$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft File: LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json) Hash identifier: csbS1PDWf7NWBm8I21KMrvKBHMPSKpt7668wFQLysDw= Subject key identifier: BC:9A:1A:7D:9B:6C:BC:3A:3C:29:C5:74:EB:EA:49:53:04:A5:9B:76 Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 Certificate issuer: /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft Manifest number: 4A Signing time: Mon 21 Sep 2026 08:21:38 +0000 Manifest this update: Mon 21 Sep 2026 08:21:37 +0000 Manifest next update: Mon 28 Sep 2026 08:21:37 +0000 Files and hashes: 1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: xvRYJZoWFD7vGNXeWnh0gq+6j5nemwxLg7fXQJPEDJs=) 2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Validity Not Before: Sep 21 08:21:37 2026 GMT Not After : Sep 28 08:21:37 2026 GMT Subject: CN=6ab0e911-d260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:12:da:af:5b:3b:e1:c6:74:d6:37:48:64: cd:31:20:85:90:79:5b:9a:b2:90:0b:18:f0:7d:bb: 87:74:b1:df:e5:b9:fe:c8:47:1c:41:e6:56:4d:ef: 62:34:94:3c:bc:87:c0:04:34:dd:72:5b:69:a9:ef: c1:36:7a:80:b5:3d:dc:a0:d0:dc:93:7c:5d:cc:b8: 01:bb:ad:f1:ee:70:23:75:21:8e:76:c1:ce:1d:ab: 7f:21:1a:9e:bb:9e:fc:12:be:a1:a6:e4:1d:dc:c2: 8f:64:10:fe:c3:af:c7:41:33:78:8b:69:9a:bb:c8: 18:bf:aa:21:67:83:93:73:78:58:fe:6c:84:b9:dc: 33:70:15:2a:bb:55:b3:31:ab:4a:a5:a8:c2:d7:5a: ae:ba:e2:b1:03:b8:04:46:ba:ae:63:62:da:c5:b2: 84:ac:97:58:30:6e:e5:6e:64:d4:58:6f:bc:21:f1: 39:9e:2e:17:1e:d8:15:f7:bb:d2:cd:3a:48:c6:82: 82:ca:3a:45:50:42:80:79:72:a5:d5:f9:a7:14:cb: 93:bb:b6:d3:6f:70:3d:29:10:75:f3:66:28:d5:3f: 25:74:d2:ee:0f:7b:1b:d0:cb:19:87:0d:6b:42:73: 9b:f2:60:c8:88:05:1b:fc:b3:09:60:71:e4:a3:f6: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9A:1A:7D:9B:6C:BC:3A:3C:29:C5:74:EB:EA:49:53:04:A5:9B:76 X509v3 Authority Key Identifier: keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:44:9e:20:fd:33:9c:30:ef:21:f0:6b:82:ef:ae:79:08:10: fe:ec:bc:0b:47:be:66:c6:8c:2a:b2:a9:42:72:2b:47:ef:d0: 1f:c2:d4:3d:44:0c:1d:f0:3f:f5:b6:00:b4:61:ad:bc:47:f8: 50:fa:bc:93:77:5c:78:6c:46:ad:6a:31:19:cb:7e:48:3e:0a: 35:67:e7:d4:02:75:b7:81:61:a7:a1:d9:a4:c5:cb:65:58:b0: d7:51:65:c3:c8:b7:b9:c6:da:d9:a4:a0:8b:ff:1b:f2:a9:74: ae:c1:a2:7f:5e:ae:5a:c0:03:d3:8f:94:1e:fd:fa:05:d5:05: fc:f7:a0:a7:28:81:3a:f5:5f:4d:65:56:7b:87:3c:44:03:7b: 2e:cc:76:be:80:dc:3d:a4:83:c2:9d:b9:fb:f8:2d:58:41:49: c9:d1:3f:f3:7a:97:11:d2:37:98:13:38:5a:5b:c8:c8:d4:62: b9:5f:2c:ae:91:f6:63:51:71:b8:8c:96:b7:4d:b1:36:c3:11: ca:70:45:d1:ab:67:68:65:c5:65:68:80:03:fb:f2:3c:ad:c5: 6e:06:78:52:1c:51:fd:24:ef:41:6f:b1:48:dc:54:a3:b4:81: d0:50:90:c3:80:17:de:21:32:42:64:fd:d8:82:69:dd:4c:dc: f2:b5:20:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0IzMzExMC8GA1UEBRMoMkVCM0NFQjYxRkYxRkJGN0I3M0E1QTBCMTBCNzc2QTRD MUU2MjlFNDAeFw0yNjA5MjEwODIxMzdaFw0yNjA5MjgwODIxMzdaMBgxFjAUBgNV BAMTDTZhYjBlOTExLWQyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3gxLar1s74cZ01jdIZM0xIIWQeVuaspALGPB9u4d0sd/luf7IRxxB5lZN72I0 lDy8h8AENN1yW2mp78E2eoC1Pdyg0NyTfF3MuAG7rfHucCN1IY52wc4dq38hGp67 nvwSvqGm5B3cwo9kEP7Dr8dBM3iLaZq7yBi/qiFng5NzeFj+bIS53DNwFSq7VbMx q0qlqMLXWq664rEDuARGuq5jYtrFsoSsl1gwbuVuZNRYb7wh8TmeLhce2BX3u9LN OkjGgoLKOkVQQoB5cqXV+acUy5O7ttNvcD0pEHXzZijVPyV00u4PexvQyxmHDWtC c5vyYMiIBRv8swlgceSj9p+1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvJoafZts vDo8KcV06+pJUwSlm3YwHwYDVR0jBBgwFoAULrPOth/x+/e3OloLELd2pMHmKeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QjMzL0UyOUY0QzdDNDUw OTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9lM09sb0xFTGQycE1IbUtl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHJQT3RoX3gtX2UzT2xvTEVMZDJwTUhtS2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QjMzL0UyOUY0QzdDNDUwOTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9l M09sb0xFTGQycE1IbUtlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnRJ4g/TOcMO8h8GuC7655CBD+7LwLR75mxowqsqlCcitH79AfwtQ9RAwd8D/1 tgC0Ya28R/hQ+ryTd1x4bEatajEZy35IPgo1Z+fUAnW3gWGnodmkxctlWLDXUWXD yLe5xtrZpKCL/xvyqXSuwaJ/Xq5awAPTj5Qe/foF1QX896CnKIE69V9NZVZ7hzxE A3suzHa+gNw9pIPCnbn7+C1YQUnJ0T/zepcR0jeYEzhaW8jI1GK5XyyukfZjUXG4 jJa3TbE2wxHKcEXRq2doZcVlaIAD+/I8rcVuBnhSHFH9JO9Bb7FI3FSjtIHQUJDD gBfeITJCZP3YgmndTNzytSDt -----END CERTIFICATE-----Generated at Mon Sep 21 19:31:24 2026 by rpki-client