$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: zMnTZbyK0fTZ2yDnfUhQbiXYA0sJxE/BQ55QYZwdz0g= Subject key identifier: 18:E7:EF:5C:C0:F7:D3:4F:DA:24:9D:31:39:23:6D:AB:70:E5:8E:B2 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B68 Signing time: Fri 08 Aug 2025 19:19:28 +0000 Manifest this update: Fri 08 Aug 2025 19:19:28 +0000 Manifest next update: Fri 15 Aug 2025 19:19:28 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: TaEPbP2YCJK2HFavmgIXVJyZzudwcPIydkIVI2RNFkM=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Aug 8 19:19:28 2025 GMT Not After : Aug 15 19:19:28 2025 GMT Subject: CN=68964dc0-d5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:d7:72:be:23:4d:a1:37:74:d2:43:e0:63: 18:cd:c4:ee:1d:f6:7c:ba:36:eb:71:0e:c0:83:f2: a6:9b:63:2a:31:45:89:71:03:7c:2b:96:16:2d:c4: ec:cd:4d:c7:73:60:78:c7:8a:ab:12:1a:47:36:a2: b8:14:3e:0c:1d:5f:55:af:74:e4:05:b3:60:4a:3b: ed:3c:91:1d:bd:e8:3b:26:cf:4d:64:24:73:89:0f: 0f:1e:49:9f:e9:ff:28:6a:58:32:bd:32:19:c2:15: 01:a5:d9:34:55:b9:ba:4c:7a:9e:40:dc:e8:46:74: 92:9c:90:96:1b:d7:bf:90:d7:b9:cf:12:00:ed:6a: 52:38:d1:3b:f0:bc:55:14:15:ab:12:9e:e1:3f:cc: 36:83:fd:8e:1e:a1:65:3a:cf:23:6e:44:d9:d4:84: 1b:71:59:66:c5:3a:f8:31:7b:d2:97:d7:b9:60:9c: 0e:8d:e3:be:9a:65:c7:03:60:12:07:69:2d:85:da: e4:0a:43:38:b9:a2:c5:8b:2a:e4:11:85:97:bd:55: 0c:4f:f6:75:1d:11:47:e4:dd:63:06:6e:34:17:8a: 16:b6:f8:a9:de:ff:95:4c:51:7c:4d:c2:47:95:8b: 53:9a:7b:48:12:58:ca:52:76:e9:e8:68:7f:64:98: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:EF:5C:C0:F7:D3:4F:DA:24:9D:31:39:23:6D:AB:70:E5:8E:B2 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:69:4f:18:97:e7:96:f9:18:6c:83:8b:7d:26:ad:99:e3:cd: 10:9c:72:cd:43:f3:be:a0:f8:e8:fb:dc:d8:ac:6f:33:06:88: f0:ee:2f:77:e6:2d:f1:ff:ee:e6:8f:16:d0:39:e7:78:ba:a5: d7:d7:32:ec:0a:5e:50:7f:2f:d2:60:57:4d:d0:c7:65:31:89: db:e1:e8:fe:ad:68:6d:e9:7a:a6:6b:d0:e1:71:cb:1d:38:e0: a9:1f:1b:51:0e:6b:50:0d:f7:0c:96:09:53:8e:ab:4a:15:b3: 16:cd:26:a5:52:fc:1e:3e:c7:f2:1b:17:06:51:93:ae:35:e7: 69:19:27:ec:4f:5a:77:9a:00:e9:b7:b9:62:68:74:be:c3:f1: 76:2f:ff:49:91:c5:ad:af:d0:33:4a:13:c1:2c:6a:6a:80:fb: 0c:21:82:c2:9d:9e:0b:36:2f:5f:71:ef:6d:60:ef:af:e6:38: df:11:28:f0:2a:d2:74:86:fe:e1:db:d6:b1:85:79:b9:4c:a4: 8d:82:1c:8f:31:f2:39:54:19:e2:88:23:44:30:23:15:79:48: f3:98:b4:99:4f:df:26:1e:8c:58:a5:cf:f3:93:97:09:50:bd: a3:d9:cd:86:a1:81:44:09:6e:53:f9:17:44:1f:e0:d3:f7:ba: de:77:2d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUwODA4MTkxOTI4WhcNMjUwODE1MTkxOTI4WjAYMRYwFAYD VQQDEw02ODk2NGRjMC1kNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7RfXcr4jTaE3dNJD4GMYzcTuHfZ8ujbrcQ7Ag/Kmm2MqMUWJcQN8K5YWLcTs zU3Hc2B4x4qrEhpHNqK4FD4MHV9Vr3TkBbNgSjvtPJEdveg7Js9NZCRziQ8PHkmf 6f8oalgyvTIZwhUBpdk0Vbm6THqeQNzoRnSSnJCWG9e/kNe5zxIA7WpSONE78LxV FBWrEp7hP8w2g/2OHqFlOs8jbkTZ1IQbcVlmxTr4MXvSl9e5YJwOjeO+mmXHA2AS B2kthdrkCkM4uaLFiyrkEYWXvVUMT/Z1HRFH5N1jBm40F4oWtvip3v+VTFF8TcJH lYtTmntIEljKUnbp6Gh/ZJhkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjn71zA 99NP2iSdMTkjbatw5Y6yMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4aU8Yl+eW+Rhsg4t9Jq2Z480QnHLNQ/O+oPjo+9zYrG8zBojw7i93 5i3x/+7mjxbQOed4uqXX1zLsCl5Qfy/SYFdN0MdlMYnb4ej+rWht6Xqma9Dhccsd OOCpHxtRDmtQDfcMlglTjqtKFbMWzSalUvwePsfyGxcGUZOuNedpGSfsT1p3mgDp t7liaHS+w/F2L/9JkcWtr9AzShPBLGpqgPsMIYLCnZ4LNi9fce9tYO+v5jjfESjw KtJ0hv7h29axhXm5TKSNghyPMfI5VBniiCNEMCMVeUjzmLSZT98mHoxYpc/zk5cJ UL2j2c2GoYFECW5T+RdEH+DT97redy12 -----END CERTIFICATE-----Generated at Sat Aug 9 02:56:53 2025 by rpki-client