$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft File: LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json) Hash identifier: 1WWwXtQQp7yIY0FHYmTM571hFdRezo2tUnTctL/r/ro= Subject key identifier: 2D:F2:A0:35:82:C7:94:B5:CA:A6:23:32:E3:87:70:05:D0:34:61:E8 Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 Certificate issuer: /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft Manifest number: 0D Signing time: Thu 21 May 2026 09:15:58 +0000 Manifest this update: Thu 21 May 2026 09:15:58 +0000 Manifest next update: Thu 28 May 2026 09:15:58 +0000 Files and hashes: 1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: wf2ogDfgaxg0SXvKe3dUJ2qY6YVkcAUcYGESSe7/CRE=) 2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Validity Not Before: May 21 09:15:58 2026 GMT Not After : May 28 09:15:58 2026 GMT Subject: CN=6a0ecd4e-530b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:02:eb:c9:6a:4a:39:ce:af:32:73:e2:8a: 3a:1c:4c:ee:9e:ca:ba:64:e8:23:f4:ec:ca:28:44: 80:9f:02:24:64:ab:07:7d:67:a1:ef:fd:42:05:be: bd:03:02:88:57:c1:62:4a:dd:10:02:cc:15:3c:fe: 00:6c:db:b3:99:dd:59:bf:8e:88:f7:69:a8:9c:50: 76:7b:fc:30:1b:6e:c2:05:07:96:80:33:99:5c:03: 01:d4:da:26:d6:ff:4a:0e:76:c9:cb:4c:ee:5b:4b: 79:8d:38:35:5b:ad:00:c0:59:5e:e2:60:c4:fc:5f: 67:ce:b3:cc:40:cd:24:1a:da:dc:74:19:4d:d0:d6: f7:8c:7b:a6:fa:b6:da:88:bd:9a:09:72:06:a4:2e: f3:29:64:63:b0:1c:4a:5f:2c:6f:fa:1d:e0:34:1d: 72:08:6c:1f:ed:dd:ef:3b:51:8b:91:5b:e0:ca:db: 21:7c:40:3b:07:71:cd:de:cc:a7:d2:b5:a5:b5:34: c3:8b:e9:6c:66:c3:bc:15:a2:92:1f:39:be:d7:60: 32:67:16:8b:fa:29:88:16:ca:2d:f2:3f:e5:8f:bb: fc:2f:13:7c:fc:7c:b6:4e:e9:8a:b3:7a:16:d4:79: 0d:9f:51:82:dc:97:5d:6d:f2:46:cf:08:c4:bc:15: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F2:A0:35:82:C7:94:B5:CA:A6:23:32:E3:87:70:05:D0:34:61:E8 X509v3 Authority Key Identifier: keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:28:20:32:dd:e7:72:0e:41:67:17:f2:68:f7:96:f9:7d:61: db:a3:81:0d:64:68:27:76:b5:e4:06:dc:5c:31:e1:f8:46:ed: fc:ac:2f:18:7c:a4:74:2e:d3:0c:d9:81:24:19:dd:59:45:ed: 2d:35:27:6d:cf:c4:4b:9f:0c:1d:51:c4:6e:20:c2:cf:29:ae: c5:e4:0f:63:fc:a6:07:e2:01:10:a5:a1:05:62:2b:8c:ba:84: 39:2d:97:1a:94:52:1b:a1:1e:f4:3a:58:a4:53:35:bd:d3:ac: 08:24:36:00:64:6e:5f:4d:54:d7:32:aa:c5:d8:52:9d:1a:06: e9:93:51:78:57:d4:7c:63:5e:30:2e:87:19:72:58:71:06:80: cd:66:cc:3a:7f:ba:cc:42:5c:c1:93:68:04:72:ba:ee:5f:2e: a4:1b:f3:f2:ee:f8:d2:8e:1d:fc:2b:ae:45:2a:d0:3c:ea:f8: 64:23:20:be:a9:31:40:be:8a:07:bf:bf:57:16:c5:8f:fe:ee: bb:84:6b:1e:08:2a:e1:08:83:c5:df:54:9b:b3:72:e0:f5:ae: 75:07:e0:76:d7:b0:88:4f:ab:a0:f2:18:85:18:1b:a9:65:e6: d1:4a:53:0e:20:ce:18:c3:f9:f9:ae:65:5a:72:a2:13:97:29: 1d:75:22:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0IzMzExMC8GA1UEBRMoMkVCM0NFQjYxRkYxRkJGN0I3M0E1QTBCMTBCNzc2QTRD MUU2MjlFNDAeFw0yNjA1MjEwOTE1NThaFw0yNjA1MjgwOTE1NThaMBgxFjAUBgNV BAMTDTZhMGVjZDRlLTUzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm8gLryWpKOc6vMnPiijocTO6eyrpk6CP07MooRICfAiRkqwd9Z6Hv/UIFvr0D AohXwWJK3RACzBU8/gBs27OZ3Vm/joj3aaicUHZ7/DAbbsIFB5aAM5lcAwHU2ibW /0oOdsnLTO5bS3mNODVbrQDAWV7iYMT8X2fOs8xAzSQa2tx0GU3Q1veMe6b6ttqI vZoJcgakLvMpZGOwHEpfLG/6HeA0HXIIbB/t3e87UYuRW+DK2yF8QDsHcc3ezKfS taW1NMOL6Wxmw7wVopIfOb7XYDJnFov6KYgWyi3yP+WPu/wvE3z8fLZO6YqzehbU eQ2fUYLcl11t8kbPCMS8FftbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULfKgNYLH lLXKpiMy44dwBdA0YegwHwYDVR0jBBgwFoAULrPOth/x+/e3OloLELd2pMHmKeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QjMzL0UyOUY0QzdDNDUw OTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9lM09sb0xFTGQycE1IbUtl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHJQT3RoX3gtX2UzT2xvTEVMZDJwTUhtS2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QjMzL0UyOUY0QzdDNDUwOTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9l M09sb0xFTGQycE1IbUtlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPKCAy3edyDkFnF/Jo95b5fWHbo4ENZGgndrXkBtxcMeH4Ru38rC8YfKR0LtMM 2YEkGd1ZRe0tNSdtz8RLnwwdUcRuIMLPKa7F5A9j/KYH4gEQpaEFYiuMuoQ5LZca lFIboR70OlikUzW906wIJDYAZG5fTVTXMqrF2FKdGgbpk1F4V9R8Y14wLocZclhx BoDNZsw6f7rMQlzBk2gEcrruXy6kG/Py7vjSjh38K65FKtA86vhkIyC+qTFAvooH v79XFsWP/u67hGseCCrhCIPF31Sbs3Lg9a51B+B217CIT6ug8hiFGBupZebRSlMO IM4Yw/n5rmVacqITlykddSLt -----END CERTIFICATE-----Generated at Thu May 21 12:14:31 2026 by rpki-client