$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: jw3+gwGnSI4ufTYmgaJLI2ncaAhZlL/Wmtsqho9yITc= Subject key identifier: 20:8C:7E:73:51:87:21:16:0D:28:4E:86:D7:20:9D:7C:9A:FA:AB:F6 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 015F Signing time: Sun 11 May 2025 02:56:32 +0000 Manifest this update: Sun 11 May 2025 02:56:32 +0000 Manifest next update: Sun 18 May 2025 02:56:32 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: 3vCAhltTvyTl5NxhWIn6+XwTxhREX3Kv7onH7OUeoyY=) 2: AFF53F96556211EE9C34E435C4F9AE02.roa (hash: LM315PXaZ9khTUzGflBEPkGQjhCerawkLIiZZc3Qylg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: May 11 02:56:32 2025 GMT Not After : May 18 02:56:32 2025 GMT Subject: CN=682011e0-a9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:cd:25:4a:ba:67:b1:e5:03:d5:c0:25:88: c7:4a:e0:1b:f8:31:67:e6:eb:33:ff:01:24:2b:e5: e4:5b:ff:85:2f:75:3e:55:42:52:c2:69:34:aa:e5: 5c:4c:b6:fa:ef:21:d5:1e:14:30:7f:e4:e0:49:aa: 4e:69:37:70:a4:4c:fa:b0:bf:ee:69:16:9d:8c:70: a1:17:55:13:b3:3e:ff:31:22:67:c8:68:86:21:ca: 0e:ed:32:c5:13:4e:c5:bb:7a:78:a9:b4:95:7d:fb: 81:d1:5e:63:21:15:96:0c:69:bc:4a:07:a5:4f:ee: 30:d0:c0:d7:59:76:70:1b:3e:e5:8d:74:f9:cd:fb: 35:82:6f:f6:cc:47:1c:fe:31:08:2e:65:8d:91:bf: 06:fa:e4:d3:28:06:03:d2:16:e1:da:e4:51:e9:b6: 58:80:d0:e1:44:d0:1d:7a:7a:c3:06:bf:5e:87:15: d5:77:15:a3:3d:bf:db:07:95:00:60:00:5d:87:4f: 32:52:3d:7a:97:6d:ab:82:20:6d:f6:8b:5f:be:88: 38:61:d0:5d:92:e6:4e:98:1e:7b:ef:3f:c7:e4:64: ae:5f:45:fc:bb:97:41:e7:8c:64:cd:54:66:22:73: 03:03:db:44:53:36:da:aa:a7:06:a4:0b:e5:81:55: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:7E:73:51:87:21:16:0D:28:4E:86:D7:20:9D:7C:9A:FA:AB:F6 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:07:79:0c:a7:6e:09:e3:dd:7d:0a:59:0b:58:bb:ff:b1: 51:1f:a7:17:23:b0:c5:4c:28:44:9c:be:bd:c7:1c:cd:6a:13: 8b:8a:ea:65:d5:58:91:94:b8:4f:ea:39:41:48:bc:e5:99:4d: b5:79:e2:32:21:50:35:9e:67:bf:0e:38:50:bf:4d:10:c2:62: 57:23:54:96:03:ec:c5:d1:e7:b4:64:46:6d:fb:60:45:6c:3e: d1:80:ef:d3:d2:61:59:74:56:ca:c4:72:75:0e:2e:c2:21:69: 2b:16:be:a3:7d:af:2d:36:66:63:09:a2:8f:92:be:c5:6f:9f: aa:a2:c2:cd:87:90:07:e6:81:d9:7c:26:f0:9b:c2:a4:70:d6: 88:32:cf:ef:1e:b0:24:d1:bc:9b:82:f3:d2:75:2d:23:fd:03: 8a:f9:37:f3:ff:4b:7b:3e:1d:a0:51:8f:0e:62:46:83:cd:24: 31:0e:7d:3f:dd:94:53:0d:6b:c0:68:a6:ca:f2:86:d1:e8:b0: 3a:91:95:1f:72:8e:8f:d7:71:60:78:23:24:0a:19:3f:4e:c7: 2d:b2:d1:86:fc:d2:4d:41:ef:41:9c:27:27:b8:7c:d3:93:2e: 1d:00:cf:7e:05:5f:c1:db:40:fa:1a:7f:3c:bf:92:2c:d4:c7: 50:01:08:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjUwNTExMDI1NjMyWhcNMjUwNTE4MDI1NjMyWjAYMRYwFAYD VQQDEw02ODIwMTFlMC1hOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxXNJUq6Z7HlA9XAJYjHSuAb+DFn5usz/wEkK+XkW/+FL3U+VUJSwmk0quVc TLb67yHVHhQwf+TgSapOaTdwpEz6sL/uaRadjHChF1UTsz7/MSJnyGiGIcoO7TLF E07Fu3p4qbSVffuB0V5jIRWWDGm8SgelT+4w0MDXWXZwGz7ljXT5zfs1gm/2zEcc /jEILmWNkb8G+uTTKAYD0hbh2uRR6bZYgNDhRNAdenrDBr9ehxXVdxWjPb/bB5UA YABdh08yUj16l22rgiBt9otfvog4YdBdkuZOmB577z/H5GSuX0X8u5dB54xkzVRm InMDA9tEUzbaqqcGpAvlgVUFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCMfnNR hyEWDShOhtcgnXya+qv2MB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb8Qd5DKduCePdfQpZC1i7/7FRH6cXI7DFTChEnL69xxzNahOLiupl 1ViRlLhP6jlBSLzlmU21eeIyIVA1nme/DjhQv00QwmJXI1SWA+zF0ee0ZEZt+2BF bD7RgO/T0mFZdFbKxHJ1Di7CIWkrFr6jfa8tNmZjCaKPkr7Fb5+qosLNh5AH5oHZ fCbwm8KkcNaIMs/vHrAk0bybgvPSdS0j/QOK+Tfz/0t7Ph2gUY8OYkaDzSQxDn0/ 3ZRTDWvAaKbK8obR6LA6kZUfco6P13FgeCMkChk/TsctstGG/NJNQe9BnCcnuHzT ky4dAM9+BV/B20D6Gn88v5Is1MdQAQip -----END CERTIFICATE-----Generated at Tue May 13 02:39:22 2025 by rpki-client