$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: EZSDJXktdQUu2o2XnifwtXYY4RL3fHzQ0ryIieUUI+E= Subject key identifier: DD:7B:0A:97:41:2C:89:05:BF:FC:1B:EE:6E:E8:28:7E:D4:E4:A2:F0 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B8C Signing time: Sat 18 Oct 2025 19:52:10 +0000 Manifest this update: Sat 18 Oct 2025 19:52:09 +0000 Manifest next update: Sat 25 Oct 2025 19:52:09 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: KsxIlaBVO09AYbekMMJSn0TD3UATL0uZnA8RWUYFbtU=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Oct 18 19:52:09 2025 GMT Not After : Oct 25 19:52:09 2025 GMT Subject: CN=68f3efea-ae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:d2:62:25:d6:9c:df:aa:65:fe:74:7e:54: ba:f0:7d:7b:94:e1:84:e1:23:4d:98:43:1b:5c:73: e0:61:36:3f:16:ba:5d:da:bf:fe:71:f9:d8:05:94: ba:f9:2b:48:20:21:46:27:c3:11:e6:c7:de:d8:8b: a8:16:17:92:92:53:ce:2a:9a:a5:a5:8d:76:24:ef: 45:27:68:6c:8b:08:97:f2:7f:87:9a:08:70:5f:d4: 0b:e7:e6:2a:d1:43:07:17:2a:dd:71:31:ee:75:54: 31:3c:9f:04:e4:b1:d9:fc:53:1c:65:f5:94:6d:48: a7:d0:9f:b6:5e:6f:44:45:a1:28:80:6f:72:e8:87: c3:9c:6b:6d:7b:74:a6:5e:71:d1:87:bb:de:31:99: c0:7c:3e:63:0f:e9:ea:46:fa:8e:f8:d1:02:09:9c: 95:48:4f:67:67:f1:73:7a:cf:cb:42:02:7c:2e:cb: b6:89:3d:92:5f:7c:5c:e7:0a:3e:db:a0:83:76:cd: 57:8c:d9:84:3c:be:9c:fe:0b:7b:94:86:f9:b7:36: ac:c9:72:27:c2:3c:9a:c6:f2:05:df:8e:2a:d7:b6: c3:5e:bb:93:35:a8:3d:92:65:ab:cf:70:24:a2:9c: d5:e7:b5:c6:7e:02:86:39:4a:bd:3c:2d:cb:65:20: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7B:0A:97:41:2C:89:05:BF:FC:1B:EE:6E:E8:28:7E:D4:E4:A2:F0 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:a5:58:59:eb:48:74:33:60:ef:c2:23:0b:d9:69:10:a6: a7:31:fa:74:7c:d6:42:b7:c9:09:eb:76:da:1b:f8:04:9a:b8: e9:03:ec:99:59:43:05:70:a6:05:86:23:ff:3e:67:cc:a5:e8: e3:1c:86:cf:da:4f:58:db:42:e9:ef:0d:6c:8a:5c:65:71:63: 30:69:6c:00:45:3b:5e:7d:3c:2b:4d:6a:1e:47:0c:f6:89:e7: f0:ad:bc:19:19:b9:0b:e4:2b:77:eb:f8:96:02:1a:e0:64:2d: 3e:02:0d:0c:fa:e4:ab:94:11:21:83:03:39:1f:29:a0:54:ed: 8e:73:0e:02:62:fe:ca:b2:2c:c5:a3:46:45:a3:0c:4b:05:72: 47:62:6d:03:91:fe:de:f5:44:80:d2:4d:09:f8:1e:83:d2:35: e4:09:ae:a4:bc:f5:ab:55:a2:4c:b2:85:e2:a0:47:5b:7f:c6: 15:e0:cc:6b:97:c5:18:49:c4:5f:01:76:3b:2a:87:f3:73:78: 2c:2e:83:9d:ad:e9:38:69:90:1c:ad:82:39:79:20:14:12:d2: 49:05:75:51:33:e7:78:18:59:2d:61:a4:33:b2:c7:ce:f9:59: 5c:79:50:fd:41:09:2d:d6:52:38:67:ce:b9:bd:00:fa:b8:7b: 1a:82:db:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUxMDE4MTk1MjA5WhcNMjUxMDI1MTk1MjA5WjAYMRYwFAYD VQQDEw02OGYzZWZlYS1hZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBDSYiXWnN+qZf50flS68H17lOGE4SNNmEMbXHPgYTY/Frpd2r/+cfnYBZS6 +StIICFGJ8MR5sfe2IuoFheSklPOKpqlpY12JO9FJ2hsiwiX8n+HmghwX9QL5+Yq 0UMHFyrdcTHudVQxPJ8E5LHZ/FMcZfWUbUin0J+2Xm9ERaEogG9y6IfDnGtte3Sm XnHRh7veMZnAfD5jD+nqRvqO+NECCZyVSE9nZ/Fzes/LQgJ8Lsu2iT2SX3xc5wo+ 26CDds1XjNmEPL6c/gt7lIb5tzasyXInwjyaxvIF344q17bDXruTNag9kmWrz3Ak opzV57XGfgKGOUq9PC3LZSC68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN17CpdB LIkFv/wb7m7oKH7U5KLwMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvuqVYWetIdDNg78IjC9lpEKanMfp0fNZCt8kJ63baG/gEmrjpA+yZ WUMFcKYFhiP/PmfMpejjHIbP2k9Y20Lp7w1silxlcWMwaWwARTtefTwrTWoeRwz2 iefwrbwZGbkL5Ct36/iWAhrgZC0+Ag0M+uSrlBEhgwM5HymgVO2Ocw4CYv7KsizF o0ZFowxLBXJHYm0Dkf7e9USA0k0J+B6D0jXkCa6kvPWrVaJMsoXioEdbf8YV4Mxr l8UYScRfAXY7Kofzc3gsLoOdrek4aZAcrYI5eSAUEtJJBXVRM+d4GFktYaQzssfO +VlceVD9QQkt1lI4Z865vQD6uHsagtuN -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:46 2025 by rpki-client