$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft File: LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json) Hash identifier: ZHG78kFtLHT3zbrrenMdSAxFpZCqqmc+gmQzRTXBFLg= Subject key identifier: 9B:CE:A1:76:42:CD:3D:E5:71:01:54:BB:88:CD:BF:B9:A9:12:8D:0C Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 Certificate issuer: /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft Manifest number: 4B Signing time: Wed 23 Sep 2026 08:06:35 +0000 Manifest this update: Wed 23 Sep 2026 08:06:35 +0000 Manifest next update: Wed 30 Sep 2026 08:06:35 +0000 Files and hashes: 1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: ktBMrT0WN5bZzCC15Tu1oFgvcVL5KyBtp4x8lpjWGCA=) 2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Validity Not Before: Sep 23 08:06:35 2026 GMT Not After : Sep 30 08:06:35 2026 GMT Subject: CN=6ab3888b-1fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:44:89:0b:65:ab:79:8e:97:a7:45:5b:32: a4:ba:44:ab:09:78:6f:7b:b3:de:0c:47:3c:ae:67: a7:39:ca:e6:46:3f:9a:ec:ae:cf:dd:a6:b6:a6:d2: 37:62:5d:fa:59:f6:30:e1:f0:d1:de:c1:40:3b:ad: 25:6e:5e:db:30:aa:58:fa:00:16:30:d5:c9:23:77: d8:93:bf:0d:ac:6f:c5:15:85:75:47:21:ef:e1:de: 97:01:5d:f4:21:2f:d0:a5:f7:bb:89:54:fb:78:31: c3:de:55:8b:23:cc:45:29:87:ce:8a:af:09:88:39: 9f:f8:8d:cb:10:25:91:3c:18:cb:4b:1c:33:cf:f0: 2e:79:12:86:05:af:80:ab:02:11:f4:16:ec:9a:77: 42:61:b7:49:4e:df:01:6f:dc:3e:43:8b:54:a0:43: 42:14:5f:74:c2:fb:0b:f4:51:37:fb:15:58:f1:00: 4e:50:d0:46:5f:12:75:84:cd:d6:02:7d:a1:b7:c2: c7:9d:9f:d3:42:cf:47:34:30:5f:51:a5:55:f0:f8: 27:50:f1:b1:82:f0:ca:c1:73:03:9f:f2:2a:0d:4b: 14:23:c2:8c:a6:a5:e0:96:48:62:d2:67:64:11:65: 32:eb:cc:c4:38:5e:c8:86:86:ca:a9:63:12:41:a6: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:A1:76:42:CD:3D:E5:71:01:54:BB:88:CD:BF:B9:A9:12:8D:0C X509v3 Authority Key Identifier: keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:18:6c:d4:20:08:bc:85:29:9c:87:13:d3:3f:d2:b6:57:95: d0:dd:c6:c4:58:8d:05:7f:58:09:05:9c:f6:5b:5b:2e:44:d0: 13:b0:b0:76:aa:00:c5:2d:df:5a:fb:c9:13:35:52:9d:67:64: 25:fc:4d:af:7c:2e:a1:dc:9a:49:0a:e4:9e:84:fd:1a:62:dc: 98:b0:30:fd:e9:65:43:b3:f9:af:ed:c4:f0:98:cf:3d:08:7e: f2:7d:80:dd:08:60:47:82:c8:fc:f2:bd:a0:7d:3d:50:db:5a: 3e:47:eb:21:3f:31:eb:ac:02:60:9e:3a:85:53:09:27:88:d7: b8:53:81:37:cb:e0:d2:8a:b4:94:95:99:39:1a:f9:95:67:60: 54:88:16:88:a7:35:14:06:05:b1:c1:68:7a:3d:f0:f3:29:70: 91:ba:3b:17:d0:78:69:f7:22:d7:0e:5e:e3:dd:65:c5:f3:0e: 4d:0a:82:bf:18:a7:7f:2d:e2:9f:e0:84:16:c8:ce:c1:ea:41: dd:41:35:13:4d:7d:4c:31:40:8b:96:a6:f7:dd:b3:fe:99:ec: 1e:24:75:4b:cf:66:52:d4:9c:0b:1f:48:68:2d:aa:bc:4b:9e: eb:ee:a7:52:bc:ec:f6:fe:f4:a7:a2:be:5f:85:5f:c0:05:4c: 9b:f3:0f:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0IzMzExMC8GA1UEBRMoMkVCM0NFQjYxRkYxRkJGN0I3M0E1QTBCMTBCNzc2QTRD MUU2MjlFNDAeFw0yNjA5MjMwODA2MzVaFw0yNjA5MzAwODA2MzVaMBgxFjAUBgNV BAMTDTZhYjM4ODhiLTFmZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQkSJC2WreY6Xp0VbMqS6RKsJeG97s94MRzyuZ6c5yuZGP5rsrs/dpram0jdi XfpZ9jDh8NHewUA7rSVuXtswqlj6ABYw1ckjd9iTvw2sb8UVhXVHIe/h3pcBXfQh L9Cl97uJVPt4McPeVYsjzEUph86KrwmIOZ/4jcsQJZE8GMtLHDPP8C55EoYFr4Cr AhH0Fuyad0Jht0lO3wFv3D5Di1SgQ0IUX3TC+wv0UTf7FVjxAE5Q0EZfEnWEzdYC faG3wsedn9NCz0c0MF9RpVXw+CdQ8bGC8MrBcwOf8ioNSxQjwoympeCWSGLSZ2QR ZTLrzMQ4XsiGhsqpYxJBppurAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm86hdkLN PeVxAVS7iM2/uakSjQwwHwYDVR0jBBgwFoAULrPOth/x+/e3OloLELd2pMHmKeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QjMzL0UyOUY0QzdDNDUw OTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9lM09sb0xFTGQycE1IbUtl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHJQT3RoX3gtX2UzT2xvTEVMZDJwTUhtS2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QjMzL0UyOUY0QzdDNDUwOTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9l M09sb0xFTGQycE1IbUtlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNGGzUIAi8hSmchxPTP9K2V5XQ3cbEWI0Ff1gJBZz2W1suRNATsLB2qgDFLd9a +8kTNVKdZ2Ql/E2vfC6h3JpJCuSehP0aYtyYsDD96WVDs/mv7cTwmM89CH7yfYDd CGBHgsj88r2gfT1Q21o+R+shPzHrrAJgnjqFUwkniNe4U4E3y+DSirSUlZk5GvmV Z2BUiBaIpzUUBgWxwWh6PfDzKXCRujsX0Hhp9yLXDl7j3WXF8w5NCoK/GKd/LeKf 4IQWyM7B6kHdQTUTTX1MMUCLlqb33bP+meweJHVLz2ZS1JwLH0hoLaq8S57r7qdS vOz2/vSnor5fhV/ABUyb8w+x -----END CERTIFICATE-----Generated at Wed Sep 23 16:50:22 2026 by rpki-client