$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: eeTYl38KvGfe6FVw5n4avdOA4wW4FRCaPCmlvzG+COs= Subject key identifier: 45:CB:7B:57:27:2F:16:4E:0E:FF:60:D0:8A:C6:B8:EB:00:06:8A:68 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0C44 Signing time: Thu 24 Sep 2026 18:41:59 +0000 Manifest this update: Thu 24 Sep 2026 18:41:58 +0000 Manifest next update: Thu 01 Oct 2026 18:41:58 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: udhZIUEnXGyYq+ikFyGw8sS/I4dW2uHKZrh1pYDas5o=) 2: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) 3: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Sep 24 18:41:58 2026 GMT Not After : Oct 1 18:41:58 2026 GMT Subject: CN=6ab56ef7-f465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:07:a1:97:b6:32:d3:ab:3c:5a:cf:d3:5d: 9c:c7:f2:ff:16:3b:e7:0d:2a:5d:fd:ab:c7:89:73: 9f:fa:04:44:7a:26:31:83:2d:f0:ea:dc:1e:be:67: 24:1d:15:8b:2c:c1:c0:79:eb:96:f0:49:30:12:54: ca:cd:4c:bd:f8:29:8c:1c:f9:84:23:b5:d5:f2:08: cf:b7:c2:f1:d3:50:83:30:c4:91:8b:d4:84:f5:7f: 24:71:42:57:62:0c:1f:f4:d1:83:cd:31:e6:4c:0f: b2:f9:a6:5d:0c:f9:a7:b4:47:70:15:12:f6:45:07: 5e:3b:e3:02:56:95:b3:0d:78:eb:9e:70:c2:cb:e5: 62:6e:b4:02:21:2a:b6:3a:08:1a:73:ef:f1:96:37: bc:f6:d4:82:a3:e8:8b:4a:32:a7:0b:8c:c8:dd:55: 2e:e7:3a:8d:c4:1e:27:6e:72:05:f4:e5:34:4d:05: 45:34:1f:44:09:6c:97:56:ca:00:ec:0b:a4:26:c1: 70:d4:b5:38:20:eb:6c:71:a5:0b:f4:80:e8:9b:25: 7b:03:3a:26:55:de:c4:75:42:dd:d5:d6:39:1e:85: 26:53:88:5e:c0:09:b6:ce:10:9f:68:2d:03:5e:74: 9c:cc:62:39:37:87:d8:2d:ca:17:7c:b2:2f:f6:bd: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:7B:57:27:2F:16:4E:0E:FF:60:D0:8A:C6:B8:EB:00:06:8A:68 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9a:4e:f4:6c:25:ad:f4:97:d6:2a:32:2d:a6:62:1f:08:2e: f4:7e:6b:65:b9:9f:f3:70:2d:d7:5d:2e:d6:bc:41:06:c6:f0: 10:f5:71:ae:44:05:b3:45:c2:69:89:ba:20:e6:ed:5f:0c:08: a7:cb:0d:4e:1a:ef:0f:f0:49:c9:3b:88:1b:4c:90:03:77:81: f2:26:7c:17:79:9d:35:c0:1a:1d:b5:bf:36:dc:15:9e:09:d7: 6a:68:30:e5:10:f3:3e:40:f9:21:9d:68:34:4b:6a:ea:b1:de: 56:5b:a0:2f:ac:0f:9a:e8:0f:c3:66:74:3a:79:f1:b3:50:57: 34:fb:84:a2:5c:56:aa:91:50:25:60:2e:ef:b6:76:83:b9:86: 6f:b0:30:60:d5:89:ee:39:12:e1:11:1e:e0:69:bf:db:96:58: 3e:07:fa:1b:22:15:fb:3e:8f:8b:45:cb:19:58:06:b9:9f:cf: f4:d5:45:f3:dd:a8:d1:c7:1e:ac:c7:70:0e:33:ed:af:3a:2f: 4a:b6:cd:f7:5c:34:b6:a7:f3:0a:97:0c:37:64:83:7a:5a:54: be:92:a5:69:21:79:70:f3:71:62:a9:6d:c5:56:56:3b:7e:09: a6:67:f0:b9:06:fb:fd:a0:a5:46:a1:f6:21:7c:6a:8b:eb:7a: 4b:8d:ce:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwOTI0MTg0MTU4WhcNMjYxMDAxMTg0MTU4WjAYMRYwFAYD VQQDEw02YWI1NmVmNy1mNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmC0HoZe2MtOrPFrP012cx/L/FjvnDSpd/avHiXOf+gREeiYxgy3w6twevmck HRWLLMHAeeuW8EkwElTKzUy9+CmMHPmEI7XV8gjPt8Lx01CDMMSRi9SE9X8kcUJX Ygwf9NGDzTHmTA+y+aZdDPmntEdwFRL2RQdeO+MCVpWzDXjrnnDCy+VibrQCISq2 Oggac+/xlje89tSCo+iLSjKnC4zI3VUu5zqNxB4nbnIF9OU0TQVFNB9ECWyXVsoA 7AukJsFw1LU4IOtscaUL9IDomyV7AzomVd7EdULd1dY5HoUmU4hewAm2zhCfaC0D XnSczGI5N4fYLcoXfLIv9r1xxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXLe1cn LxZODv9g0IrGuOsABopoMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5pO9GwlrfSX1ioyLaZiHwgu9H5rZbmf83At110u1rxBBsbwEPVxrkQFs0XC aYm6IObtXwwIp8sNThrvD/BJyTuIG0yQA3eB8iZ8F3mdNcAaHbW/NtwVngnXamgw 5RDzPkD5IZ1oNEtq6rHeVlugL6wPmugPw2Z0Onnxs1BXNPuEolxWqpFQJWAu77Z2 g7mGb7AwYNWJ7jkS4REe4Gm/25ZYPgf6GyIV+z6Pi0XLGVgGuZ/P9NVF892o0cce rMdwDjPtrzovSrbN91w0tqfzCpcMN2SDelpUvpKlaSF5cPNxYqltxVZWO34Jpmfw uQb7/aClRqH2IXxqi+t6S43OWQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:46:16 2026 by rpki-client