$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: VRDp92EJynyD899XdcXJX/ym49jP3cGKw5MbuBj5dbg= Subject key identifier: 4D:94:9E:8E:D2:0D:49:66:35:B7:BE:D6:36:E2:17:C3:FD:0E:ED:61 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0C14 Signing time: Mon 22 Jun 2026 18:49:09 +0000 Manifest this update: Mon 22 Jun 2026 18:49:08 +0000 Manifest next update: Mon 29 Jun 2026 18:49:08 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: WAUS1ufaDxSuUHHxH8Dd9zCgF57fJ9utBJze65Bzp0I=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jun 22 18:49:08 2026 GMT Not After : Jun 29 18:49:08 2026 GMT Subject: CN=6a3983a4-3807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:6e:64:a0:ab:7a:d2:27:87:7d:08:59:bc: e7:89:34:68:02:c6:d9:56:e4:72:5a:01:27:cc:ed: dc:e0:fa:2c:d6:d6:5a:df:04:ec:13:77:dc:9e:85: 91:1b:a8:6c:3c:70:df:e3:d5:97:f9:4c:a6:7d:58: 7f:63:56:2e:a9:66:a7:2f:06:cb:d8:bc:34:6c:a1: fa:fd:6b:8c:0f:8d:e4:ea:13:77:26:d3:4a:dd:7f: 13:1a:49:69:20:c5:c8:8f:67:3d:67:4a:b0:7f:29: e8:42:b4:40:20:e8:8c:36:a6:e0:41:f5:8f:fe:2b: 58:dc:ed:79:83:e8:37:72:84:9e:45:b8:b8:ca:49: 9d:9a:d4:d9:0b:46:9a:51:50:92:1f:52:08:ea:fe: fa:39:ad:c1:ab:03:8f:b1:86:66:15:e8:4f:07:63: f5:c5:e4:a9:30:46:11:98:37:76:0a:63:09:72:dc: 92:44:18:0b:3a:a8:37:52:c6:e1:cd:11:6d:16:e5: 2f:c5:33:a3:31:12:e3:76:ea:06:d9:6b:94:b0:82: c7:8f:8c:e0:f3:76:39:61:67:2e:40:ff:9c:a4:54: 88:95:f0:ff:cd:f5:fa:c5:ad:e9:35:12:41:c4:04: 14:19:03:76:18:95:3e:b6:66:dc:11:97:ea:1a:57: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:9E:8E:D2:0D:49:66:35:B7:BE:D6:36:E2:17:C3:FD:0E:ED:61 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:7f:f3:40:82:56:d8:e7:11:d1:1a:8a:e3:5a:ed:6a:d9:f0: 2a:ec:91:cc:e8:14:34:80:1d:f8:bb:b5:bd:e8:c8:51:6d:7b: 74:c6:bd:f0:bf:16:cd:ca:08:1b:2a:f2:71:5d:d0:e4:25:f9: b1:95:1a:ca:b9:fb:5d:61:5d:bf:40:bf:c2:cb:e3:12:d6:06: 48:08:12:8a:8b:a1:6b:95:d8:5e:08:b1:3e:de:f0:b3:50:02: bf:07:86:f5:c9:7e:06:0b:04:89:b6:ec:cf:af:64:6f:a4:f9: 5b:6c:fa:e0:2a:8c:f8:66:b6:73:d0:03:86:6e:f2:1b:e5:db: d2:64:61:6f:2e:8f:02:79:0a:e0:16:ea:a7:f8:ba:fa:44:d5: 23:ce:e2:c6:b8:94:84:7a:b7:6f:7e:ab:ef:aa:b9:98:46:85: 99:0b:1d:b4:a1:60:56:ff:75:ea:72:4d:d5:a3:18:7f:40:55: 85:5f:de:71:50:19:a5:c8:55:bc:cf:21:9a:d0:55:9d:29:1e: 70:11:11:f7:b7:77:69:a0:d5:60:cf:ce:24:fe:d1:7b:89:29: 61:3b:6c:d5:4d:98:d4:ed:14:2e:45:0b:36:76:e0:a1:57:2f: b8:ee:7d:20:c1:e7:e5:07:59:c9:e9:3f:47:94:94:7e:f7:a0: 15:26:4e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwNjIyMTg0OTA4WhcNMjYwNjI5MTg0OTA4WjAYMRYwFAYD VQQDEw02YTM5ODNhNC0zODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/5uZKCretInh30IWbzniTRoAsbZVuRyWgEnzO3c4Pos1tZa3wTsE3fcnoWR G6hsPHDf49WX+UymfVh/Y1YuqWanLwbL2Lw0bKH6/WuMD43k6hN3JtNK3X8TGklp IMXIj2c9Z0qwfynoQrRAIOiMNqbgQfWP/itY3O15g+g3coSeRbi4ykmdmtTZC0aa UVCSH1II6v76Oa3BqwOPsYZmFehPB2P1xeSpMEYRmDd2CmMJctySRBgLOqg3Usbh zRFtFuUvxTOjMRLjduoG2WuUsILHj4zg83Y5YWcuQP+cpFSIlfD/zfX6xa3pNRJB xAQUGQN2GJU+tmbcEZfqGlddJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2Uno7S DUlmNbe+1jbiF8P9Du1hMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0X/zQIJW2OcR0RqK41rtatnwKuyRzOgUNIAd+Lu1vejIUW17dMa98L8WzcoI GyrycV3Q5CX5sZUayrn7XWFdv0C/wsvjEtYGSAgSiouha5XYXgixPt7ws1ACvweG 9cl+BgsEibbsz69kb6T5W2z64CqM+Ga2c9ADhm7yG+Xb0mRhby6PAnkK4Bbqp/i6 +kTVI87ixriUhHq3b36r76q5mEaFmQsdtKFgVv916nJN1aMYf0BVhV/ecVAZpchV vM8hmtBVnSkecBER97d3aaDVYM/OJP7Re4kpYTts1U2Y1O0ULkULNnbgoVcvuO59 IMHn5QdZyek/R5SUfvegFSZOcA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:16 2026 by rpki-client