$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: XJSzWymxRnpjAxGO/0Wp8U+b9psOcW9xmB7WwGxLzmM= Subject key identifier: 01:DC:D6:A0:BE:5D:72:D9:31:60:E4:65:55:95:A1:AA:86:FD:59:66 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0178 Signing time: Tue 01 Jul 2025 04:11:55 +0000 Manifest this update: Tue 01 Jul 2025 04:11:54 +0000 Manifest next update: Tue 08 Jul 2025 04:11:54 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: eHtP2qcfLzsvfp9mTUuGF2OyFNMzSVvhnMoDLTA5RcE=) 2: AFF53F96556211EE9C34E435C4F9AE02.roa (hash: LM315PXaZ9khTUzGflBEPkGQjhCerawkLIiZZc3Qylg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Jul 1 04:11:54 2025 GMT Not After : Jul 8 04:11:54 2025 GMT Subject: CN=6863600b-4d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:49:c5:bf:b3:d1:d2:a5:8a:e2:08:2e:dc: 57:d9:87:d4:78:8d:bc:89:4d:22:1d:6b:bc:1c:b4: 7c:d2:2f:c9:af:d7:b7:5f:ec:57:3d:1e:13:a0:54: a5:3d:82:da:09:ba:41:73:93:28:f1:88:1b:12:f7: 81:77:8d:04:44:c3:ce:30:84:4f:3a:90:61:ef:fe: 2a:73:f6:39:f2:3d:97:43:6b:40:cb:e3:ab:bd:85: 5e:03:e8:93:94:56:1c:9d:72:55:53:95:f5:a6:59: 74:da:27:18:da:05:40:ca:3e:9d:72:bd:1a:fe:da: 7f:4f:f9:cd:26:ac:b9:86:e6:4c:0d:49:80:ad:58: dd:b7:0d:73:39:c4:81:51:09:07:1f:4c:cd:06:f6: 54:b5:5a:a8:d8:99:ee:c5:5c:d2:a8:32:65:12:c0: bd:1f:0e:fd:31:ef:56:dc:4a:32:57:ef:5b:71:f7: 60:2f:0f:7c:36:0b:f0:2b:42:d5:80:33:79:dd:12: c2:e6:6b:46:2a:60:10:f6:40:34:bf:e1:e8:c2:0e: ed:79:4e:bb:0c:2c:4b:e0:b6:01:34:6e:43:fe:36: ba:00:fd:d6:f9:3c:e3:63:c9:91:8e:a9:ad:7c:50: 9e:41:5f:6a:9f:d5:75:54:a7:a0:c3:a3:51:96:5e: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:D6:A0:BE:5D:72:D9:31:60:E4:65:55:95:A1:AA:86:FD:59:66 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:29:d1:45:eb:1f:38:b7:46:2f:bc:0b:3b:0d:0e:1d:e9:69: 24:46:f5:2b:ee:44:f8:6c:18:cd:96:7a:54:eb:0f:7c:2d:3d: 7a:8c:02:83:d3:85:cd:db:c1:a7:6b:b1:85:d4:1f:7e:89:11: 13:8b:c6:c4:51:a5:c2:bc:b1:b9:5d:1f:7d:8c:e5:bc:4e:e0: 21:cb:2b:0c:0b:0b:ba:15:39:00:75:03:c8:6b:1f:4f:dd:0b: 84:dd:29:26:ef:c2:22:bc:0f:68:f4:a5:f2:91:64:e4:08:29: d8:50:f0:0b:5f:f7:37:6f:46:50:a3:f8:a8:fe:28:b5:bc:b1: 43:20:7f:78:d5:45:ae:cd:ed:62:2a:ec:85:f3:24:a9:0e:9d: b3:ba:49:e1:3b:cc:3f:95:74:c2:2e:3b:4c:ad:2f:0b:2d:c2: b9:88:c1:4d:1a:82:67:e7:ca:b9:a1:d8:01:be:6b:fd:e9:23: 0a:8f:8e:aa:bd:b7:79:92:19:7a:8d:fe:6d:31:ad:05:0e:90: 0e:95:09:c5:ff:6d:67:b9:5d:22:d5:14:7e:1a:8d:0b:69:66: cc:34:aa:7c:bc:29:4e:c6:39:b1:59:51:16:9f:ea:76:95:d9: 5e:dc:fa:a4:b3:1a:b7:9b:90:78:58:d0:4e:c1:dd:91:38:c5: 74:77:15:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjUwNzAxMDQxMTU0WhcNMjUwNzA4MDQxMTU0WjAYMRYwFAYD VQQDEw02ODYzNjAwYi00ZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O5Jxb+z0dKliuIILtxX2YfUeI28iU0iHWu8HLR80i/Jr9e3X+xXPR4ToFSl PYLaCbpBc5Mo8YgbEveBd40ERMPOMIRPOpBh7/4qc/Y58j2XQ2tAy+OrvYVeA+iT lFYcnXJVU5X1pll02icY2gVAyj6dcr0a/tp/T/nNJqy5huZMDUmArVjdtw1zOcSB UQkHH0zNBvZUtVqo2JnuxVzSqDJlEsC9Hw79Me9W3EoyV+9bcfdgLw98NgvwK0LV gDN53RLC5mtGKmAQ9kA0v+Howg7teU67DCxL4LYBNG5D/ja6AP3W+TzjY8mRjqmt fFCeQV9qn9V1VKegw6NRll4eAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHc1qC+ XXLZMWDkZVWVoaqG/VlmMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChKdFF6x84t0YvvAs7DQ4d6WkkRvUr7kT4bBjNlnpU6w98LT16jAKD 04XN28Gna7GF1B9+iRETi8bEUaXCvLG5XR99jOW8TuAhyysMCwu6FTkAdQPIax9P 3QuE3Skm78IivA9o9KXykWTkCCnYUPALX/c3b0ZQo/io/ii1vLFDIH941UWuze1i KuyF8ySpDp2zuknhO8w/lXTCLjtMrS8LLcK5iMFNGoJn58q5odgBvmv96SMKj46q vbd5khl6jf5tMa0FDpAOlQnF/21nuV0i1RR+Go0LaWbMNKp8vClOxjmxWVEWn+p2 ldle3Pqksxq3m5B4WNBOwd2ROMV0dxWq -----END CERTIFICATE-----Generated at Thu Jul 3 00:57:45 2025 by rpki-client