$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: 4IT56b0M6rB8ZcIG2LqcS+zOzFm9C1l4VxfTEcZ/f50= Subject key identifier: 0F:95:0D:F4:E8:7D:70:B1:E3:98:A3:F8:E5:97:C1:25:C5:B0:6C:3A Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B99 Signing time: Tue 04 Nov 2025 19:06:02 +0000 Manifest this update: Tue 04 Nov 2025 19:06:01 +0000 Manifest next update: Tue 11 Nov 2025 19:06:01 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: O6aFQDFJM57bIbzMDpOqa50OznlI+GN1QiCxAp4Tex0=) 2: 849DE48AB8DC11F0AFE11A3EC4F9AE02.roa (hash: 9KcIlyq8ZHlGeHgUeAIBs2zA8Q5DDSxKmMBg/qqD5B0=) 3: A7982B82B88011F081A7B245C4F9AE02.roa (hash: nckl+Acp7B7ApcHsl6K4bJl3rtQ4qeg5UR18Zt3JPwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Nov 4 19:06:01 2025 GMT Not After : Nov 11 19:06:01 2025 GMT Subject: CN=690a4e99-9233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:42:81:91:8e:1d:da:03:4a:28:f0:3a:d3: bc:3e:d5:d6:83:fd:c3:6b:65:1a:ef:64:66:52:5c: f2:5c:dc:d2:90:17:57:d0:20:41:57:31:ca:33:f5: e5:09:17:29:f6:7c:17:c8:d3:80:53:c6:b8:a9:fe: 6d:54:b7:21:29:c9:b8:3f:02:ec:5c:a8:be:71:dc: bd:a5:4b:eb:80:71:c3:b9:15:67:83:c9:11:66:18: af:14:20:8a:0c:8b:bc:5e:54:90:fb:12:4f:59:e6: 91:30:a1:4f:e0:ba:9e:ea:db:30:43:37:16:b0:8c: ce:c8:88:40:2f:aa:90:a9:cc:cf:38:d9:55:4c:b1: 94:db:a7:1d:1e:6d:f3:8d:fd:56:56:2b:d8:1f:a0: d3:f5:71:da:45:6f:b1:5c:a2:3e:d4:09:6b:7b:84: 95:6b:5c:29:12:db:f0:20:5c:8b:82:51:e1:fc:fc: b7:ee:1f:d4:b2:14:f7:88:45:4e:ba:1f:4b:f1:03: 5d:44:e0:9a:b3:2e:cc:c2:5e:8d:8d:e1:38:06:f3: f0:59:22:5a:a3:65:b4:5f:d2:d8:45:f9:48:6f:60: fc:38:1a:34:4b:d5:94:20:b7:8d:c7:5b:f8:d7:ab: 73:44:82:71:37:f9:bb:7c:00:7c:ea:31:f4:ef:0a: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:95:0D:F4:E8:7D:70:B1:E3:98:A3:F8:E5:97:C1:25:C5:B0:6C:3A X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:37:40:82:df:9a:a2:33:c2:e3:43:4c:71:8b:91:1d:e3:7d: 08:be:85:50:78:8a:64:29:15:88:e5:9a:89:68:bf:70:69:16: 2c:49:e3:a7:34:f3:3e:94:95:24:59:c1:7d:f6:c9:f0:8c:49: 54:87:6b:64:fb:db:1e:b7:e0:23:bc:3b:86:8c:68:d9:13:a1: 52:e8:47:8d:68:81:71:8e:c7:14:21:c2:67:91:8b:99:00:20: 02:5c:7b:9e:38:bc:67:06:10:b1:69:59:6d:3e:60:ea:52:0e: 96:4b:0d:6b:d2:64:06:4f:bc:34:93:e0:60:33:45:cf:8f:8a: 5b:81:b2:b6:cc:27:d3:58:5f:e4:37:a3:e2:9c:a8:26:b4:62: 8a:74:a0:2f:0b:29:18:b7:f6:30:30:dd:e4:8a:48:26:ee:5f: dc:76:4f:89:ea:02:8f:42:a6:9d:06:02:07:fc:4c:c1:5c:8e: 1c:1c:b5:d0:d7:7a:2c:4b:ca:df:8b:ed:23:95:14:77:6e:17: 05:78:a1:76:f9:e9:ac:40:18:7e:7a:51:a5:b0:db:82:f6:cf: d7:62:4e:4a:c5:c2:b3:71:b9:da:4c:57:44:49:29:cd:d8:af: 81:9a:87:3b:e2:a0:6a:f7:fa:08:43:93:a4:fe:ec:29:8f:5f: f1:ef:de:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUxMTA0MTkwNjAxWhcNMjUxMTExMTkwNjAxWjAYMRYwFAYD VQQDEw02OTBhNGU5OS05MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltZCgZGOHdoDSijwOtO8PtXWg/3Da2Ua72RmUlzyXNzSkBdX0CBBVzHKM/Xl CRcp9nwXyNOAU8a4qf5tVLchKcm4PwLsXKi+cdy9pUvrgHHDuRVng8kRZhivFCCK DIu8XlSQ+xJPWeaRMKFP4Lqe6tswQzcWsIzOyIhAL6qQqczPONlVTLGU26cdHm3z jf1WVivYH6DT9XHaRW+xXKI+1Alre4SVa1wpEtvwIFyLglHh/Py37h/UshT3iEVO uh9L8QNdROCasy7Mwl6NjeE4BvPwWSJao2W0X9LYRflIb2D8OBo0S9WUILeNx1v4 16tzRIJxN/m7fAB86jH07wqB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+VDfTo fXCx45ij+OWXwSXFsGw6MB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVN0CC35qiM8LjQ0xxi5Ed430IvoVQeIpkKRWI5ZqJaL9waRYsSeOn NPM+lJUkWcF99snwjElUh2tk+9set+AjvDuGjGjZE6FS6EeNaIFxjscUIcJnkYuZ ACACXHueOLxnBhCxaVltPmDqUg6WSw1r0mQGT7w0k+BgM0XPj4pbgbK2zCfTWF/k N6PinKgmtGKKdKAvCykYt/YwMN3kikgm7l/cdk+J6gKPQqadBgIH/EzBXI4cHLXQ 13osS8rfi+0jlRR3bhcFeKF2+emsQBh+elGlsNuC9s/XYk5KxcKzcbnaTFdESSnN 2K+Bmoc74qBq9/oIQ5Ok/uwpj1/x7978 -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:46 2025 by rpki-client