$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: wrRNHJS106uZ6KIssCqaf3EKOLNIUr4F/ot2L1C2Nok= Subject key identifier: F6:D7:3E:69:90:F7:5D:BE:85:AA:FF:CA:E6:1B:98:4C:AA:D2:B8:94 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B31 Signing time: Sun 20 Apr 2025 18:58:56 +0000 Manifest this update: Sun 20 Apr 2025 18:58:55 +0000 Manifest next update: Sun 27 Apr 2025 18:58:55 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: mHyhB9v0Pmm1SlOapYORDwku9oTfMY8LHx2SH9x2Px4=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Apr 20 18:58:55 2025 GMT Not After : Apr 27 18:58:55 2025 GMT Subject: CN=680543f0-3b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:3c:5d:13:a8:85:1a:cc:f0:2c:4d:f0:99: 16:3c:2a:7f:4c:42:55:dc:b7:dc:f6:1e:b9:6b:aa: 0a:19:b0:24:a3:9a:a2:6e:c6:71:1a:05:4c:4f:6a: 02:f6:ac:a0:e7:5f:7b:24:71:e8:e4:89:b2:77:cc: 3e:f0:26:1d:1e:a3:0e:db:99:fa:d4:80:16:15:96: 34:12:52:17:cf:cb:ae:4c:bf:9c:41:5a:72:81:db: bf:87:c5:f2:4f:a1:ba:dd:e5:c1:dd:ce:05:cd:f8: 3c:12:25:36:fc:fc:2c:7b:ea:20:7a:f8:5a:b2:48: 58:1d:02:bb:31:79:a2:89:6e:b2:8b:28:0d:2a:3e: 45:00:fc:fe:60:6b:8a:ad:d3:99:0e:cf:1c:21:19: ad:c7:df:34:ff:de:89:54:65:c5:28:aa:6d:8e:be: 45:98:34:ae:38:24:10:7f:a2:fd:3c:c6:96:25:ed: 03:01:15:1f:7f:a9:4d:78:de:c5:12:91:a1:ec:09: 1b:0b:71:7a:56:4e:b3:98:88:96:04:e6:8f:53:3f: e2:c1:58:42:0e:18:bf:d1:a4:b1:3b:7a:fe:4e:52: 7f:f9:44:a5:29:14:dc:69:aa:c6:d8:19:c2:56:4a: f0:28:17:b2:8f:f9:db:ce:b8:98:8b:59:e8:f5:52: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D7:3E:69:90:F7:5D:BE:85:AA:FF:CA:E6:1B:98:4C:AA:D2:B8:94 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f8:4f:29:30:45:6e:17:68:08:38:0e:dc:a9:ed:01:8d:e9: bd:9e:2f:bc:02:5d:de:d3:c0:6b:8e:b0:8e:b5:4c:d9:75:e0: 67:ed:12:d0:67:ca:56:46:61:18:1c:ea:09:54:c9:a4:fe:4d: c9:79:96:91:c9:c6:93:01:51:b1:86:2a:6a:0d:de:66:0b:cf: 0a:22:5a:02:49:ba:59:76:07:45:b2:c0:41:04:6d:ee:87:8e: a1:98:8a:a2:71:6e:12:e0:18:0e:de:c6:2a:db:84:d9:d8:c8: 7e:76:3b:a1:d2:c9:f7:38:1b:88:8b:19:c9:39:6d:33:d4:85: fa:f9:52:55:b8:2b:42:c1:be:f2:4e:e3:de:87:34:ab:75:1a: 9f:32:0f:87:41:53:a5:fb:bb:88:c8:ae:b2:9b:39:c1:32:a7: be:53:6c:71:70:8b:a9:78:31:76:8f:6c:1b:82:ed:e0:d7:36: 9a:e5:4f:f1:53:6a:35:a4:4c:7c:f1:a7:ec:c5:cd:06:89:24: 97:03:51:e3:4f:de:61:73:8a:dd:77:e9:98:d7:52:10:bc:89: b2:e1:3f:bd:df:f4:53:10:0a:62:c9:ed:bb:d8:22:6d:5c:28: d8:ae:1a:bc:6f:48:ce:64:fb:e4:32:29:3e:22:d8:48:4e:d3: 2f:ab:d4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUwNDIwMTg1ODU1WhcNMjUwNDI3MTg1ODU1WjAYMRYwFAYD VQQDEw02ODA1NDNmMC0zYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJs8XROohRrM8CxN8JkWPCp/TEJV3Lfc9h65a6oKGbAko5qibsZxGgVMT2oC 9qyg5197JHHo5Imyd8w+8CYdHqMO25n61IAWFZY0ElIXz8uuTL+cQVpygdu/h8Xy T6G63eXB3c4Fzfg8EiU2/Pwse+ogevhaskhYHQK7MXmiiW6yiygNKj5FAPz+YGuK rdOZDs8cIRmtx980/96JVGXFKKptjr5FmDSuOCQQf6L9PMaWJe0DARUff6lNeN7F EpGh7AkbC3F6Vk6zmIiWBOaPUz/iwVhCDhi/0aSxO3r+TlJ/+USlKRTcaarG2BnC VkrwKBeyj/nbzriYi1no9VJb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbXPmmQ 912+har/yuYbmEyq0riUMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM+E8pMEVuF2gIOA7cqe0Bjem9ni+8Al3e08BrjrCOtUzZdeBn7RLQ Z8pWRmEYHOoJVMmk/k3JeZaRycaTAVGxhipqDd5mC88KIloCSbpZdgdFssBBBG3u h46hmIqicW4S4BgO3sYq24TZ2Mh+djuh0sn3OBuIixnJOW0z1IX6+VJVuCtCwb7y TuPehzSrdRqfMg+HQVOl+7uIyK6ymznBMqe+U2xxcIupeDF2j2wbgu3g1zaa5U/x U2o1pEx88afsxc0GiSSXA1HjT95hc4rdd+mY11IQvImy4T+93/RTEApiye272CJt XCjYrhq8b0jOZPvkMik+IthITtMvq9S5 -----END CERTIFICATE-----Generated at Tue Apr 22 01:31:51 2025 by rpki-client