$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: zPr990pZEMJwGkmtczqRQ1vyE3hxFYMmgOJinbmqovo= Subject key identifier: D3:36:C4:3E:1F:1A:DD:0A:80:C2:B5:B8:1C:E3:F9:10:7C:27:04:F6 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0244 Signing time: Mon 21 Sep 2026 02:33:04 +0000 Manifest this update: Mon 21 Sep 2026 02:33:04 +0000 Manifest next update: Mon 28 Sep 2026 02:33:04 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: 532GBwtq1NRuph9H4nGZJ90+35Ew1kyoJEjv6sjCBJ8=) 2: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: qokU/ZkJRohn5FsvwtzsCJWdRpAc+XjoHM2gwlTsRJk=) 3: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: SkNwUmLJ74SfA59Yhk/sbqZ/iuszj8FDd+djHLsmqIU=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: jDTXO9qP7keTH1YjNzPh9yzgUIJHfXRIy6LzaiPiKVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Sep 21 02:33:04 2026 GMT Not After : Sep 28 02:33:04 2026 GMT Subject: CN=6ab09760-902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:b1:e4:5b:81:d5:d9:1c:df:97:c4:aa:a1: a1:8a:39:16:c1:bb:6c:2b:da:5f:b5:a7:19:e7:c3: bd:6c:34:2b:c3:c4:c8:17:ff:75:40:25:e6:d2:f3: a3:d7:b0:72:fc:d7:48:12:cb:51:f5:36:14:de:3e: e4:d1:dd:92:4b:f7:e5:c7:24:f8:3e:90:c7:54:fe: 76:6a:40:2b:3c:74:33:31:e1:56:5f:22:52:5a:5b: 9a:2c:63:ba:b6:b1:f6:5d:18:34:c4:4b:e3:14:1b: 07:fe:50:b5:f8:52:f2:e3:46:34:f3:69:05:a5:04: 61:16:74:76:17:00:85:4a:a3:49:61:c3:ab:de:f2: de:86:25:db:8b:84:42:ee:47:20:d5:8c:ae:19:0f: 20:04:fe:eb:aa:89:56:71:d0:04:c2:1c:98:9f:9c: 86:78:35:f0:a0:2e:32:13:58:a2:38:43:5a:ba:89: 25:c6:2c:ee:88:2a:cc:c0:14:24:19:39:e1:25:f2: 73:bc:95:38:93:43:65:a1:37:ab:97:ed:28:81:18: d6:37:be:8b:a8:86:4f:a0:a5:dd:26:f3:41:59:c4: cf:ec:82:b7:cb:78:60:8e:8a:f2:40:5b:07:7b:73: 89:b5:89:5a:b1:12:6f:c4:9f:78:a3:09:55:0b:14: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:36:C4:3E:1F:1A:DD:0A:80:C2:B5:B8:1C:E3:F9:10:7C:27:04:F6 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:19:46:11:56:4b:86:7a:b3:b0:f3:67:a4:97:3b:4f:ee:0b: 1b:1c:a6:f1:f9:e3:2a:dc:84:52:8d:7e:0e:5c:82:45:d0:14: 7c:91:00:94:55:3d:db:3d:02:03:a5:f7:98:86:f8:b8:00:b2: d3:e1:c2:10:e8:8f:f2:a0:4e:67:7e:b1:98:19:82:8c:fb:85: fe:16:22:9c:30:59:3c:9f:42:41:fd:f9:ca:c9:4b:fb:e4:1d: a0:c8:6e:ce:b2:56:93:fb:65:fa:b4:34:49:3d:48:97:6f:2c: da:ad:4a:4e:5f:d2:fd:70:19:42:86:86:4a:d2:e8:c7:56:e4: f4:06:3b:f1:e5:30:f2:57:18:d7:89:55:4f:0f:1c:48:d5:84: c3:8b:b4:2d:c7:f2:f1:06:14:4a:02:48:72:6d:f9:4b:1d:bc: 5f:c5:17:08:62:f9:65:e9:b9:4b:00:b4:11:31:19:18:32:29: 4d:d7:04:13:48:79:f0:eb:dc:45:bb:1d:d6:f4:f1:f0:86:98: 99:99:53:21:cf:d0:79:73:4d:63:8b:9d:73:05:58:df:ae:28: ca:a8:89:5e:a9:56:dd:1d:9f:2a:22:f7:4b:4c:4f:1b:99:e4: b2:f0:fa:fc:26:95:90:7c:03:a1:52:46:31:7f:52:bb:35:0e: a1:ef:ad:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwOTIxMDIzMzA0WhcNMjYwOTI4MDIzMzA0WjAYMRYwFAYD VQQDEw02YWIwOTc2MC05MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1Gx5FuB1dkc35fEqqGhijkWwbtsK9pftacZ58O9bDQrw8TIF/91QCXm0vOj 17By/NdIEstR9TYU3j7k0d2SS/flxyT4PpDHVP52akArPHQzMeFWXyJSWluaLGO6 trH2XRg0xEvjFBsH/lC1+FLy40Y082kFpQRhFnR2FwCFSqNJYcOr3vLehiXbi4RC 7kcg1YyuGQ8gBP7rqolWcdAEwhyYn5yGeDXwoC4yE1iiOENauoklxizuiCrMwBQk GTnhJfJzvJU4k0NloTerl+0ogRjWN76LqIZPoKXdJvNBWcTP7IK3y3hgjoryQFsH e3OJtYlasRJvxJ94owlVCxTLJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM2xD4f Gt0KgMK1uBzj+RB8JwT2MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAahlGEVZLhnqzsPNnpJc7T+4LGxym8fnjKtyEUo1+DlyCRdAUfJEAlFU92z0C A6X3mIb4uACy0+HCEOiP8qBOZ36xmBmCjPuF/hYinDBZPJ9CQf35yslL++QdoMhu zrJWk/tl+rQ0ST1Il28s2q1KTl/S/XAZQoaGStLox1bk9AY78eUw8lcY14lVTw8c SNWEw4u0Lcfy8QYUSgJIcm35Sx28X8UXCGL5Zem5SwC0ETEZGDIpTdcEE0h58Ovc Rbsd1vTx8IaYmZlTIc/QeXNNY4udcwVY364oyqiJXqlW3R2fKiL3S0xPG5nksvD6 /CaVkHwDoVJGMX9SuzUOoe+tFw== -----END CERTIFICATE-----Generated at Tue Sep 22 05:17:04 2026 by rpki-client