$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: qBSc4KKq4EYKCVS1lLOwB1FV5Cumq4qn5i23ramhIHo= Subject key identifier: 7C:25:B3:E8:4E:F3:31:78:4F:94:8A:69:44:B5:CF:A7:B9:DC:27:1C Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0BDA Signing time: Mon 02 Mar 2026 00:09:35 +0000 Manifest this update: Mon 02 Mar 2026 00:09:33 +0000 Manifest next update: Mon 09 Mar 2026 00:09:33 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: axH5YfNhOx2TtOHaoj/R6azfYC3ybtf/EwMxqLfUI48=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Mar 2 00:09:33 2026 GMT Not After : Mar 9 00:09:33 2026 GMT Subject: CN=69a4d53f-562e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:28:55:0b:e6:01:c6:99:e8:7a:34:1d:77: c9:b2:76:ed:e1:15:ea:81:4f:ef:97:0e:a1:44:84: 29:3d:21:ac:d0:91:23:2b:28:f2:54:8f:9a:fe:59: 76:97:bd:8b:41:72:6c:f6:41:14:2a:8f:d3:3b:04: 5b:3a:1d:f6:15:0e:16:46:31:00:6d:95:ed:21:c5: b8:ed:85:e3:a4:f9:ae:ce:e8:bc:fe:dc:a3:31:ed: 58:b6:ea:e0:e2:0b:57:5b:88:61:b3:71:ed:6c:8e: 00:61:f2:05:43:84:77:9b:67:d5:5a:fd:f1:d1:88: 96:94:e3:81:ec:26:d9:a4:2a:cd:70:3f:07:96:d0: ec:64:d9:d6:85:01:ba:f9:21:1c:0f:5f:8c:da:a0: 34:f5:31:be:1c:5e:70:cb:ed:61:22:96:40:67:14: 4b:29:d1:e3:12:4b:38:15:1e:be:b6:34:1e:ab:0c: 2a:b7:59:51:57:56:14:e4:a9:b5:d2:c0:b0:0c:9c: 1a:f4:57:89:4b:ec:b2:45:84:df:77:ff:21:b9:25: cb:93:26:20:f0:51:5a:86:3f:31:80:50:f5:1b:ac: 3c:0c:1f:d0:63:3c:7b:c3:d9:63:0d:31:75:db:54: cc:82:70:06:03:de:44:ba:4c:a7:f3:c7:93:f9:c5: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:25:B3:E8:4E:F3:31:78:4F:94:8A:69:44:B5:CF:A7:B9:DC:27:1C X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:e2:f0:ed:2e:c1:06:10:c3:89:9c:b7:79:e3:41:03:fc: 6d:04:0d:c0:40:45:e2:8e:90:61:67:f4:c9:a8:7a:44:b7:6d: 4b:26:cc:91:c6:6f:37:3d:44:f9:69:77:0e:13:d8:19:a1:2a: f3:b2:34:b2:f7:11:c7:33:10:47:02:d8:94:c2:0e:c6:e5:7b: 93:47:8a:5a:93:83:24:87:cc:af:ab:4c:b9:72:7c:c9:31:09: 44:f3:54:8e:a3:e7:6f:ce:ed:29:7f:c1:2a:27:7c:f7:9f:9f: c2:b0:84:8a:cf:7c:1c:37:09:47:54:4c:ca:dc:3a:18:3e:8d: ff:d2:55:97:ec:1a:20:8a:4f:14:74:74:36:2e:74:29:db:87: 23:43:b3:50:46:74:25:7f:73:28:23:f1:a2:d0:51:54:10:f3: 82:ab:76:0a:1a:8f:1d:44:91:c5:e7:4f:8f:ae:90:55:f8:1e: 3e:6a:cd:38:e7:68:24:50:af:e3:76:f5:87:3e:c2:cf:89:95: 55:44:1b:f7:6f:6b:7c:4d:23:c3:a2:f4:5f:1f:f6:d1:ef:3b: 1f:0a:72:30:1d:d2:43:2b:7e:1b:8d:98:bc:6e:17:d9:20:6f: 36:62:3c:11:74:cd:f1:76:4d:90:62:14:32:bf:b6:68:20:04: df:05:ed:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwMzAyMDAwOTMzWhcNMjYwMzA5MDAwOTMzWjAYMRYwFAYD VQQDEw02OWE0ZDUzZi01NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoMoVQvmAcaZ6Ho0HXfJsnbt4RXqgU/vlw6hRIQpPSGs0JEjKyjyVI+a/ll2 l72LQXJs9kEUKo/TOwRbOh32FQ4WRjEAbZXtIcW47YXjpPmuzui8/tyjMe1Yturg 4gtXW4hhs3HtbI4AYfIFQ4R3m2fVWv3x0YiWlOOB7CbZpCrNcD8HltDsZNnWhQG6 +SEcD1+M2qA09TG+HF5wy+1hIpZAZxRLKdHjEks4FR6+tjQeqwwqt1lRV1YU5Km1 0sCwDJwa9FeJS+yyRYTfd/8huSXLkyYg8FFahj8xgFD1G6w8DB/QYzx7w9ljDTF1 21TMgnAGA95Eukyn88eT+cUc3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwls+hO 8zF4T5SKaUS1z6e53CccMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXPi8O0uwQYQw4mct3njQQP8bQQNwEBF4o6QYWf0yah6RLdtSybMkcZvNz1E +Wl3DhPYGaEq87I0svcRxzMQRwLYlMIOxuV7k0eKWpODJIfMr6tMuXJ8yTEJRPNU jqPnb87tKX/BKid895+fwrCEis98HDcJR1RMytw6GD6N/9JVl+waIIpPFHR0Ni50 KduHI0OzUEZ0JX9zKCPxotBRVBDzgqt2ChqPHUSRxedPj66QVfgePmrNOOdoJFCv 43b1hz7Cz4mVVUQb929rfE0jw6L0Xx/20e87HwpyMB3SQyt+G42YvG4X2SBvNmI8 EXTN8XZNkGIUMr+2aCAE3wXtgw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:45 2026 by rpki-client