$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: 5wGUcT1g5yUZdiPsgnbP5aKvNWKW+j5QHTWtt6kQlVQ= Subject key identifier: 51:DD:CD:9E:F6:62:33:41:7B:64:E4:AF:34:FD:AA:FD:FE:ED:54:42 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B6F Signing time: Fri 22 Aug 2025 19:11:43 +0000 Manifest this update: Fri 22 Aug 2025 19:11:42 +0000 Manifest next update: Fri 29 Aug 2025 19:11:42 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: mti8qnx4+LX9X5ZopON4zCsPe4T4avo9LkYZ9w9tI70=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Aug 22 19:11:42 2025 GMT Not After : Aug 29 19:11:42 2025 GMT Subject: CN=68a8c0ee-7a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:94:df:31:5f:b4:11:1a:1e:b4:29:03:63: 83:d4:bd:fc:de:fd:9c:ce:7c:1c:da:40:30:b5:76: 77:4c:9e:0a:d6:25:12:5f:19:27:76:7d:29:e9:3c: ff:ec:c4:fd:40:2f:60:88:e1:7f:e6:a0:f3:27:1d: d7:f5:06:07:2b:0f:22:33:ff:12:14:58:67:aa:cf: 04:40:2c:00:2d:5d:a7:bb:d3:44:37:2f:62:71:fc: dd:99:c8:64:e1:7b:95:1e:8d:d4:e0:4d:94:93:89: a8:65:9e:90:0e:f5:a7:18:43:f0:20:14:aa:ad:db: cd:53:38:21:f2:24:83:17:c4:a0:4c:f2:c0:6b:c8: d1:c6:c7:87:00:c1:83:50:74:28:73:57:3b:d7:d2: 89:c1:d6:66:93:ef:e6:dd:a8:88:f4:db:af:fb:b7: 9e:fa:5b:68:69:f5:8c:6b:8d:4e:04:34:bf:d4:f7: 64:9d:59:9b:0e:1d:6f:e8:cf:f9:99:4a:1b:4c:b9: 80:92:6d:47:34:3f:88:52:8d:e6:77:54:21:75:29: 7b:ee:d0:cf:7d:01:10:2a:d3:99:e5:56:b1:31:ab: 52:02:0c:a9:d1:fb:ab:8e:c5:6a:43:16:79:05:f6: 4f:f2:82:64:d0:6c:64:e7:ed:7f:a8:39:f1:b8:65: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:CD:9E:F6:62:33:41:7B:64:E4:AF:34:FD:AA:FD:FE:ED:54:42 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:8d:77:8f:51:74:a9:db:2d:8f:74:4d:61:c2:47:ec:ac:9c: d7:b7:1c:8c:30:81:dc:08:a3:f2:a7:1a:ce:65:e2:6c:03:d8: ef:71:37:c4:45:e9:ed:c6:45:2f:8a:28:b5:e3:3a:78:22:5d: 02:5c:93:4e:5a:6a:b5:89:c6:77:3d:c8:c1:66:ac:12:a3:7d: 07:ea:8b:d2:01:bc:54:e3:8f:c5:fd:2b:3d:aa:1f:8b:00:27: fa:d4:b7:00:e3:c0:76:9b:6b:e9:5f:9b:82:ec:ef:25:3d:c9: f1:0d:e0:4d:25:c7:0e:01:6f:30:b9:1a:20:e2:68:52:3a:ac: a1:65:a3:b3:ed:9f:94:8d:2b:ed:f5:fe:7b:25:e5:ed:aa:7a: 12:1a:6d:7a:60:26:f2:96:31:b0:b1:ce:ba:e1:10:0f:83:bd: 67:66:e6:ad:5c:f0:d4:80:d6:54:7f:1b:98:02:2f:fa:58:af: 4a:7b:22:d1:34:e0:c2:01:df:7a:c8:45:94:ea:91:84:a9:ab: 15:93:dc:df:53:43:ed:2c:79:60:de:64:6b:3c:be:51:21:5c: b7:29:4f:f7:9d:dd:c0:b6:fb:21:2d:ea:08:fb:1e:f2:23:7c: da:80:88:c7:83:01:6d:f8:d9:eb:45:0e:f5:85:8c:7d:91:74: f6:cb:43:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUwODIyMTkxMTQyWhcNMjUwODI5MTkxMTQyWjAYMRYwFAYD VQQDEw02OGE4YzBlZS03YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrSU3zFftBEaHrQpA2OD1L383v2cznwc2kAwtXZ3TJ4K1iUSXxkndn0p6Tz/ 7MT9QC9giOF/5qDzJx3X9QYHKw8iM/8SFFhnqs8EQCwALV2nu9NENy9icfzdmchk 4XuVHo3U4E2Uk4moZZ6QDvWnGEPwIBSqrdvNUzgh8iSDF8SgTPLAa8jRxseHAMGD UHQoc1c719KJwdZmk+/m3aiI9Nuv+7ee+ltoafWMa41OBDS/1PdknVmbDh1v6M/5 mUobTLmAkm1HND+IUo3md1QhdSl77tDPfQEQKtOZ5VaxMatSAgyp0furjsVqQxZ5 BfZP8oJk0Gxk5+1/qDnxuGWgOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHdzZ72 YjNBe2TkrzT9qv3+7VRCMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEjXePUXSp2y2PdE1hwkfsrJzXtxyMMIHcCKPypxrOZeJsA9jvcTfE RentxkUviii14zp4Il0CXJNOWmq1icZ3PcjBZqwSo30H6ovSAbxU44/F/Ss9qh+L ACf61LcA48B2m2vpX5uC7O8lPcnxDeBNJccOAW8wuRog4mhSOqyhZaOz7Z+UjSvt 9f57JeXtqnoSGm16YCbyljGwsc664RAPg71nZuatXPDUgNZUfxuYAi/6WK9KeyLR NODCAd96yEWU6pGEqasVk9zfU0PtLHlg3mRrPL5RIVy3KU/3nd3AtvshLeoI+x7y I3zagIjHgwFt+NnrRQ71hYx9kXT2y0Of -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:31 2025 by rpki-client