$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: 0AHD+J1eTNvRjie0Ka330EwwRxz34OmlTO3ZQxg5y2A= Subject key identifier: 3E:04:47:D0:46:0D:CD:F7:B1:62:EA:6E:9D:93:F8:0A:27:90:29:35 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 01FF Signing time: Mon 11 May 2026 03:12:08 +0000 Manifest this update: Mon 11 May 2026 03:12:07 +0000 Manifest next update: Mon 18 May 2026 03:12:07 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: 38j1OukEOxtOnkyf+Ncj5f2jlLIBi/E1n8AaTTo+Rms=) 2: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) 3: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: May 11 03:12:07 2026 GMT Not After : May 18 03:12:07 2026 GMT Subject: CN=6a014908-39d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:61:85:33:7d:fb:b5:5c:24:52:a3:9e:19: b5:fe:73:67:bb:f4:6d:7b:69:18:06:ad:d2:4a:ab: ee:86:0c:7e:83:f2:ad:e5:fa:b6:55:8a:c5:2c:56: 11:1f:3d:90:c2:c0:19:5e:68:53:81:81:cc:5e:48: ab:d6:7a:da:6a:3d:21:9e:44:46:34:bd:1a:e1:c2: 68:ab:38:9b:26:00:bd:14:6b:19:5f:4a:c4:04:22: 14:29:6d:45:4c:e6:22:61:4a:87:41:34:39:a5:fb: c5:81:ce:49:87:ce:46:04:08:73:5e:e8:ca:02:58: 82:fd:59:e8:19:bf:82:c6:8c:e3:7d:c4:9a:48:6c: 43:75:3d:fd:cd:fa:2c:8a:9f:06:72:49:8f:73:fd: 9b:25:39:82:a9:08:d1:94:a4:d1:cb:cb:18:5f:6e: 48:d3:55:09:e0:71:1d:40:89:e1:33:ed:18:b2:8c: c4:cf:3b:55:29:58:1d:11:e3:cd:1d:10:20:05:c4: 46:e5:6a:58:70:ca:88:25:58:02:48:c5:0e:9d:8c: a4:aa:a6:47:2a:27:4a:28:ec:49:4f:d6:47:48:8e: 33:96:f9:cb:33:f5:8f:ca:67:5e:2e:b0:cb:f4:1e: db:b5:ac:f4:27:58:8f:59:d8:bd:ff:cf:86:60:1d: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:47:D0:46:0D:CD:F7:B1:62:EA:6E:9D:93:F8:0A:27:90:29:35 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b6:56:27:ae:4a:47:70:a1:e3:ec:00:8f:89:d3:4b:60:cb: 94:00:9a:73:0a:61:2f:76:08:c8:2d:76:b6:b8:58:78:b9:e3: 9d:6e:80:82:69:49:99:b4:4b:1c:8c:09:2d:86:6d:0a:f5:c9: 7e:b0:c3:53:60:b5:70:cc:4e:bd:e6:3f:3a:12:21:f8:23:7d: c8:fc:dc:8b:d9:61:c3:ef:73:4f:7d:92:f9:a1:6b:f4:93:5b: 1a:b2:0c:88:d3:1e:6f:13:5b:14:39:38:37:d7:86:e3:be:3d: 97:5d:43:4a:01:cf:09:82:ec:63:9b:a3:5f:c9:cf:92:cb:c5: fc:73:f2:cc:35:fa:45:45:e3:bb:dc:04:cc:b4:f6:b2:c5:85: 93:30:3d:68:f3:73:e3:fc:0a:4b:8b:97:17:14:60:d5:2a:ba: 25:07:6e:2d:cf:0b:c2:08:39:64:ae:f2:ef:0b:a8:88:0f:9c: 90:80:dc:1d:34:a6:7a:4a:3b:9f:6f:40:65:a0:f4:93:c7:fb: 88:48:47:67:de:5c:4f:ff:88:66:45:c4:60:56:bd:d6:9f:df: 8a:b2:24:92:89:cb:50:b5:81:14:91:05:2a:ae:38:cd:b6:3d: f6:1e:f4:94:ef:30:1b:d4:2a:11:38:bf:49:02:14:32:6d:06: 0f:97:c6:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwNTExMDMxMjA3WhcNMjYwNTE4MDMxMjA3WjAYMRYwFAYD VQQDEw02YTAxNDkwOC0zOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ERhhTN9+7VcJFKjnhm1/nNnu/Rte2kYBq3SSqvuhgx+g/Kt5fq2VYrFLFYR Hz2QwsAZXmhTgYHMXkir1nraaj0hnkRGNL0a4cJoqzibJgC9FGsZX0rEBCIUKW1F TOYiYUqHQTQ5pfvFgc5Jh85GBAhzXujKAliC/VnoGb+CxozjfcSaSGxDdT39zfos ip8GckmPc/2bJTmCqQjRlKTRy8sYX25I01UJ4HEdQInhM+0YsozEzztVKVgdEePN HRAgBcRG5WpYcMqIJVgCSMUOnYykqqZHKidKKOxJT9ZHSI4zlvnLM/WPymdeLrDL 9B7btaz0J1iPWdi9/8+GYB0AZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4ER9BG Dc33sWLqbp2T+AonkCk1MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLZWJ65KR3Ch4+wAj4nTS2DLlACacwphL3YIyC12trhYeLnjnW6AgmlJmbRL HIwJLYZtCvXJfrDDU2C1cMxOveY/OhIh+CN9yPzci9lhw+9zT32S+aFr9JNbGrIM iNMebxNbFDk4N9eG4749l11DSgHPCYLsY5ujX8nPksvF/HPyzDX6RUXju9wEzLT2 ssWFkzA9aPNz4/wKS4uXFxRg1Sq6JQduLc8Lwgg5ZK7y7wuoiA+ckIDcHTSmeko7 n29AZaD0k8f7iEhHZ95cT/+IZkXEYFa91p/firIkkonLULWBFJEFKq44zbY99h70 lO8wG9QqETi/SQIUMm0GD5fG9A== -----END CERTIFICATE-----Generated at Wed May 13 05:02:01 2026 by rpki-client