$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: StqLgL37q3oPVoFXt9+/lL8D4goCcO5elokYM4JqJnU= Subject key identifier: 57:05:99:48:37:45:F9:EA:FD:81:A1:5B:8F:41:65:74:85:DD:C2:CB Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 019A Signing time: Wed 05 Nov 2025 03:32:11 +0000 Manifest this update: Wed 05 Nov 2025 03:32:11 +0000 Manifest next update: Wed 12 Nov 2025 03:32:11 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: njqkntUQ94X96q2nqVGkpy24enYZGYH1/xZR89XFyPs=) 2: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: LiaqpSK92cBpFsHl2uGwMK05eZl8TgnXPG5GLO/r81A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Nov 5 03:32:11 2025 GMT Not After : Nov 12 03:32:11 2025 GMT Subject: CN=690ac53b-7dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:4d:b6:d3:4f:b2:6b:2f:0f:ab:7d:8b:5d: 7e:27:22:aa:aa:09:3b:d5:6d:44:80:53:a8:4b:04: e7:bc:89:38:9a:6f:ac:76:a8:46:06:cb:fd:8e:70: 14:df:dd:51:a3:53:10:1b:67:45:dc:fd:72:bd:35: 3c:94:bf:fc:c4:88:24:c7:eb:44:0a:8e:b0:4c:80: e2:04:3d:50:df:8f:d5:56:0a:2d:ff:fe:cb:3a:1b: 17:1f:78:dc:d2:f6:bc:c0:b8:91:35:cd:49:af:47: 6b:1d:1d:2a:17:fd:a1:b9:49:34:c0:09:c2:5c:77: 2b:28:17:fd:12:de:af:ac:db:cb:53:21:8e:a6:31: 63:05:b0:fc:a8:a8:38:91:c7:2f:df:c4:1c:53:04: f5:c0:b0:5c:09:ed:56:b5:f5:f6:f7:7e:04:71:81: d8:d6:33:ac:7a:40:15:46:01:50:1a:dc:0e:da:71: 97:a4:34:9d:a5:90:03:96:21:2d:a6:cb:19:c7:20: a6:9e:85:a8:54:ee:f7:b9:dc:40:b6:88:e0:36:6a: af:20:96:62:23:46:3d:40:77:0b:34:52:2d:bc:01: bc:1e:43:45:b0:ac:80:5f:94:09:84:53:e5:29:2c: 6d:b7:5d:a4:dd:d2:4f:66:ef:be:69:b4:9b:9d:de: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:05:99:48:37:45:F9:EA:FD:81:A1:5B:8F:41:65:74:85:DD:C2:CB X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:41:28:20:c1:70:95:95:38:fd:c8:44:4c:7d:09:ed:63:e6: 5d:17:8e:65:24:e9:42:dd:92:7a:ff:89:05:59:85:7a:40:eb: 33:4d:14:9f:0a:fd:f4:de:2b:f9:fe:a4:bb:cf:87:48:ff:98: db:83:0e:ec:a1:7d:bb:18:83:e6:1a:cd:4b:a0:ee:fe:8b:bb: 30:ca:da:79:b8:21:f0:3c:d4:fc:63:34:5a:35:b3:c4:01:11: 72:3d:b3:b8:03:54:e7:2f:47:e0:53:f4:6e:52:19:b5:d0:16: 17:7d:9c:b3:f2:24:37:d0:fd:eb:51:43:78:f3:55:3a:5b:89: a8:45:9c:2f:f7:da:f8:b3:81:0d:26:3a:25:05:13:5e:4c:a9: 6a:af:18:59:96:f9:f3:59:55:10:58:0c:29:c2:12:d3:66:bc: 85:17:f3:09:22:d8:ee:a8:0e:98:4b:d1:01:dc:8f:eb:82:31: b5:f9:24:fa:c8:81:9c:66:1e:8f:7e:bf:8d:37:01:7a:1c:a5: 32:91:74:bc:2b:e3:d9:79:ff:bd:d2:dc:ad:fe:38:b4:31:22: 73:b0:ba:b4:7a:89:9e:c0:1f:1b:0d:c1:e4:7c:3e:aa:c0:bd: ba:89:f4:7c:fe:87:86:48:be:6b:e5:41:48:3f:4e:66:a3:78: 1c:be:59:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjUxMTA1MDMzMjExWhcNMjUxMTEyMDMzMjExWjAYMRYwFAYD VQQDEw02OTBhYzUzYi03ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRhNttNPsmsvD6t9i11+JyKqqgk71W1EgFOoSwTnvIk4mm+sdqhGBsv9jnAU 391Ro1MQG2dF3P1yvTU8lL/8xIgkx+tECo6wTIDiBD1Q34/VVgot//7LOhsXH3jc 0va8wLiRNc1Jr0drHR0qF/2huUk0wAnCXHcrKBf9Et6vrNvLUyGOpjFjBbD8qKg4 kccv38QcUwT1wLBcCe1WtfX2934EcYHY1jOsekAVRgFQGtwO2nGXpDSdpZADliEt pssZxyCmnoWoVO73udxAtojgNmqvIJZiI0Y9QHcLNFItvAG8HkNFsKyAX5QJhFPl KSxtt12k3dJPZu++abSbnd7D5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcFmUg3 Rfnq/YGhW49BZXSF3cLLMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeQSggwXCVlTj9yERMfQntY+ZdF45lJOlC3ZJ6/4kFWYV6QOszTRSf Cv303iv5/qS7z4dI/5jbgw7soX27GIPmGs1LoO7+i7swytp5uCHwPNT8YzRaNbPE ARFyPbO4A1TnL0fgU/RuUhm10BYXfZyz8iQ30P3rUUN481U6W4moRZwv99r4s4EN JjolBRNeTKlqrxhZlvnzWVUQWAwpwhLTZryFF/MJItjuqA6YS9EB3I/rgjG1+ST6 yIGcZh6Pfr+NNwF6HKUykXS8K+PZef+90tyt/ji0MSJzsLq0eomewB8bDcHkfD6q wL26ifR8/oeGSL5r5UFIP05mo3gcvllq -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:37 2025 by rpki-client