$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: e7+R+Obm3YZjOPEUpFaJvQddARvWJgj5xA/FW9XfTBY= Subject key identifier: 1D:81:4A:FD:47:F2:B4:01:E9:68:AD:11:72:60:C4:02:E2:02:77:4A Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 01F3 Signing time: Fri 17 Apr 2026 03:02:53 +0000 Manifest this update: Fri 17 Apr 2026 03:02:53 +0000 Manifest next update: Fri 24 Apr 2026 03:02:53 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: k33YJHZs39p+nTEbtfibwbHEj8c/dpC2UIk0pNePKX0=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) 3: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 4: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Apr 17 03:02:53 2026 GMT Not After : Apr 24 03:02:53 2026 GMT Subject: CN=69e1a2dd-9f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:5f:0c:3b:81:52:81:c5:38:fb:a0:8a:27: c7:62:2b:c7:8f:e2:a5:4e:5b:b0:bb:f1:66:4b:9e: c8:37:05:86:4e:35:d0:ba:87:a6:2a:9b:9c:3b:4c: 93:c5:2e:7e:54:02:9d:6a:3b:d4:0d:4b:c8:2c:0c: 74:9a:85:0e:55:b5:52:07:16:11:26:ad:fa:e9:0a: 61:cb:54:76:79:f8:1b:19:d7:70:57:a8:6a:fc:63: 1a:0c:3a:31:15:fc:09:25:82:83:c6:33:d6:49:63: 25:f3:18:8f:47:af:89:dd:39:a0:fb:3d:50:0a:f7: 00:c8:d0:8a:d9:7a:57:92:ed:62:9d:bb:3c:b9:15: 3a:d3:f8:a5:37:4b:ee:d5:49:0c:8c:68:42:6a:ce: 7b:25:ac:af:bc:89:39:8c:bc:95:09:cd:ee:14:af: d8:ed:0e:53:3d:01:f5:1c:a2:bc:ed:22:70:9d:ed: ba:b2:56:c6:6f:e3:66:c2:f6:62:df:c9:03:2f:ef: bc:f0:44:92:12:7b:da:08:b9:01:49:a5:4e:d8:93: 81:be:e5:e4:20:ee:b0:69:02:61:f9:b8:7d:dc:40: f0:37:5a:ab:c5:ee:49:78:51:1e:06:e2:49:fd:61: f6:de:b3:59:cd:3f:0c:f3:e5:a7:f4:a4:3f:3c:bb: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:4A:FD:47:F2:B4:01:E9:68:AD:11:72:60:C4:02:E2:02:77:4A X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2d:94:90:f7:4e:9b:7e:18:3b:b0:59:b4:d0:90:8a:fe:78: 7c:df:89:ec:43:26:1e:1e:e6:0c:88:34:0c:d3:45:3b:2f:33: 48:3a:9e:a3:03:f6:be:7a:e1:8a:7a:02:e9:8f:d6:28:57:0c: 05:cb:31:19:00:2a:b5:a1:20:bb:cf:77:a9:d6:68:35:67:ba: 20:14:39:8b:63:4b:f3:c5:fc:87:e1:a3:cc:09:e9:99:8a:5d: f3:d3:a9:6d:8b:59:e6:41:28:58:e4:a3:66:7d:e9:7a:a8:cc: a1:68:da:3a:ab:52:5f:d4:c3:3f:fc:18:de:63:f5:23:4b:27: 5e:7c:54:c2:f3:56:e1:ff:7e:83:65:e7:f2:3a:23:a3:83:9e: 49:5b:75:34:b9:31:2b:9c:fe:6d:c7:78:57:38:a3:e3:e7:56: 90:38:4c:2e:bf:77:cc:e4:bc:aa:ad:37:84:42:da:bc:3d:c7: 21:42:f3:58:d1:e3:44:a0:97:2f:ea:14:3a:b1:8c:18:a9:f0: 04:8c:3a:fd:0e:9a:47:80:b2:63:35:d6:a0:08:ef:58:f7:ec: 58:33:6c:bb:cd:fd:d1:8f:f7:3c:28:1f:ab:8a:1e:1c:4c:18: af:c4:9e:6b:6f:4b:74:de:9d:53:78:dc:a6:4a:f0:71:e6:ee: ab:37:c9:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwNDE3MDMwMjUzWhcNMjYwNDI0MDMwMjUzWjAYMRYwFAYD VQQDEw02OWUxYTJkZC05ZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6URfDDuBUoHFOPugiifHYivHj+KlTluwu/FmS57INwWGTjXQuoemKpucO0yT xS5+VAKdajvUDUvILAx0moUOVbVSBxYRJq366Qphy1R2efgbGddwV6hq/GMaDDox FfwJJYKDxjPWSWMl8xiPR6+J3Tmg+z1QCvcAyNCK2XpXku1inbs8uRU60/ilN0vu 1UkMjGhCas57JayvvIk5jLyVCc3uFK/Y7Q5TPQH1HKK87SJwne26slbGb+NmwvZi 38kDL++88ESSEnvaCLkBSaVO2JOBvuXkIO6waQJh+bh93EDwN1qrxe5JeFEeBuJJ /WH23rNZzT8M8+Wn9KQ/PLsVwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2BSv1H 8rQB6WitEXJgxALiAndKMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVi2UkPdOm34YO7BZtNCQiv54fN+J7EMmHh7mDIg0DNNFOy8zSDqeowP2vnrh inoC6Y/WKFcMBcsxGQAqtaEgu893qdZoNWe6IBQ5i2NL88X8h+GjzAnpmYpd89Op bYtZ5kEoWOSjZn3peqjMoWjaOqtSX9TDP/wY3mP1I0snXnxUwvNW4f9+g2Xn8joj o4OeSVt1NLkxK5z+bcd4Vzij4+dWkDhMLr93zOS8qq03hELavD3HIULzWNHjRKCX L+oUOrGMGKnwBIw6/Q6aR4CyYzXWoAjvWPfsWDNsu8390Y/3PCgfq4oeHEwYr8Se a29LdN6dU3jcpkrwcebuqzfJeQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:22 2026 by rpki-client