$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: 6HvihAuJuis6tcY0MvK/ELAXj+c6ldwr6VMiOCF9VoM= Subject key identifier: ED:F9:7D:AD:75:15:7D:C5:BD:A2:8C:13:8E:85:91:86:11:E8:F1:CE Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0195 Signing time: Sat 23 Aug 2025 03:34:46 +0000 Manifest this update: Sat 23 Aug 2025 03:34:46 +0000 Manifest next update: Sat 30 Aug 2025 03:34:46 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: AaIwNG7bd9MzOTGHF2WYKXn/It9cBvE9R5fnJOFoOZI=) 2: AFF53F96556211EE9C34E435C4F9AE02.roa (hash: ijNrrBGI0GOmOlPTEUC+Lp/ifnao/tWMMVdpLAGba4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Aug 23 03:34:46 2025 GMT Not After : Aug 30 03:34:46 2025 GMT Subject: CN=68a936d6-8619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:55:05:66:3d:c8:27:0f:22:50:95:03:6e: 4f:f5:9c:1d:01:44:9a:3a:fc:ef:08:7e:73:b4:90: 36:4d:c7:ac:8a:53:87:cf:c1:fb:03:55:1a:56:2e: 28:31:37:6a:e0:9b:bb:7a:8c:db:4c:bd:8e:b0:a6: 30:e9:77:3c:de:2b:8f:af:00:9f:81:38:bb:06:70: b5:8a:65:2c:49:94:84:7b:c1:8d:47:0d:f5:8e:1e: 7f:f1:24:d4:dc:ed:6f:32:82:6d:85:39:60:c5:69: 65:20:e7:fb:0a:ff:00:80:e7:d1:b1:2c:bf:fa:c9: f0:0f:db:c5:4a:82:c5:b0:c4:0e:e4:7d:cb:1f:25: 99:89:cc:1c:21:36:c4:ed:6d:ac:c4:1a:22:b6:3a: e2:96:11:dc:91:3a:d1:99:fc:d2:48:e1:cd:22:92: c7:cf:79:da:95:00:2e:82:33:db:1c:0d:f1:af:58: 12:ff:18:b4:fd:f2:24:bf:8d:60:55:62:34:10:5d: 6e:62:e6:84:89:55:41:94:90:01:75:cc:b6:ed:12: 61:3e:6c:4e:4d:05:ae:45:5c:3a:cc:bc:bf:1f:72: bb:6c:16:d0:2f:90:fc:e0:f1:8a:79:85:7c:bf:0d: 00:db:42:49:64:5d:97:a7:74:f0:45:45:81:aa:f6: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F9:7D:AD:75:15:7D:C5:BD:A2:8C:13:8E:85:91:86:11:E8:F1:CE X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f0:8a:bb:d3:b5:98:10:79:58:c7:a6:7c:28:7f:73:a2:66: 89:2e:02:a2:a9:b2:c2:cc:1d:e5:fd:8a:43:f8:0b:61:b2:58: 91:fc:eb:6e:20:54:0c:80:05:3d:08:0c:d2:e1:77:c8:69:a3: f1:2b:7e:42:d8:74:82:54:37:76:06:fc:fc:76:29:77:06:7a: 22:f5:da:3f:a4:cd:78:b9:21:60:b8:54:fc:57:7c:44:45:63: 8d:94:a3:21:85:3f:c2:f2:bb:98:d9:89:95:15:9c:bc:fe:0e: 61:e9:84:da:95:88:df:13:a3:e9:d8:e7:bc:26:cb:0e:35:15: d1:c5:27:fa:84:82:59:e2:e4:de:3e:9f:9d:1f:82:92:30:bc: 18:f8:cc:13:49:9b:a8:dd:9d:3e:f6:84:df:23:7c:fb:cd:0b: 95:b1:9b:1b:65:28:93:e4:fa:89:d1:52:a8:84:3f:09:64:a2: e4:68:bb:1a:d4:4e:a4:87:6b:f8:46:03:b9:2c:30:f5:34:fa: f2:b6:f4:bc:71:88:7a:8b:e8:f2:04:4f:2f:6d:95:de:76:2b: ed:c3:71:de:82:19:46:61:c4:b7:b5:55:5e:a3:f7:65:af:8f: e7:43:75:f7:0a:6d:31:dc:95:16:52:50:92:12:0b:96:1e:f7: 0e:9c:55:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjUwODIzMDMzNDQ2WhcNMjUwODMwMDMzNDQ2WjAYMRYwFAYD VQQDEw02OGE5MzZkNi04NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9RVBWY9yCcPIlCVA25P9ZwdAUSaOvzvCH5ztJA2TcesilOHz8H7A1UaVi4o MTdq4Ju7eozbTL2OsKYw6Xc83iuPrwCfgTi7BnC1imUsSZSEe8GNRw31jh5/8STU 3O1vMoJthTlgxWllIOf7Cv8AgOfRsSy/+snwD9vFSoLFsMQO5H3LHyWZicwcITbE 7W2sxBoitjrilhHckTrRmfzSSOHNIpLHz3nalQAugjPbHA3xr1gS/xi0/fIkv41g VWI0EF1uYuaEiVVBlJABdcy27RJhPmxOTQWuRVw6zLy/H3K7bBbQL5D84PGKeYV8 vw0A20JJZF2Xp3TwRUWBqvYwtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO35fa11 FX3FvaKME46FkYYR6PHOMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq8Iq707WYEHlYx6Z8KH9zomaJLgKiqbLCzB3l/YpD+AthsliR/Otu IFQMgAU9CAzS4XfIaaPxK35C2HSCVDd2Bvz8dil3Bnoi9do/pM14uSFguFT8V3xE RWONlKMhhT/C8ruY2YmVFZy8/g5h6YTalYjfE6Pp2Oe8JssONRXRxSf6hIJZ4uTe Pp+dH4KSMLwY+MwTSZuo3Z0+9oTfI3z7zQuVsZsbZSiT5PqJ0VKohD8JZKLkaLsa 1E6kh2v4RgO5LDD1NPrytvS8cYh6i+jyBE8vbZXedivtw3HeghlGYcS3tVVeo/dl r4/nQ3X3Cm0x3JUWUlCSEguWHvcOnFVq -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:29 2025 by rpki-client