
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
File: LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json)
Hash identifier: FJi7J9xOhTZqR8nOICMbeGefF+xcWkBp9Q8YpO0HStg=
Subject key identifier: 8C:0E:E4:D7:96:70:E8:46:EB:27:AA:4C:8D:77:92:B2:90:9F:ED:E2
Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4
Certificate issuer: /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
Manifest number: 24
Signing time: Tue 07 Jul 2026 10:08:10 +0000
Manifest this update: Tue 07 Jul 2026 10:08:10 +0000
Manifest next update: Tue 14 Jul 2026 10:08:10 +0000
Files and hashes: 1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: kt0fD7HB/p7gJZjF4qTCB/T0TYFmpoSYZIAKQNN1bu8=)
2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl
rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4
Validity
Not Before: Jul 7 10:08:10 2026 GMT
Not After : Jul 14 10:08:10 2026 GMT
Subject: CN=6a4cd00a-7fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:30:9f:0e:71:a1:ac:68:d4:71:3e:03:9d:
04:24:d5:ae:74:ab:a1:e8:60:04:1b:e0:7d:57:e2:
d8:1b:db:7e:a5:47:bf:7d:15:eb:c2:ff:b0:cc:9c:
41:53:3e:43:3a:a6:f2:5a:43:57:68:a8:52:80:0a:
6b:cc:f3:50:0d:7b:8a:ec:e3:a7:d8:7b:a8:12:a0:
ea:42:2a:e7:73:94:4c:61:cc:7d:43:ad:b7:23:99:
9a:01:73:a9:37:a8:44:81:b5:cb:70:65:8c:ab:f6:
ea:2d:25:5b:20:25:90:f8:16:14:94:cf:f8:49:87:
64:79:4c:99:a7:ce:88:85:bd:f4:04:1d:b2:29:89:
4e:9c:85:70:84:80:c6:9f:99:fe:e3:ff:41:d8:f4:
33:70:e3:59:76:c1:d0:ac:46:dc:29:b8:99:7a:84:
94:30:bf:41:93:c9:18:76:2d:0c:be:2b:91:2c:5c:
2f:21:5a:94:8b:13:61:5d:46:35:91:f8:6c:c4:b5:
67:cd:ed:ef:c0:25:cd:27:db:9b:3e:9a:08:aa:a5:
bc:0f:54:f8:4f:f9:f9:19:9d:34:c6:23:16:5f:61:
67:e1:7a:5b:b0:9e:bf:45:84:13:75:7a:e8:15:7d:
54:e4:d4:b6:3f:82:25:c0:13:12:67:4f:27:2e:5a:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:E4:D7:96:70:E8:46:EB:27:AA:4C:8D:77:92:B2:90:9F:ED:E2
X509v3 Authority Key Identifier:
keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:5e:64:01:6b:05:14:c9:f9:3f:94:2d:97:c9:78:21:7b:
87:41:b8:a4:71:90:f0:01:7f:7c:9d:37:2a:42:61:7d:34:dd:
63:b8:c8:97:75:c7:41:4f:89:3b:44:bb:9e:9c:8e:1a:d7:f4:
48:52:22:ee:98:41:9b:40:0f:e5:45:1f:d8:e2:3e:07:2c:92:
8b:0e:9c:09:71:f7:81:b9:bc:81:d4:00:ae:6a:52:28:d7:c7:
d2:27:ca:cf:d0:66:bc:b7:86:34:73:f9:50:0f:bf:98:fe:62:
7e:ef:9a:68:83:ae:93:e2:d3:6d:fd:a7:72:00:28:46:aa:1c:
4b:1a:07:02:c4:ef:18:6c:17:7c:e6:72:60:d8:e9:be:21:8c:
66:0e:70:62:7a:dd:d0:9f:43:8f:77:d8:6a:07:37:ab:b9:2d:
20:82:8f:d3:95:c2:e5:66:3a:d7:a1:ae:76:1b:c8:f5:73:d3:
31:c8:9a:d3:97:7d:6b:62:25:04:7a:cc:62:bc:57:c8:e9:f0:
75:f6:1d:3c:7e:1a:5a:ee:0d:4a:23:4b:56:1a:30:e8:93:14:
a4:ee:e4:60:cb:5f:34:42:5b:8b:81:6d:af:7c:f9:2f:12:9e:
2c:63:d4:90:74:cc:e8:3c:19:fe:3f:7d:4d:67:dc:82:98:ce:
a9:39:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:37 2026 by rpki-client