$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft File: lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json) Hash identifier: qWAT+dgbrss52N1cjHchQHgDx9lMaytDdJBS7gJ8l5U= Subject key identifier: 07:80:5B:19:CF:7C:CC:9E:8C:59:DC:61:22:D9:61:0B:7A:2E:A0:A6 Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft Manifest number: 0232 Signing time: Fri 21 Aug 2026 02:43:20 +0000 Manifest this update: Fri 21 Aug 2026 02:43:19 +0000 Manifest next update: Fri 28 Aug 2026 02:43:19 +0000 Files and hashes: 1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: ahJNATegt21H7iqB03+GMZvz2rfEzOsIqy3jrmQ64g4=) 2: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: 6xMDbRG7wBKknxTgsFGsxPPwxSF0IsdgT+T+xByYGfk=) 3: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: ul9EAOzO4X5WSgm0Um4L21nKCG4Fzp+91sYnSwxatf4=) 4: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5 Validity Not Before: Aug 21 02:43:19 2026 GMT Not After : Aug 28 02:43:19 2026 GMT Subject: CN=6a87bb47-b3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c3:c5:8e:37:8c:9f:9b:bc:88:95:98:2a:af: 62:56:83:a9:ff:16:b5:ff:6c:50:3d:bf:4f:89:81: 24:82:4a:ac:1e:a2:4d:1f:c7:0e:d3:0b:d9:8b:df: 2a:b6:df:fc:94:75:db:20:aa:54:17:e2:8f:a7:ce: da:54:e5:f7:95:e6:89:85:cc:e3:cd:62:5c:6c:b7: 8a:da:20:7a:1d:c3:6f:94:8e:9c:78:fa:4a:89:22: 05:af:89:c4:f8:e3:27:39:d2:a0:8c:52:cc:e1:a5: a0:4c:17:5b:ac:f9:c2:1e:a6:85:85:28:f8:4c:e8: 81:e8:1e:99:6f:7b:9d:c2:02:35:31:ab:78:44:b5: 3c:e5:8e:a6:96:bc:d1:4d:03:d3:8e:8f:f5:20:39: dd:e9:51:70:18:6c:21:66:20:06:70:84:47:f2:32: 8a:2b:5e:67:5a:36:61:a5:81:4d:4d:40:3d:3a:5e: 9a:43:9e:6a:00:7f:7e:04:b8:19:d3:b5:36:13:e0: af:b2:0e:11:89:73:ec:7c:01:92:65:c2:08:ec:57: 2f:8b:e5:44:49:7f:17:c4:43:79:57:0b:94:14:9a: 25:98:d3:ec:ae:64:a8:4c:f3:43:b4:20:8e:b8:0b: 77:bf:70:90:e7:17:1a:b0:3f:7f:fb:52:d8:ae:24: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:80:5B:19:CF:7C:CC:9E:8C:59:DC:61:22:D9:61:0B:7A:2E:A0:A6 X509v3 Authority Key Identifier: keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:84:7f:ed:1f:ca:cb:77:0d:33:69:ef:3c:d3:8f:7c:be:7a: 7a:f6:95:f8:20:cf:df:a3:08:b0:51:2a:17:26:dc:b1:3a:d4: d3:fd:20:c5:64:bf:82:15:24:22:d0:60:df:5d:92:f6:cd:07: fb:43:b5:57:27:ed:a0:af:e1:35:66:b7:66:9f:51:2e:bd:9a: ee:74:17:85:a4:15:34:a3:c6:95:70:5a:cd:7f:cd:69:13:0a: e7:53:c0:1e:eb:9a:bc:a8:66:51:8b:10:72:82:61:56:94:86: 10:5a:a2:17:36:41:fb:78:8d:37:94:68:88:4b:0e:f0:8c:61: e1:87:8f:88:a7:30:51:60:a3:07:e9:cb:2c:cd:d9:58:c9:3e: e9:41:bf:13:06:38:fd:24:56:ba:42:a8:e9:62:47:83:81:30: 30:de:ae:cb:00:a5:43:c9:f2:71:4d:35:f2:35:c2:d7:84:a7: 61:80:dd:ef:7d:79:c9:9e:b8:e7:4a:89:bd:03:84:ee:80:91: bb:57:b7:6f:c4:0c:19:b5:3f:4d:58:69:e5:a0:dd:95:c5:e6: 58:b5:01:1f:dd:a1:90:d8:c1:79:41:82:c8:84:e6:65:64:65: 79:d5:40:be:50:e4:f0:8d:11:bd:73:8a:fb:1e:33:2e:1e:99: be:9c:5b:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG MEQzRjQ4RTUwHhcNMjYwODIxMDI0MzE5WhcNMjYwODI4MDI0MzE5WjAYMRYwFAYD VQQDEw02YTg3YmI0Ny1iM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88PFjjeMn5u8iJWYKq9iVoOp/xa1/2xQPb9PiYEkgkqsHqJNH8cO0wvZi98q tt/8lHXbIKpUF+KPp87aVOX3leaJhczjzWJcbLeK2iB6HcNvlI6cePpKiSIFr4nE +OMnOdKgjFLM4aWgTBdbrPnCHqaFhSj4TOiB6B6Zb3udwgI1Mat4RLU85Y6mlrzR TQPTjo/1IDnd6VFwGGwhZiAGcIRH8jKKK15nWjZhpYFNTUA9Ol6aQ55qAH9+BLgZ 07U2E+Cvsg4RiXPsfAGSZcII7Fcvi+VESX8XxEN5VwuUFJolmNPsrmSoTPNDtCCO uAt3v3CQ5xcasD9/+1LYriQsQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeAWxnP fMyejFncYSLZYQt6LqCmMB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJw aWVDVkFGUThrYjN3MF9TT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYR/7R/Ky3cNM2nvPNOPfL56evaV+CDP36MIsFEqFybcsTrU0/0gxWS/ghUk ItBg312S9s0H+0O1VyftoK/hNWa3Zp9RLr2a7nQXhaQVNKPGlXBazX/NaRMK51PA HuuavKhmUYsQcoJhVpSGEFqiFzZB+3iNN5RoiEsO8Ixh4YePiKcwUWCjB+nLLM3Z WMk+6UG/EwY4/SRWukKo6WJHg4EwMN6uywClQ8nycU018jXC14SnYYDd7315yZ64 50qJvQOE7oCRu1e3b8QMGbU/TVhp5aDdlcXmWLUBH92hkNjBeUGCyITmZWRledVA vlDk8I0RvXOK+x4zLh6Zvpxbmw== -----END CERTIFICATE-----Generated at Sun Aug 23 00:19:23 2026 by rpki-client