$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: /D1WnQVS1t6wcsCN+5MnVnq/N+CQPSC2RHVb836Qmbc= Subject key identifier: 24:62:C7:95:C3:1D:1B:E6:52:F3:0A:8F:C9:D3:AB:9F:76:F6:B5:FC Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0C31 Signing time: Tue 18 Aug 2026 19:02:47 +0000 Manifest this update: Tue 18 Aug 2026 19:02:46 +0000 Manifest next update: Tue 25 Aug 2026 19:02:46 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: 3+9EC62Gm3Es+G7O2CKzrDMswENd2IM/0vXSQmOQAcQ=) 2: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) 3: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Aug 18 19:02:46 2026 GMT Not After : Aug 25 19:02:46 2026 GMT Subject: CN=6a84ac57-f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:20:65:fa:79:e2:40:0b:39:1f:17:f9:69: 34:73:d0:37:55:fc:64:fa:9c:cb:b5:8d:58:87:41: c4:4a:25:fa:02:04:be:c7:47:2e:bc:4a:61:46:2f: 7e:76:79:de:96:ff:71:5e:be:2e:a7:98:a6:71:99: 63:59:be:c9:ab:60:37:d2:72:16:62:cd:9c:3e:56: 3a:47:90:67:b4:ad:4b:31:44:25:63:c6:34:0f:23: 17:28:38:22:8f:13:1d:1c:53:71:b0:c9:3e:15:1e: 2f:02:c8:b6:89:07:b9:72:d1:e8:7f:74:29:e0:4a: 67:1a:e3:a6:37:ad:38:81:3c:1c:50:24:2f:1b:36: 5e:45:1a:6e:56:f4:b2:f5:ed:aa:c0:85:e9:37:37: 3b:d3:72:45:19:bf:93:69:6a:ec:09:48:ba:31:55: 4b:39:28:2b:7b:a8:bb:af:97:a7:63:a5:54:9f:f6: 2a:c1:0a:ab:79:bd:ac:05:98:f4:0e:99:e4:15:ee: 30:5c:23:2e:d7:f4:c9:d3:9e:15:a4:06:7b:b0:4e: 14:04:8c:ea:10:42:4a:76:57:c9:57:4d:46:3d:e0: 6e:23:c1:e6:3b:8d:02:7d:17:7a:a9:7a:50:d4:af: 7e:ca:90:ed:a6:e8:aa:f3:15:1b:dc:6a:eb:9f:6b: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:62:C7:95:C3:1D:1B:E6:52:F3:0A:8F:C9:D3:AB:9F:76:F6:B5:FC X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:da:20:b5:a5:d3:5c:50:83:04:c7:c5:ae:bd:f3:01:17:47: b8:40:be:48:5a:11:6b:88:bb:e4:24:89:12:36:9e:ad:46:11: 0b:1e:c3:c2:d3:09:d7:1c:a1:10:38:6e:ed:14:aa:17:59:ed: ce:14:3e:88:d3:c1:68:9f:ce:12:a1:54:63:79:74:f7:95:e0: 24:76:ea:02:2f:34:39:72:f6:c2:e7:f4:3c:bd:02:3c:c7:8d: 77:bc:eb:bd:41:5c:47:d4:48:d3:29:57:d4:a8:58:9e:4a:9b: 98:22:8e:3c:b1:1e:07:82:79:5c:56:fa:c5:37:55:7b:83:ec: 14:0a:9d:ca:2e:ed:ac:80:0e:69:b8:9b:79:e3:de:6e:22:1a: b6:b3:6a:15:82:73:7a:b9:d4:1d:ee:ce:ac:df:29:34:a1:96: 31:94:6d:60:24:4b:27:62:36:42:82:61:6a:58:f5:c3:d4:12: b6:31:35:3c:b0:09:2e:82:b2:2f:1a:40:4f:e9:f5:e9:b5:b8: a5:cc:6f:dd:5d:c9:f9:fe:1a:25:9d:8d:5f:ed:51:e2:45:49: 65:47:65:da:ac:9b:db:2c:c3:8d:c5:5d:09:f8:5f:0f:b3:39: fb:21:5f:22:69:37:03:87:ac:ce:c2:8c:ab:90:42:fd:aa:01: 90:d8:4a:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwODE4MTkwMjQ2WhcNMjYwODI1MTkwMjQ2WjAYMRYwFAYD VQQDEw02YTg0YWM1Ny1mNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrwgZfp54kALOR8X+Wk0c9A3Vfxk+pzLtY1Yh0HESiX6AgS+x0cuvEphRi9+ dnnelv9xXr4up5imcZljWb7Jq2A30nIWYs2cPlY6R5BntK1LMUQlY8Y0DyMXKDgi jxMdHFNxsMk+FR4vAsi2iQe5ctHof3Qp4EpnGuOmN604gTwcUCQvGzZeRRpuVvSy 9e2qwIXpNzc703JFGb+TaWrsCUi6MVVLOSgre6i7r5enY6VUn/YqwQqreb2sBZj0 DpnkFe4wXCMu1/TJ054VpAZ7sE4UBIzqEEJKdlfJV01GPeBuI8HmO40CfRd6qXpQ 1K9+ypDtpuiq8xUb3Grrn2uoxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRix5XD HRvmUvMKj8nTq5929rX8MB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWtogtaXTXFCDBMfFrr3zARdHuEC+SFoRa4i75CSJEjaerUYRCx7DwtMJ1xyh EDhu7RSqF1ntzhQ+iNPBaJ/OEqFUY3l095XgJHbqAi80OXL2wuf0PL0CPMeNd7zr vUFcR9RI0ylX1KhYnkqbmCKOPLEeB4J5XFb6xTdVe4PsFAqdyi7trIAOabibeePe biIatrNqFYJzernUHe7OrN8pNKGWMZRtYCRLJ2I2QoJhalj1w9QStjE1PLAJLoKy LxpAT+n16bW4pcxv3V3J+f4aJZ2NX+1R4kVJZUdl2qyb2yzDjcVdCfhfD7M5+yFf Imk3A4eszsKMq5BC/aoBkNhKoQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:45 2026 by rpki-client