$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: je3SEJTi1RFO8LzyTZDRtNvY1usuKruJlxjp0pjX79I= Subject key identifier: 42:4F:44:A7:65:4F:36:A3:E6:92:F0:74:DF:89:B9:B1:C8:6D:DD:FD Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0150 Signing time: Sun 15 Jun 2025 03:22:47 +0000 Manifest this update: Sun 15 Jun 2025 03:22:47 +0000 Manifest next update: Sun 22 Jun 2025 03:22:47 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: ILgqb9R5kRLrZ7HWww/Ubzl8m+oEUY3GBM4pTOzaeAk=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: hWNFLgRLV5rq9DJdXOOCkETTtq81cKwNe+EsCM4by08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Jun 15 03:22:47 2025 GMT Not After : Jun 22 03:22:47 2025 GMT Subject: CN=684e3c87-e3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ca:75:3c:63:99:1c:97:be:5f:3c:ae:15:b8: 8f:04:9e:af:bc:4b:e1:bb:d9:ea:ed:38:42:13:c0: 8f:3e:fa:a0:71:c9:6d:69:81:84:09:1e:2b:5f:fa: 06:83:79:74:f4:e5:c9:e5:a9:99:4a:f3:e6:39:07: 1d:53:bc:11:0f:69:04:94:97:ee:a7:fd:19:40:7e: 6a:d1:44:11:bf:c7:aa:20:43:77:13:00:eb:6d:57: b5:ed:95:fa:83:40:c3:e0:43:ee:10:61:98:d8:96: 44:bc:e7:01:a9:44:c7:68:2f:91:8f:c0:36:c9:a5: e8:70:ac:f8:22:27:17:f1:14:36:14:6c:d5:82:1d: 95:da:d9:e3:b9:3e:87:28:bb:6d:d5:a9:60:19:7e: 19:0a:c7:97:d6:a9:29:f1:54:b5:3a:f1:ed:83:30: 12:36:1f:dd:88:b5:b8:09:97:47:2d:90:b2:b7:80: 19:e2:36:b0:c3:2b:b0:4e:62:ac:52:5e:3a:74:45: 83:41:8f:f4:cb:3b:64:86:23:c2:c3:02:29:33:76: 63:7d:fd:12:e7:58:78:22:09:05:75:77:b4:32:d1: df:98:7d:b2:22:7c:ed:50:00:1d:f4:9d:fd:d3:05: 7f:5d:e0:08:5d:0c:2a:1f:9a:6d:99:ca:0d:8c:3d: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:44:A7:65:4F:36:A3:E6:92:F0:74:DF:89:B9:B1:C8:6D:DD:FD X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:b8:fc:6d:06:c9:b9:bc:ef:62:7d:df:23:5c:ad:2e:0e: 90:aa:aa:7c:67:bc:59:22:45:54:74:70:f4:42:b5:3d:fe:1f: 66:87:03:3d:f3:e9:9a:1d:33:4f:c1:c3:1b:cf:47:b8:b8:28: 12:70:06:c8:57:15:d0:24:7b:c0:04:21:61:3a:10:9d:f5:70: ba:42:bc:48:ed:52:de:38:5d:76:d1:e8:33:8e:87:d9:da:02: d3:1d:87:a7:46:27:6e:e4:44:6c:5a:75:0d:0e:63:9d:6b:95: e6:83:2d:c1:99:2e:c6:af:85:1f:59:81:2b:41:46:2b:0f:77: 3c:63:ce:43:15:a4:a4:94:85:6a:9c:45:d1:a8:c5:2f:9e:15: cb:84:18:3c:27:7a:0c:9a:89:72:84:02:63:6e:df:df:30:c3: 13:a1:04:26:cd:95:bd:fe:cc:f0:57:e4:ca:f7:24:cf:63:1a: cf:41:a1:63:d5:cb:dc:47:77:f5:62:33:50:26:40:ff:8f:a9: 66:39:ab:63:f2:a6:78:96:d3:4b:a0:eb:2e:fd:0c:ee:de:b9: f6:09:d7:14:4e:43:d9:5d:03:f3:50:b1:06:52:93:e7:1d:c8: 25:0c:d1:19:9d:b0:4d:c8:ee:60:56:da:a1:ee:14:d2:ac:90: a8:1e:63:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUwNjE1MDMyMjQ3WhcNMjUwNjIyMDMyMjQ3WjAYMRYwFAYD VQQDEw02ODRlM2M4Ny1lM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98p1PGOZHJe+XzyuFbiPBJ6vvEvhu9nq7ThCE8CPPvqgccltaYGECR4rX/oG g3l09OXJ5amZSvPmOQcdU7wRD2kElJfup/0ZQH5q0UQRv8eqIEN3EwDrbVe17ZX6 g0DD4EPuEGGY2JZEvOcBqUTHaC+Rj8A2yaXocKz4IicX8RQ2FGzVgh2V2tnjuT6H KLtt1algGX4ZCseX1qkp8VS1OvHtgzASNh/diLW4CZdHLZCyt4AZ4jawwyuwTmKs Ul46dEWDQY/0yztkhiPCwwIpM3Zjff0S51h4IgkFdXe0MtHfmH2yInztUAAd9J39 0wV/XeAIXQwqH5ptmcoNjD1+vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJPRKdl Tzaj5pLwdN+JubHIbd39MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+7j8bQbJubzvYn3fI1ytLg6Qqqp8Z7xZIkVUdHD0QrU9/h9mhwM9 8+maHTNPwcMbz0e4uCgScAbIVxXQJHvABCFhOhCd9XC6QrxI7VLeOF120egzjofZ 2gLTHYenRidu5ERsWnUNDmOda5Xmgy3BmS7Gr4UfWYErQUYrD3c8Y85DFaSklIVq nEXRqMUvnhXLhBg8J3oMmolyhAJjbt/fMMMToQQmzZW9/szwV+TK9yTPYxrPQaFj 1cvcR3f1YjNQJkD/j6lmOatj8qZ4ltNLoOsu/Qzu3rn2CdcUTkPZXQPzULEGUpPn HcglDNEZnbBNyO5gVtqh7hTSrJCoHmNF -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:04 2025 by rpki-client