$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft File: LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json) Hash identifier: mHAY8p2AI+NG0fw5ODrffbuwzMah1WUEJTA717UgQI0= Subject key identifier: 07:4A:5B:69:E1:86:3C:B6:DA:1A:E2:97:9D:18:46:1E:33:D4:8E:38 Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 Certificate issuer: /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft Manifest number: 57 Signing time: Sat 17 Oct 2026 08:56:51 +0000 Manifest this update: Sat 17 Oct 2026 08:56:51 +0000 Manifest next update: Sat 24 Oct 2026 08:56:51 +0000 Files and hashes: 1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: FfedLgNVr3w9HGU87+j4o5NcHsQNWeTl3Q7Hqyy7OWA=) 2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 08:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4 Validity Not Before: Oct 17 08:56:51 2026 GMT Not After : Oct 24 08:56:51 2026 GMT Subject: CN=6ad33853-a189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:51:30:80:c5:68:3d:95:39:7e:d1:7b:01: 3b:ba:df:41:0e:8b:b9:08:9d:f6:9b:cf:5c:12:97: 79:95:7f:7b:8d:e8:2a:29:45:ec:ff:63:3d:05:ae: 00:ed:e2:f6:42:2e:11:75:27:3e:ef:e4:02:57:31: 19:1d:aa:45:3c:5b:9c:59:e3:ba:47:02:2d:a0:ad: f4:32:46:44:04:7a:5e:0a:98:4b:87:1e:6f:6c:de: 78:e2:54:09:ca:a5:57:0e:99:a7:c4:77:41:b3:61: 5e:41:db:ff:f6:89:2d:df:cb:98:9e:b4:73:c2:1a: 21:ae:97:a3:65:c8:48:a4:5d:a8:a1:fa:58:6c:17: 55:f0:11:75:f5:34:93:34:de:4a:5b:10:4a:5f:85: 69:c4:90:b6:c4:b8:5e:4a:57:5d:4b:d1:ca:05:9e: 89:48:b4:57:e6:15:a9:7e:75:81:96:ff:54:14:df: 99:c2:d3:a9:55:1e:f3:e0:d2:f5:34:44:59:8a:07: 0c:c4:03:00:bb:5f:d9:a4:79:e9:d8:ea:55:a4:08: 9b:f1:a8:33:4d:a9:e6:dc:72:b5:e8:dc:fc:6f:97: 94:de:29:79:53:ac:73:95:c1:ef:5f:c4:5e:06:74: bf:35:ea:65:f7:2a:c8:e1:ae:60:c5:2b:63:f0:51: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:5B:69:E1:86:3C:B6:DA:1A:E2:97:9D:18:46:1E:33:D4:8E:38 X509v3 Authority Key Identifier: keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:09:36:1c:7c:af:bb:36:80:8e:9f:ca:19:22:bf:ee:8b: 4e:28:1a:17:0d:25:01:b9:27:89:fc:e7:6e:2a:f1:97:fa:24: 40:28:08:73:80:8e:2c:a4:9b:24:3b:8e:db:5b:e7:a0:b7:25: ac:2b:d6:29:b1:db:80:52:61:1e:5c:92:3d:31:ac:bb:14:06: 7b:3f:b4:f1:7f:c3:bb:d6:e6:4b:07:41:8f:7e:06:db:a4:b4: 3c:82:00:d3:07:a5:cc:f9:22:21:37:5f:4f:f5:a7:ce:4b:5a: fa:5c:c6:e3:a5:54:43:5b:12:91:a0:55:bd:93:56:c3:68:1c: 32:da:82:c7:80:18:d3:22:04:f2:b9:12:ad:11:fc:a5:35:3b: 00:72:4b:2c:39:93:14:ae:6f:ab:80:49:c3:fa:8d:0e:9f:50: 68:85:9b:45:06:e5:fa:24:c5:97:6a:77:79:6a:27:30:b1:79: b9:b9:15:10:0f:87:38:7c:69:61:4b:75:7c:d5:0c:da:d2:7f: a0:fd:05:96:dd:50:ea:94:16:86:b3:7c:3a:cc:f9:b5:7b:43: c1:44:13:05:0b:c9:d1:8a:9a:02:8b:c9:c3:33:92:17:bb:6f: 06:24:4d:10:23:40:34:c8:5b:ca:2d:08:bd:7c:81:87:88:8b: 6e:34:07:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0IzMzExMC8GA1UEBRMoMkVCM0NFQjYxRkYxRkJGN0I3M0E1QTBCMTBCNzc2QTRD MUU2MjlFNDAeFw0yNjEwMTcwODU2NTFaFw0yNjEwMjQwODU2NTFaMBgxFjAUBgNV BAMTDTZhZDMzODUzLWExODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7YVEwgMVoPZU5ftF7ATu630EOi7kInfabz1wSl3mVf3uN6CopRez/Yz0FrgDt 4vZCLhF1Jz7v5AJXMRkdqkU8W5xZ47pHAi2grfQyRkQEel4KmEuHHm9s3njiVAnK pVcOmafEd0GzYV5B2//2iS3fy5ietHPCGiGul6NlyEikXaih+lhsF1XwEXX1NJM0 3kpbEEpfhWnEkLbEuF5KV11L0coFnolItFfmFal+dYGW/1QU35nC06lVHvPg0vU0 RFmKBwzEAwC7X9mkeenY6lWkCJvxqDNNqebccrXo3Pxvl5TeKXlTrHOVwe9fxF4G dL816mX3KsjhrmDFK2PwUSstAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB0pbaeGG PLbaGuKXnRhGHjPUjjgwHwYDVR0jBBgwFoAULrPOth/x+/e3OloLELd2pMHmKeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QjMzL0UyOUY0QzdDNDUw OTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9lM09sb0xFTGQycE1IbUtl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHJQT3RoX3gtX2UzT2xvTEVMZDJwTUhtS2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QjMzL0UyOUY0QzdDNDUwOTExRjFBMEQxNUZEODkxODMzNzczL0xyUE90aF94LV9l M09sb0xFTGQycE1IbUtlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLbwk2HHyvuzaAjp/KGSK/7otOKBoXDSUBuSeJ/OduKvGX+iRAKAhzgI4spJsk O47bW+egtyWsK9YpsduAUmEeXJI9May7FAZ7P7Txf8O71uZLB0GPfgbbpLQ8ggDT B6XM+SIhN19P9afOS1r6XMbjpVRDWxKRoFW9k1bDaBwy2oLHgBjTIgTyuRKtEfyl NTsAckssOZMUrm+rgEnD+o0On1BohZtFBuX6JMWXand5aicwsXm5uRUQD4c4fGlh S3V81Qza0n+g/QWW3VDqlBaGs3w6zPm1e0PBRBMFC8nRipoCi8nDM5IXu28GJE0Q I0A0yFvKLQi9fIGHiItuNAeZ -----END CERTIFICATE-----Generated at Sun Oct 18 09:54:06 2026 by rpki-client