$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: 8pZhgvELxLUGS66SDalm6e5DqcYuKVI5fxZ9do4QkVE= Subject key identifier: 99:BB:F6:91:29:32:7E:CB:9D:5B:1A:FA:3F:44:2E:E0:ED:F0:C1:63 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0225 Signing time: Mon 27 Jul 2026 04:20:36 +0000 Manifest this update: Mon 27 Jul 2026 04:20:35 +0000 Manifest next update: Mon 03 Aug 2026 04:20:35 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: 5wj8W2oLfQtRV5nO/EsYgd7cA8L8ot9P5LuwaZ17e5U=) 2: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) 3: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Jul 27 04:20:35 2026 GMT Not After : Aug 3 04:20:35 2026 GMT Subject: CN=6a66dc93-e14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:e1:9d:53:d1:c3:75:13:ef:31:af:f0:4c: d4:22:83:34:fd:7b:c5:c0:65:f7:44:50:2a:4d:7d: b1:e2:6f:5b:8e:1d:26:06:d7:cc:f3:13:5e:93:68: 31:5a:87:64:94:46:5a:63:0a:bb:ad:e3:e1:ea:2e: e9:8d:63:79:3f:e6:4e:f3:32:b8:00:79:41:36:14: be:96:84:7d:30:34:3f:c3:8d:d2:40:77:4c:a6:8b: 7d:48:a5:5a:ce:84:dc:e2:61:51:d7:70:41:8b:fc: e2:b9:83:0f:0c:67:50:19:98:c5:90:40:04:b8:bc: d3:58:21:5f:d5:54:94:2e:d8:7d:d8:e8:4b:3c:06: 37:7a:61:3a:31:99:88:8a:7b:7f:77:99:c7:a5:0d: 4e:db:7b:3f:99:12:a7:57:c0:8c:bb:7f:ae:c5:1b: 99:93:e1:a0:c7:41:23:63:e1:44:ce:56:8a:0c:28: a5:b7:63:6e:ec:64:54:46:0b:15:52:47:a2:11:19: c0:de:59:f6:09:a2:62:fe:22:37:7a:44:7a:a0:a7: 9b:cc:6d:ff:cb:ed:7c:52:ff:b1:7e:5f:ae:d6:70: 27:c5:ae:7b:a8:0f:db:4c:c6:0c:a7:75:59:bb:1b: ab:34:f4:02:8a:02:56:0f:d2:94:e7:e3:81:e1:65: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:F6:91:29:32:7E:CB:9D:5B:1A:FA:3F:44:2E:E0:ED:F0:C1:63 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:32:47:64:3a:01:07:63:f6:06:ec:fd:3f:a7:54:e0:94:90: e3:3e:b1:35:a3:59:3b:22:e6:b3:16:2b:d1:bb:cf:40:f5:92: db:60:c6:28:81:54:2f:53:b2:66:e8:90:95:e5:56:e1:52:a1: cb:c6:32:0e:0b:13:51:a6:31:a9:2a:66:91:c1:58:1f:51:cf: 1b:66:3d:62:f1:19:26:64:06:0f:dc:3b:fa:1b:62:a4:82:1d: 60:67:a4:1f:2a:05:1a:30:85:42:bd:50:a0:2a:05:c4:00:8f: fc:c9:56:fc:79:03:95:1a:9c:25:56:fd:e7:df:d7:4c:ff:c6: d7:95:7f:e7:82:46:80:57:bb:20:6d:42:64:fa:a3:26:70:7a: f5:bd:ef:8f:7b:b8:fe:f7:9e:a7:84:7d:42:7c:11:28:de:27: df:74:ad:ad:a7:b4:e5:84:6a:7b:e5:a8:1b:00:f6:17:4c:aa: 71:09:99:62:5c:f3:63:b1:d5:23:75:e8:d8:29:ab:7f:21:26: 0c:80:bc:fb:aa:13:4a:f7:57:a6:03:ae:b7:1e:ae:b5:24:64: cc:e6:59:92:bf:a8:0e:c2:1b:fc:5c:8b:1c:e8:03:91:c4:d2: 9e:14:33:fd:f1:5d:46:aa:ae:14:8d:14:cb:55:8c:40:9b:a0: 31:e9:3c:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwNzI3MDQyMDM1WhcNMjYwODAzMDQyMDM1WjAYMRYwFAYD VQQDEw02YTY2ZGM5My1lMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZThnVPRw3UT7zGv8EzUIoM0/XvFwGX3RFAqTX2x4m9bjh0mBtfM8xNek2gx WodklEZaYwq7rePh6i7pjWN5P+ZO8zK4AHlBNhS+loR9MDQ/w43SQHdMpot9SKVa zoTc4mFR13BBi/ziuYMPDGdQGZjFkEAEuLzTWCFf1VSULth92OhLPAY3emE6MZmI int/d5nHpQ1O23s/mRKnV8CMu3+uxRuZk+Ggx0EjY+FEzlaKDCilt2Nu7GRURgsV UkeiERnA3ln2CaJi/iI3ekR6oKebzG3/y+18Uv+xfl+u1nAnxa57qA/bTMYMp3VZ uxurNPQCigJWD9KU5+OB4WX2IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm79pEp Mn7LnVsa+j9ELuDt8MFjMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvzJHZDoBB2P2Buz9P6dU4JSQ4z6xNaNZOyLmsxYr0bvPQPWS22DGKIFUL1Oy ZuiQleVW4VKhy8YyDgsTUaYxqSpmkcFYH1HPG2Y9YvEZJmQGD9w7+htipIIdYGek HyoFGjCFQr1QoCoFxACP/MlW/HkDlRqcJVb959/XTP/G15V/54JGgFe7IG1CZPqj JnB69b3vj3u4/veep4R9QnwRKN4n33Strae05YRqe+WoGwD2F0yqcQmZYlzzY7HV I3Xo2CmrfyEmDIC8+6oTSvdXpgOutx6utSRkzOZZkr+oDsIb/FyLHOgDkcTSnhQz /fFdRqquFI0Uy1WMQJugMek8oQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:39:45 2026 by rpki-client