$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: FihWKZWUP8F8WBUXsBhZyIFbmgVvz0H/qzNtCFf7qV0= Subject key identifier: 89:B8:D0:51:D2:80:B7:2D:DF:2C:45:B9:50:97:B0:D6:54:87:8D:BF Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 024D Signing time: Fri 09 Oct 2026 02:55:27 +0000 Manifest this update: Fri 09 Oct 2026 02:55:27 +0000 Manifest next update: Fri 16 Oct 2026 02:55:27 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: tNnCk/NSB3Qtg6N4jVL8s7/YdckjYnd5y7uHPAayqrI=) 2: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: SkNwUmLJ74SfA59Yhk/sbqZ/iuszj8FDd+djHLsmqIU=) 3: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: jDTXO9qP7keTH1YjNzPh9yzgUIJHfXRIy6LzaiPiKVw=) 4: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: qokU/ZkJRohn5FsvwtzsCJWdRpAc+XjoHM2gwlTsRJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Oct 9 02:55:27 2026 GMT Not After : Oct 16 02:55:27 2026 GMT Subject: CN=6ac8579f-9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:ef:2c:e6:08:5f:22:b6:76:a6:06:b4:73: 01:2a:22:0c:b4:44:d9:f5:20:60:92:b2:63:65:5e: 12:29:c1:5c:55:90:5f:eb:e9:28:3c:3d:a7:20:35: c9:6e:5d:61:1c:06:2f:3b:c2:41:00:1f:03:16:45: 6d:f1:01:47:ad:8f:6f:31:4b:ab:7d:6b:58:96:67: 38:e9:70:94:81:09:5e:c4:8f:69:bc:db:6b:cc:d8: 24:ae:54:bb:b2:41:9d:ff:25:7f:73:eb:02:2b:cf: 5a:72:10:84:3d:4f:79:1b:6d:4e:1b:a6:94:75:46: 19:28:f9:4a:a1:2b:d1:fd:97:d0:99:88:31:89:a4: 67:35:10:37:e9:d5:c6:8b:fa:6d:6a:8c:f1:19:91: 1a:e2:0b:7f:59:f3:eb:81:9d:36:1b:7c:c1:49:14: 62:21:00:5c:d0:7d:84:18:5f:82:38:cd:fa:f4:2c: 62:56:14:d5:62:15:57:9a:2a:e5:80:48:7d:13:7b: 13:8a:52:8e:a7:1a:db:f3:63:65:ae:66:54:e9:e8: 37:53:43:83:23:32:2e:5f:d9:a0:37:85:d8:67:b9: 56:4c:75:0e:0c:5f:32:3c:bd:54:8e:e8:f6:01:00: ba:f4:cc:9f:54:25:4c:1d:c5:7b:39:80:9b:d4:b5: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:D0:51:D2:80:B7:2D:DF:2C:45:B9:50:97:B0:D6:54:87:8D:BF X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dd:c3:2a:09:6a:f7:72:83:9e:8d:e2:73:fe:12:15:4c:fc: 89:79:05:89:cc:b6:ad:db:22:53:a4:88:c1:4a:54:55:93:09: 2a:be:ae:42:c4:90:f5:96:47:da:22:7f:73:04:fe:57:a1:e7: 1c:9e:35:ba:ce:6b:f1:84:6d:7a:89:e3:78:c7:28:08:b7:0d: 83:df:de:d5:17:99:3d:bb:00:de:3b:82:cf:d6:8f:5b:02:44: 1b:90:41:65:12:81:a8:c1:cb:7e:89:59:56:3d:a7:a7:fc:27: b3:e2:70:3e:fd:04:45:01:3d:5e:f9:11:5d:2d:3e:34:73:4f: d2:bd:c8:7c:c7:e2:91:3d:9c:cc:6d:76:b3:40:18:46:ee:32: 8f:f1:aa:de:c3:ad:05:37:2e:f6:58:52:56:4d:bc:fc:98:50: de:7a:ba:46:37:3c:99:b0:56:f5:14:27:87:e0:76:4e:9f:16: 13:40:b9:66:48:68:75:1b:0f:6b:f4:9a:60:6d:67:c7:00:24: 4e:39:77:8f:7f:84:a3:99:5f:4e:93:e7:bb:bf:1b:ec:9f:0e: 7f:a3:cf:41:1b:94:f0:92:22:0f:1f:b5:6a:d8:e3:01:ba:8f: 2c:2d:18:8d:6e:77:04:c2:2a:da:ff:cd:19:fb:46:04:dd:db: 09:cd:c1:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYxMDA5MDI1NTI3WhcNMjYxMDE2MDI1NTI3WjAYMRYwFAYD VQQDEw02YWM4NTc5Zi05MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTPvLOYIXyK2dqYGtHMBKiIMtETZ9SBgkrJjZV4SKcFcVZBf6+koPD2nIDXJ bl1hHAYvO8JBAB8DFkVt8QFHrY9vMUurfWtYlmc46XCUgQlexI9pvNtrzNgkrlS7 skGd/yV/c+sCK89achCEPU95G21OG6aUdUYZKPlKoSvR/ZfQmYgxiaRnNRA36dXG i/ptaozxGZEa4gt/WfPrgZ02G3zBSRRiIQBc0H2EGF+COM369CxiVhTVYhVXmirl gEh9E3sTilKOpxrb82NlrmZU6eg3U0ODIzIuX9mgN4XYZ7lWTHUODF8yPL1Ujuj2 AQC69MyfVCVMHcV7OYCb1LU5iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm40FHS gLct3yxFuVCXsNZUh42/MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK93DKglq93KDno3ic/4SFUz8iXkFicy2rdsiU6SIwUpUVZMJKr6uQsSQ9ZZH 2iJ/cwT+V6HnHJ41us5r8YRteonjeMcoCLcNg9/e1ReZPbsA3juCz9aPWwJEG5BB ZRKBqMHLfolZVj2np/wns+JwPv0ERQE9XvkRXS0+NHNP0r3IfMfikT2czG12s0AY Ru4yj/Gq3sOtBTcu9lhSVk28/JhQ3nq6Rjc8mbBW9RQnh+B2Tp8WE0C5ZkhodRsP a/SaYG1nxwAkTjl3j3+Eo5lfTpPnu78b7J8Of6PPQRuU8JIiDx+1atjjAbqPLC0Y jW53BMIq2v/NGftGBN3bCc3B9A== -----END CERTIFICATE-----Generated at Sat Oct 10 13:17:00 2026 by rpki-client