$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: XABUur0ue5Wp31kQbNORJYWLblhUtXKguTwezLMGP9Q= Subject key identifier: 28:75:B8:21:74:FC:0C:F0:4B:55:7D:96:8C:8A:5B:D3:2D:00:EE:E7 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BEC Signing time: Sat 04 Apr 2026 18:42:31 +0000 Manifest this update: Sat 04 Apr 2026 18:42:30 +0000 Manifest next update: Sat 11 Apr 2026 18:42:30 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: 8NZylEUc3eyWw3ZZXlbbRtYMubxrhsf420rNCq/o/tg=) 2: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) 3: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Apr 4 18:42:30 2026 GMT Not After : Apr 11 18:42:30 2026 GMT Subject: CN=69d15b97-168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:68:0b:5a:f7:40:ed:4f:3d:20:e2:cd:e7: 7f:66:96:0d:ca:b8:aa:d4:7d:6f:5b:00:2e:aa:24: 14:f0:65:14:b9:98:c6:b3:5c:24:a7:c0:70:23:76: c0:e4:5b:19:86:95:ee:0f:06:c1:2b:fc:20:1e:e6: 61:62:b5:15:84:7b:c8:a1:56:96:cf:a8:44:f7:a7: e4:e0:ac:30:de:01:a7:30:97:ec:32:b4:af:4b:54: 00:e5:64:38:ac:0b:ea:b6:a2:4f:55:6b:54:5d:f7: af:2e:74:e1:96:6d:f7:d1:e3:b4:30:67:ec:36:fd: fd:80:01:73:77:57:4a:b1:15:6f:fe:b0:7b:2d:26: 32:4d:4c:e4:cf:b4:b8:e8:93:80:c3:fd:1c:93:5e: 5f:4d:37:fa:47:87:c9:e4:e5:38:9b:a7:4a:e0:83: a4:c6:91:01:e7:e2:01:ab:a5:57:9c:9b:53:c0:88: 73:99:e8:09:a6:f4:81:e6:09:58:8f:9d:de:d8:8c: ab:19:62:a4:8e:c1:7b:e6:a8:dd:b4:1c:70:bc:7c: 12:e8:52:01:b0:e5:77:81:43:9c:57:ff:46:5a:1b: 98:6d:fa:d1:31:d3:f2:0d:5b:e0:04:a8:d7:a6:c3: 82:4c:65:32:63:13:31:10:b9:2c:10:4d:39:21:61: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:B8:21:74:FC:0C:F0:4B:55:7D:96:8C:8A:5B:D3:2D:00:EE:E7 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a5:e2:a3:b3:f5:a3:92:25:a1:f6:72:b0:bb:8b:e3:ca:f0: c1:75:71:ed:f0:64:9d:1a:11:1b:3a:71:3c:39:f3:19:d2:3f: a6:98:6d:20:01:e5:a2:3e:9a:86:5d:6d:57:dc:a8:30:42:63: 1a:e1:32:c3:b9:de:42:27:a7:2d:aa:15:eb:96:c1:0b:9a:a4: 1a:7a:61:34:47:b6:01:48:d9:99:27:4e:c5:86:7d:cf:86:c8: 10:e9:72:d3:1f:f9:bb:48:19:31:39:f4:fe:2c:23:20:03:6c: 83:df:c5:5c:02:83:53:5e:8f:8f:55:79:7b:eb:74:84:67:0e: d3:45:6c:54:8d:70:05:28:ae:71:f0:75:ea:b5:9f:75:72:f5: 35:49:a3:58:90:9e:a5:d3:7f:a8:63:6c:b8:a0:06:8a:95:f7: 9f:de:73:64:92:90:30:9f:51:c8:de:28:53:45:61:39:7e:d3: 11:fe:d3:78:27:4b:c1:db:8e:c9:23:32:61:e5:ab:c3:89:d1: 3a:d2:71:99:08:91:72:d5:37:79:36:e6:a5:17:2b:73:a6:e6: 5b:3a:cf:87:c8:c2:bf:15:46:b3:0c:ea:9a:4a:d1:99:a2:c7: 58:c2:81:76:3e:7d:83:ca:d2:b6:35:95:dc:1f:fa:70:a9:5d: 49:63:fe:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwNDA0MTg0MjMwWhcNMjYwNDExMTg0MjMwWjAYMRYwFAYD VQQDEw02OWQxNWI5Ny0xNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtpoC1r3QO1PPSDized/ZpYNyriq1H1vWwAuqiQU8GUUuZjGs1wkp8BwI3bA 5FsZhpXuDwbBK/wgHuZhYrUVhHvIoVaWz6hE96fk4Kww3gGnMJfsMrSvS1QA5WQ4 rAvqtqJPVWtUXfevLnThlm330eO0MGfsNv39gAFzd1dKsRVv/rB7LSYyTUzkz7S4 6JOAw/0ck15fTTf6R4fJ5OU4m6dK4IOkxpEB5+IBq6VXnJtTwIhzmegJpvSB5glY j53e2IyrGWKkjsF75qjdtBxwvHwS6FIBsOV3gUOcV/9GWhuYbfrRMdPyDVvgBKjX psOCTGUyYxMxELksEE05IWE0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCh1uCF0 /AzwS1V9loyKW9MtAO7nMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASaXio7P1o5IlofZysLuL48rwwXVx7fBknRoRGzpxPDnzGdI/pphtIAHloj6a hl1tV9yoMEJjGuEyw7neQienLaoV65bBC5qkGnphNEe2AUjZmSdOxYZ9z4bIEOly 0x/5u0gZMTn0/iwjIANsg9/FXAKDU16Pj1V5e+t0hGcO00VsVI1wBSiucfB16rWf dXL1NUmjWJCepdN/qGNsuKAGipX3n95zZJKQMJ9RyN4oU0VhOX7TEf7TeCdLwduO ySMyYeWrw4nROtJxmQiRctU3eTbmpRcrc6bmWzrPh8jCvxVGswzqmkrRmaLHWMKB dj59g8rStjWV3B/6cKldSWP+cw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:17 2026 by rpki-client