$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: IbRFDR0j3cKTbAgyYMzcslpVWCTXr7ydVXAjCTlHqEo= Subject key identifier: 3C:DB:80:4B:35:F5:FA:56:BA:55:E1:73:4F:05:9B:A3:89:BF:05:45 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0C43 Signing time: Tue 22 Sep 2026 18:36:53 +0000 Manifest this update: Tue 22 Sep 2026 18:36:53 +0000 Manifest next update: Tue 29 Sep 2026 18:36:53 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: fXUFVLiv6kxuJXRq8taZQiCO/cF58C6EcvxvV/5uRRI=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: lF0Ud6Tl/4ldhJMDYPaNURdkT4vTTPUYzgxNpz7UXSc=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Sep 22 18:36:53 2026 GMT Not After : Sep 29 18:36:53 2026 GMT Subject: CN=6ab2cac5-5a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:6c:5e:da:32:a1:a6:63:c0:1d:78:eb:93: 34:93:45:46:d3:94:4e:b9:1b:05:6a:b2:7f:25:22: 14:2b:96:1b:04:a2:6b:e5:9a:ee:05:a0:21:24:9b: 54:2e:0c:f7:7c:72:9c:50:1a:75:1f:82:da:30:b2: 17:e3:cb:29:15:2d:84:30:bc:eb:2f:db:f2:e9:fd: d7:b7:d7:54:95:74:d1:d9:f8:61:63:1d:5a:dc:71: 65:cf:54:a4:38:89:b3:28:e9:84:97:4e:ea:e3:21: 29:03:85:19:2a:30:95:45:68:4d:10:9a:e3:2b:9e: db:cb:49:a2:32:bc:62:cb:f0:12:62:c0:a5:42:42: e7:cb:b2:a7:d8:aa:28:35:0b:00:b5:c0:2e:73:2b: b3:a1:28:cd:6a:89:c6:c3:38:5c:a4:7e:9a:d9:69: 62:47:88:83:2b:a5:60:f1:c1:43:c0:7b:59:3a:ea: 2a:da:a0:4d:9c:bb:e3:8f:b9:4c:8f:e8:0b:b4:ba: b3:56:45:42:11:ea:0f:98:14:df:fc:33:54:8e:0d: b0:18:fd:4d:21:53:94:26:92:67:7e:18:fa:35:ae: b6:d0:a4:c0:ad:ff:c3:16:a4:70:6a:75:1b:b1:bc: e7:de:80:86:f5:e6:e5:9b:9e:47:af:d0:c3:45:01: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DB:80:4B:35:F5:FA:56:BA:55:E1:73:4F:05:9B:A3:89:BF:05:45 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:c6:65:01:cc:0d:4f:6d:2d:05:ff:40:d3:a4:27:8f:5c: 5f:2c:80:67:50:c0:7a:55:2c:39:b7:bf:0b:b3:02:c6:ed:e5: 01:46:ef:12:86:58:6f:41:3e:23:10:b6:ec:bd:79:d7:a2:96: 1d:81:61:b0:9a:b1:87:dc:9b:ca:d0:83:2b:f2:64:5d:5f:17: 5e:6a:fd:b3:82:d3:3f:8c:69:43:88:4b:82:88:33:07:df:25: 07:10:1a:10:2d:a8:1a:94:3d:69:3e:59:21:18:db:94:09:4d: fd:bd:b8:d0:a2:6d:d4:10:1f:80:84:80:3b:0f:60:4c:a9:3a: ec:22:50:7f:9e:99:13:4c:43:64:08:95:d9:56:a1:4e:ce:e0: c0:df:ab:dc:bb:5a:bb:4e:32:91:f9:30:e9:05:76:f4:c8:ec: 7a:e3:19:9d:8b:ab:d7:aa:f2:af:9f:6f:b1:78:84:c2:ff:e1: fa:e7:bb:b4:62:b1:9e:07:91:3e:25:6b:eb:82:79:c5:68:f3: 4f:ea:2b:bd:a2:b3:4c:03:e5:66:51:c8:aa:7a:6d:83:32:c2: 2c:8f:d1:ea:fb:a2:65:8b:ab:13:15:0f:88:e6:55:9d:b9:19: 66:e1:97:6f:09:0f:92:85:d3:95:67:18:4a:2d:48:7a:1a:90: e4:f5:db:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwOTIyMTgzNjUzWhcNMjYwOTI5MTgzNjUzWjAYMRYwFAYD VQQDEw02YWIyY2FjNS01YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKtsXtoyoaZjwB1465M0k0VG05ROuRsFarJ/JSIUK5YbBKJr5ZruBaAhJJtU Lgz3fHKcUBp1H4LaMLIX48spFS2EMLzrL9vy6f3Xt9dUlXTR2fhhYx1a3HFlz1Sk OImzKOmEl07q4yEpA4UZKjCVRWhNEJrjK57by0miMrxiy/ASYsClQkLny7Kn2Koo NQsAtcAucyuzoSjNaonGwzhcpH6a2WliR4iDK6Vg8cFDwHtZOuoq2qBNnLvjj7lM j+gLtLqzVkVCEeoPmBTf/DNUjg2wGP1NIVOUJpJnfhj6Na620KTArf/DFqRwanUb sbzn3oCG9eblm55Hr9DDRQFZawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzbgEs1 9fpWulXhc08Fm6OJvwVFMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMnGZQHMDU9tLQX/QNOkJ49cXyyAZ1DAelUsObe/C7MCxu3lAUbvEoZYb0E+ IxC27L1516KWHYFhsJqxh9ybytCDK/JkXV8XXmr9s4LTP4xpQ4hLgogzB98lBxAa EC2oGpQ9aT5ZIRjblAlN/b240KJt1BAfgISAOw9gTKk67CJQf56ZE0xDZAiV2Vah Ts7gwN+r3Ltau04ykfkw6QV29MjseuMZnYur16ryr59vsXiEwv/h+ue7tGKxngeR PiVr64J5xWjzT+orvaKzTAPlZlHIqnptgzLCLI/R6vuiZYurExUPiOZVnbkZZuGX bwkPkoXTlWcYSi1IehqQ5PXb7Q== -----END CERTIFICATE-----Generated at Thu Sep 24 03:26:26 2026 by rpki-client