$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: Ls9W4oaS/HEm1NBNj+2pPKlMtxTD7i500TyIBzBlPdM= Subject key identifier: C1:EE:D4:DB:0D:80:21:D9:5C:AD:64:66:D2:91:9F:3A:73:EA:51:01 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 024E Signing time: Sun 11 Oct 2026 02:54:24 +0000 Manifest this update: Sun 11 Oct 2026 02:54:23 +0000 Manifest next update: Sun 18 Oct 2026 02:54:23 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: y1SeqXa1ExlPb6UZWO+uPZwmQSJ7yXppjiDyd5BTrvM=) 2: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: SkNwUmLJ74SfA59Yhk/sbqZ/iuszj8FDd+djHLsmqIU=) 3: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: qokU/ZkJRohn5FsvwtzsCJWdRpAc+XjoHM2gwlTsRJk=) 4: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: jDTXO9qP7keTH1YjNzPh9yzgUIJHfXRIy6LzaiPiKVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Oct 11 02:54:23 2026 GMT Not After : Oct 18 02:54:23 2026 GMT Subject: CN=6acafa60-5ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:02:f8:e8:a5:bc:df:17:47:0e:01:fd:f9: 3d:06:c0:40:64:21:53:63:f6:d3:39:7a:35:4e:88: bb:56:ef:22:f2:96:e4:a4:a7:5e:6a:4a:98:a2:44: 03:78:a7:a4:c7:b4:54:60:03:71:d2:eb:8b:b4:86: fa:16:0a:3f:6c:9d:2e:3b:52:0f:4d:64:59:a1:25: 81:b9:ab:d2:6e:d4:ce:ff:53:e9:09:7d:e9:63:0c: 66:2e:0c:8c:e4:72:a6:37:e0:2a:25:ca:e2:a0:7d: 71:c9:4e:22:2a:d8:4d:da:09:e6:a8:3e:10:ce:cf: 5a:90:23:ad:5d:b2:23:17:a1:07:bf:92:c9:c1:2d: 54:eb:57:f0:2d:99:85:63:ab:2a:4a:05:52:8d:0d: 77:51:5a:60:17:93:36:3e:75:a7:fd:d4:3a:82:ec: ef:1c:12:1c:a1:7c:0c:07:5e:14:5e:71:e2:a0:31: 0b:86:2d:95:e0:98:ae:c0:2c:f1:14:51:b6:41:a1: c5:09:82:c8:06:f4:64:df:72:9b:7c:20:f3:ef:89: 51:ce:bd:73:2a:86:22:fc:1d:f0:89:9e:33:c6:b8: 1f:79:90:c0:be:85:c9:07:f1:c4:3e:5c:37:29:c1: 8c:e3:50:81:92:66:70:be:3c:5a:78:62:05:be:4a: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:D4:DB:0D:80:21:D9:5C:AD:64:66:D2:91:9F:3A:73:EA:51:01 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:6b:b0:df:1f:ab:a7:86:c2:71:3c:79:2c:04:13:9f:10: 57:b6:04:d6:78:ef:21:0b:2e:4c:18:04:47:0f:8d:15:b7:d6: 02:58:d9:5d:8a:42:f5:c6:45:fa:92:eb:75:03:af:c3:db:7e: 60:87:0a:90:59:9f:7c:67:a0:6f:af:79:67:54:49:47:15:83: ab:60:60:2b:4c:8b:0c:f0:7c:f2:12:d9:66:48:59:bc:fb:37: ec:78:2c:a8:12:00:92:3e:53:01:b6:d3:60:6a:e4:ab:af:95: 53:ff:4a:69:38:28:4e:a4:52:d4:4f:83:98:20:88:9c:30:6c: 09:00:02:a9:fe:c6:47:c1:74:21:fe:50:32:a4:3b:f5:4a:e1: 02:65:a7:71:9a:79:1f:fe:f6:1a:19:14:61:5d:ae:a8:86:ea: a7:6a:7a:05:34:20:bd:ae:17:b8:dc:af:36:47:53:77:96:fd: 51:6d:3c:b8:09:d2:da:b1:cd:a1:77:61:95:50:8b:e4:84:57: b7:ff:08:75:5e:a0:2f:80:22:30:0a:e0:22:21:91:c4:11:ab: 40:73:e4:ac:ab:67:42:ef:a8:f1:f1:64:7e:af:f8:b4:69:e5: dd:e2:80:76:db:9b:46:2a:de:32:35:3e:36:3d:c8:8a:3e:d6: d5:ac:6a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYxMDExMDI1NDIzWhcNMjYxMDE4MDI1NDIzWjAYMRYwFAYD VQQDEw02YWNhZmE2MC01YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuUC+OilvN8XRw4B/fk9BsBAZCFTY/bTOXo1Toi7Vu8i8pbkpKdeakqYokQD eKekx7RUYANx0uuLtIb6Fgo/bJ0uO1IPTWRZoSWBuavSbtTO/1PpCX3pYwxmLgyM 5HKmN+AqJcrioH1xyU4iKthN2gnmqD4Qzs9akCOtXbIjF6EHv5LJwS1U61fwLZmF Y6sqSgVSjQ13UVpgF5M2PnWn/dQ6guzvHBIcoXwMB14UXnHioDELhi2V4JiuwCzx FFG2QaHFCYLIBvRk33KbfCDz74lRzr1zKoYi/B3wiZ4zxrgfeZDAvoXJB/HEPlw3 KcGM41CBkmZwvjxaeGIFvkpTTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHu1NsN gCHZXK1kZtKRnzpz6lEBMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQBJrsN8fq6eGwnE8eSwEE58QV7YE1njvIQsuTBgERw+NFbfWAljZXYpC9cZF +pLrdQOvw9t+YIcKkFmffGegb695Z1RJRxWDq2BgK0yLDPB88hLZZkhZvPs37Hgs qBIAkj5TAbbTYGrkq6+VU/9KaTgoTqRS1E+DmCCInDBsCQACqf7GR8F0If5QMqQ7 9UrhAmWncZp5H/72GhkUYV2uqIbqp2p6BTQgva4XuNyvNkdTd5b9UW08uAnS2rHN oXdhlVCL5IRXt/8IdV6gL4AiMArgIiGRxBGrQHPkrKtnQu+o8fFkfq/4tGnl3eKA dtubRireMjU+Nj3Iij7W1axqEg== -----END CERTIFICATE-----Generated at Sun Oct 11 08:13:25 2026 by rpki-client