0NjE2WhcNMjYwNDAxMDI0NjE2WjAYMRYwFAYD VQQDEw02OWMzNGM3OC1hNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjhGv9Uqy3t+SynqCZA87Vi90PnbPicbk6CEo5YswPcykAqE2J/cGQKgFQ5Vp 437F5zVJr+GJ5UgIbRtsNwWExzNQorlB5kFdqgMsDnMX2USdGTBnP3KsuJNGTq4f 3bUZ4GY72eU0SO/oKpSXUN52PYAqZIEnU5XiYW3SmjYh6hROHMJ1zl88ZATcCo8c 3Pyoo7L4/K/rZPnn4j1dJgDg+eGThpB6wppzDiSbg2eLnDt/J2Yxyw1qy9tKn7qJ VKB06qLib6aC4JNyjbo9G1kSU0oLXOqpIuD+opGRuV6ArhsxhUmFmcbdc49oJgng tug6wq4IXxrpOBJAAC2XHd10fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBG1lSb jXATqa0UPm+B0z0s2yL2MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQI6+wfj5Uw4ZuxGqmU54f1sNV1iXDOnUw1v0Jm8JlImi4oYpEVZRpYWaIA7 mX4eYbCrzxkzuVBjZ4gudv38Y4H7ymgqyvGmdMUaBBQBeRGV5ZRUcPGjsjABPJHU eRjIuj5P7LQsG/eGEB/AediZg8EBjXgURrUmg6L9jGsE6oEmzP5rZKqlmQcdLT4/ QEb0M9ZK8jVdm77nMilv8WGc+XL+1ba6qYPXvjvjKHZcv8JDaJ2mdm+04vMQ0W8E KZOlb6hvnWZlgQu9J1r7GEPr5SRyuigxJmJ2FmLIwkHzwJa3ohq3A3VS/bRPmWvf XedcXL2P8C9lqTx7iHCr8ICe1g== -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:32 2026 by rpki-client