$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: Ji9qz9O9ZM2YzGrfR6k9ew/XRVNHkeSt7BwmGhnfbrQ= Subject key identifier: 9C:7B:CA:CC:FE:F7:52:E7:8F:E5:9F:5B:B6:0F:77:9D:5A:3A:C0:D7 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BFF Signing time: Tue 12 May 2026 18:53:53 +0000 Manifest this update: Tue 12 May 2026 18:53:53 +0000 Manifest next update: Tue 19 May 2026 18:53:53 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: MUjzQBWwafUoU4jcaw8KVSV8b5TlcHbMeQ2yC1iaBRM=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: May 12 18:53:53 2026 GMT Not After : May 19 18:53:53 2026 GMT Subject: CN=6a037741-8455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:37:03:38:d5:14:bc:bd:a0:29:44:9c:83: 60:40:cd:f3:f4:86:50:2c:94:41:7d:90:6a:5f:4c: 0c:93:f7:12:6e:b1:27:92:8b:b0:a2:87:7e:39:0c: c7:43:a1:c5:41:aa:73:75:7e:6c:06:1b:20:72:08: 76:75:58:05:86:ea:79:17:83:c3:71:a9:eb:38:80: 6e:2a:77:fc:db:7f:26:ca:98:8f:a6:9a:5e:96:c1: 42:a9:ba:a7:3c:23:ba:bd:71:54:3c:45:a3:31:e6: 47:3c:e7:58:97:69:a9:23:44:4a:bf:f8:f9:36:92: 27:94:8c:5f:2b:4d:fc:a7:83:d0:b1:e8:54:2a:f8: e4:6e:ab:b7:16:b4:86:ba:6f:63:12:d2:97:68:eb: fc:19:63:97:86:e1:12:31:68:61:f4:d5:62:e1:b1: d2:c8:e6:45:15:85:2f:b1:32:8a:28:c5:05:f2:0e: bc:03:4d:56:ab:c6:3d:04:8b:6b:d5:34:63:77:5b: fe:bd:9f:d2:28:a1:87:93:9c:8f:f6:49:dc:b8:50: a9:2b:0e:a7:e6:31:25:e9:1f:f5:3f:a6:f6:e3:32: 0d:6c:f3:2f:b4:c9:7d:02:79:e2:db:c1:be:71:13: 0b:b8:fb:7c:83:35:52:c3:fe:55:5e:cc:70:b6:17: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7B:CA:CC:FE:F7:52:E7:8F:E5:9F:5B:B6:0F:77:9D:5A:3A:C0:D7 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:46:ea:d8:01:33:3d:df:ef:e2:43:55:4c:fd:96:56:64:7b: 42:04:23:cb:31:b4:8d:2c:76:78:a7:b7:75:2c:dd:8f:98:f0: 9e:bd:09:fb:a3:3e:2f:e2:a3:b9:46:b5:53:a1:d9:19:c6:30: 9b:b3:4c:01:5a:d7:89:15:73:6e:64:f3:2e:de:43:42:1c:cc: 27:d0:b4:ad:08:63:a3:4e:19:f9:13:6d:37:c4:91:e7:5a:10: 49:a5:ed:33:31:82:2b:f5:21:c5:66:89:f9:d0:1c:b2:2f:f3: c7:fd:19:58:d2:6b:a5:40:24:10:bd:c6:b2:72:01:d1:f8:5d: 04:c6:78:b9:bc:9d:cc:01:f3:eb:d7:2f:6b:a5:c2:71:be:74: 29:2e:f1:7b:d5:68:32:d5:65:a3:59:d1:9d:be:36:9e:01:5c: 0b:3b:bf:23:4d:c4:1d:35:4b:39:b5:ad:f0:69:17:41:28:b7: 6c:56:ef:02:06:3c:be:1e:f8:c7:10:b6:47:81:a7:2d:28:58: 43:c5:fd:d6:af:9c:b9:aa:d6:c3:fd:f6:c0:0c:10:f9:95:30: 95:38:4b:66:9f:9d:ed:57:64:0f:de:c8:1c:c6:c9:35:c7:d4: f1:c8:6a:07:ca:d2:78:71:80:a3:29:f4:96:11:25:92:48:e3: 65:32:95:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwNTEyMTg1MzUzWhcNMjYwNTE5MTg1MzUzWjAYMRYwFAYD VQQDEw02YTAzNzc0MS04NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp543AzjVFLy9oClEnINgQM3z9IZQLJRBfZBqX0wMk/cSbrEnkouwood+OQzH Q6HFQapzdX5sBhsgcgh2dVgFhup5F4PDcanrOIBuKnf8238mypiPpppelsFCqbqn PCO6vXFUPEWjMeZHPOdYl2mpI0RKv/j5NpInlIxfK038p4PQsehUKvjkbqu3FrSG um9jEtKXaOv8GWOXhuESMWhh9NVi4bHSyOZFFYUvsTKKKMUF8g68A01Wq8Y9BItr 1TRjd1v+vZ/SKKGHk5yP9kncuFCpKw6n5jEl6R/1P6b24zINbPMvtMl9Anni28G+ cRMLuPt8gzVSw/5VXsxwthcUlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx7ysz+ 91Lnj+WfW7YPd51aOsDXMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkbq2AEzPd/v4kNVTP2WVmR7QgQjyzG0jSx2eKe3dSzdj5jwnr0J+6M+L+Kj uUa1U6HZGcYwm7NMAVrXiRVzbmTzLt5DQhzMJ9C0rQhjo04Z+RNtN8SR51oQSaXt MzGCK/UhxWaJ+dAcsi/zx/0ZWNJrpUAkEL3GsnIB0fhdBMZ4ubydzAHz69cva6XC cb50KS7xe9VoMtVlo1nRnb42ngFcCzu/I03EHTVLObWt8GkXQSi3bFbvAgY8vh74 xxC2R4GnLShYQ8X91q+cuarWw/32wAwQ+ZUwlThLZp+d7VdkD97IHMbJNcfU8chq B8rSeHGAoyn0lhElkkjjZTKV3g== -----END CERTIFICATE-----Generated at Wed May 13 07:29:34 2026 by rpki-client