$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: faSetCGWDtDsIh+iSC5l9uEoVvZ1cC35qTBjS3wcSow= Subject key identifier: B9:FA:06:80:8A:1F:65:98:BA:E6:22:FC:98:5A:48:6B:A5:30:21:04 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BE6 Signing time: Tue 24 Mar 2026 18:42:38 +0000 Manifest this update: Tue 24 Mar 2026 18:42:37 +0000 Manifest next update: Tue 31 Mar 2026 18:42:37 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: Qf/h+1Cjk90qGRM4oqYEXC0JGfUb9/1nmC76fFVBRAk=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Mar 24 18:42:37 2026 GMT Not After : Mar 31 18:42:37 2026 GMT Subject: CN=69c2db1e-ed0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:2a:1c:fb:1e:bb:d2:9f:89:94:a5:1d:ed: cb:29:6d:1a:86:3a:bc:6e:5f:cc:bd:1a:1d:af:4f: 23:a5:ec:dd:a8:83:4d:ca:f3:35:df:5a:6d:34:ef: da:22:82:9a:e2:0c:3e:b2:b4:42:bb:74:60:89:11: e1:e5:e6:47:95:ed:72:0a:f4:33:78:02:7d:15:b8: 2a:95:55:80:1c:4e:15:f7:82:78:31:c3:4f:d3:8d: dd:12:c7:af:98:80:12:f4:ab:02:77:52:ec:23:3a: ca:13:97:46:1c:36:32:7c:f3:56:15:46:78:8f:66: 7e:c5:7c:48:7e:15:42:72:89:cc:f5:42:37:3f:8b: 03:89:19:33:a9:09:7a:57:db:89:7c:0d:cb:80:1b: 09:68:58:c9:d7:89:7f:d7:ea:e6:a2:ca:10:0c:19: 93:55:56:ac:24:51:9f:f8:c5:34:47:37:14:c6:e6: cf:fa:f5:11:4c:c0:09:bd:37:5a:ed:a9:6a:68:0e: bd:0d:22:64:2b:6c:f0:60:b5:07:2d:a2:6b:b9:1a: ba:c7:87:ce:64:38:76:2a:64:f7:b8:97:af:13:e7: a6:47:78:99:34:17:c0:af:95:19:a8:51:45:44:76: ee:ef:cd:5b:a4:77:89:50:33:ff:e8:c1:34:87:8b: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FA:06:80:8A:1F:65:98:BA:E6:22:FC:98:5A:48:6B:A5:30:21:04 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f8:16:94:56:97:ec:5a:8f:c9:bd:51:35:33:8d:d0:ec:80: 33:08:83:a7:b2:dc:c0:ef:9f:4a:a3:f6:4e:db:2b:51:86:2c: 6c:18:02:3b:0a:24:7b:cb:cf:12:e4:53:7b:c0:24:ae:6b:1b: 57:27:41:ff:73:8e:a1:c6:49:34:df:26:ff:0d:f2:4a:ae:f3: d0:ce:32:8c:97:17:44:dc:eb:b5:34:d7:4d:47:c4:45:4f:c0: 26:75:59:b4:6d:f8:9a:20:9a:31:a6:2f:6f:ac:fe:29:97:21: b5:d9:15:6d:85:63:4d:77:fd:00:41:03:85:b2:57:86:68:24: 06:46:94:c4:a0:89:a1:41:c4:5e:29:61:34:28:25:6e:f8:a9: 32:8e:9d:e4:01:0c:13:ec:3e:ed:84:e0:51:45:33:c2:0f:c8: b3:16:4e:49:96:d9:73:82:c4:13:02:4b:ec:cc:cc:55:c0:88: d8:ff:9d:c3:2c:38:da:43:71:ce:ec:b1:b8:68:bc:5a:a7:0e: 94:9f:d7:31:89:04:e4:8f:49:3c:43:16:76:5a:15:70:85:a5: f5:e3:9d:25:8b:f2:f9:85:23:2c:65:fd:b3:02:56:76:71:26: ad:3e:32:de:96:14:2b:7d:98:88:66:04:a6:d3:76:4b:37:63: 0c:f0:4f:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwMzI0MTg0MjM3WhcNMjYwMzMxMTg0MjM3WjAYMRYwFAYD VQQDEw02OWMyZGIxZS1lZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiYqHPseu9KfiZSlHe3LKW0ahjq8bl/MvRodr08jpezdqINNyvM131ptNO/a IoKa4gw+srRCu3RgiRHh5eZHle1yCvQzeAJ9FbgqlVWAHE4V94J4McNP043dEsev mIAS9KsCd1LsIzrKE5dGHDYyfPNWFUZ4j2Z+xXxIfhVCconM9UI3P4sDiRkzqQl6 V9uJfA3LgBsJaFjJ14l/1+rmosoQDBmTVVasJFGf+MU0RzcUxubP+vURTMAJvTda 7alqaA69DSJkK2zwYLUHLaJruRq6x4fOZDh2KmT3uJevE+emR3iZNBfAr5UZqFFF RHbu781bpHeJUDP/6ME0h4vLlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLn6BoCK H2WYuuYi/JhaSGulMCEEMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUPgWlFaX7FqPyb1RNTON0OyAMwiDp7LcwO+fSqP2TtsrUYYsbBgCOwoke8vP EuRTe8AkrmsbVydB/3OOocZJNN8m/w3ySq7z0M4yjJcXRNzrtTTXTUfERU/AJnVZ tG34miCaMaYvb6z+KZchtdkVbYVjTXf9AEEDhbJXhmgkBkaUxKCJoUHEXilhNCgl bvipMo6d5AEME+w+7YTgUUUzwg/IsxZOSZbZc4LEEwJL7MzMVcCI2P+dwyw42kNx zuyxuGi8WqcOlJ/XMYkE5I9JPEMWdloVcIWl9eOdJYvy+YUjLGX9swJWdnEmrT4y 3pYUK32YiGYEptN2SzdjDPBPIw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:03 2026 by rpki-client