$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: jFeA8KzhucJBGRYd31kQd/H0uOxv3bFLMy434Svg1E8= Subject key identifier: F2:D2:EA:60:0E:81:56:BD:B1:19:FD:8E:8B:BA:1A:35:B5:16:0C:12 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0B4D Signing time: Mon 16 Jun 2025 19:00:41 +0000 Manifest this update: Mon 16 Jun 2025 19:00:41 +0000 Manifest next update: Mon 23 Jun 2025 19:00:41 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: OVCoTQrvGZERHOHPVgAMiNEYIDp5Ri/qGe1bDQpC1pk=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jun 16 19:00:41 2025 GMT Not After : Jun 23 19:00:41 2025 GMT Subject: CN=685069d9-8e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:8d:cd:7d:64:7e:4e:dc:06:62:1e:ad:62: 13:d1:8b:79:7c:00:db:fb:e0:c6:bd:83:23:d0:97: 84:6f:ba:be:8e:fa:19:67:aa:2a:fc:6b:22:83:59: 39:77:dc:b2:c5:a3:8e:87:1e:85:75:1b:f2:87:66: 79:52:43:04:4f:f2:c1:f3:af:7c:90:63:2e:bf:58: ef:f7:0a:ed:ad:e4:72:1d:ab:de:b5:58:ab:24:b7: 2d:64:ba:9e:af:db:7f:28:19:76:96:e6:96:af:e2: 4f:b6:d3:09:fa:84:d5:ab:ea:7a:07:b7:63:af:58: d5:60:65:85:86:69:5e:d5:81:8c:d6:5b:7a:b4:77: c8:d2:a5:23:60:ed:60:1a:ea:91:65:3a:e9:77:69: b5:5f:80:7f:91:ef:9b:f0:68:e6:36:77:c5:e3:74: 33:2e:50:21:54:f9:29:15:6f:b0:63:96:87:52:ac: 22:c6:93:d1:23:33:c7:3e:af:7f:1b:0f:8a:42:fa: 2d:2a:0c:e3:eb:7f:0e:f6:c9:51:cc:4a:e4:c3:0a: b6:5f:00:9c:d2:c8:24:2e:c0:fe:cd:2b:4d:14:c9: 4f:10:6c:71:2d:5f:a2:94:52:8d:4f:e2:42:58:1a: 64:46:d1:f9:ee:74:91:0d:28:59:f7:28:a5:24:0c: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:EA:60:0E:81:56:BD:B1:19:FD:8E:8B:BA:1A:35:B5:16:0C:12 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b5:a3:db:25:9a:b1:9e:b8:7c:98:60:4b:b5:60:a0:23:97: 79:fd:06:80:ae:8b:26:f9:d9:64:45:fe:4b:95:37:ab:67:87: bc:ca:12:02:08:32:45:27:62:d9:2d:a4:c1:2a:42:9d:a9:e0: aa:e0:d5:3e:8a:59:09:4a:fb:44:56:95:7a:98:20:f9:c8:f1: 44:a5:32:dc:d1:ba:e8:bf:bc:74:e8:dc:19:ae:5c:6b:3c:16: 72:1a:a3:8b:7f:8e:26:1a:05:c0:d1:64:32:4e:e8:75:fc:f9: 98:f3:dc:b6:79:da:b2:5a:77:63:34:59:2b:af:44:65:36:ed: 85:c4:b6:84:12:3b:eb:2b:ea:ee:ac:ef:7e:6b:d0:25:05:53: fa:64:a0:28:f4:89:40:00:83:4d:ce:16:08:d8:68:32:66:32: fc:f6:59:b6:01:8a:ac:7a:b8:c7:96:3a:64:d7:90:bf:57:ff: d2:37:cb:30:ec:40:1a:91:e3:55:84:69:de:7d:fd:1d:25:c5: a8:bd:84:c0:1e:bd:d6:ff:7b:ed:cd:1b:27:31:91:8b:a2:bc: 53:e2:84:01:d5:8b:cc:ae:d8:d9:43:c1:78:35:34:cd:e8:e3: 56:be:d2:12:6b:f1:65:08:e0:6d:21:37:98:cb:40:ae:e9:c4: d4:e7:a5:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUwNjE2MTkwMDQxWhcNMjUwNjIzMTkwMDQxWjAYMRYwFAYD VQQDEw02ODUwNjlkOS04ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhKNzX1kfk7cBmIerWIT0Yt5fADb++DGvYMj0JeEb7q+jvoZZ6oq/Gsig1k5 d9yyxaOOhx6FdRvyh2Z5UkMET/LB8698kGMuv1jv9wrtreRyHavetVirJLctZLqe r9t/KBl2luaWr+JPttMJ+oTVq+p6B7djr1jVYGWFhmle1YGM1lt6tHfI0qUjYO1g GuqRZTrpd2m1X4B/ke+b8GjmNnfF43QzLlAhVPkpFW+wY5aHUqwixpPRIzPHPq9/ Gw+KQvotKgzj638O9slRzErkwwq2XwCc0sgkLsD+zStNFMlPEGxxLV+ilFKNT+JC WBpkRtH57nSRDShZ9yilJAzUjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLS6mAO gVa9sRn9jou6GjW1FgwSMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbtaPbJZqxnrh8mGBLtWCgI5d5/QaArosm+dlkRf5LlTerZ4e8yhIC CDJFJ2LZLaTBKkKdqeCq4NU+ilkJSvtEVpV6mCD5yPFEpTLc0brov7x06NwZrlxr PBZyGqOLf44mGgXA0WQyTuh1/PmY89y2edqyWndjNFkrr0RlNu2FxLaEEjvrK+ru rO9+a9AlBVP6ZKAo9IlAAINNzhYI2GgyZjL89lm2AYqserjHljpk15C/V//SN8sw 7EAakeNVhGneff0dJcWovYTAHr3W/3vtzRsnMZGLorxT4oQB1YvMrtjZQ8F4NTTN 6ONWvtISa/FlCOBtITeYy0Cu6cTU56Wl -----END CERTIFICATE-----Generated at Wed Jun 18 06:32:25 2025 by rpki-client