$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: ogbJcC4XRs7YwIRgHJHLSDNdRdxmkbxU1sDlvDpoymw= Subject key identifier: 7D:62:21:70:B0:66:95:75:92:A8:C3:40:7F:06:8B:04:CE:0D:9E:24 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0243 Signing time: Thu 23 Jul 2026 03:43:33 +0000 Manifest this update: Thu 23 Jul 2026 03:43:33 +0000 Manifest next update: Thu 30 Jul 2026 03:43:33 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: bF02dcPP50LoK4SFNG+tyPmIp4lMpKG8/XEtbXWkN8w=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: gZLmgQL8Id/ZC97jwL0iGOj/66jYcGItOBO3dCFihUg=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: VGPzKMnPimSMI2CiaOjVgyPC7/IcbTH85rF5mJCg2Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Jul 23 03:43:33 2026 GMT Not After : Jul 30 03:43:33 2026 GMT Subject: CN=6a618de5-e04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:e9:6c:98:9c:16:00:5f:0e:55:1a:d8:35: 2d:78:44:20:9f:73:2b:3e:30:95:d8:f3:be:7a:75: 19:d1:89:1e:2d:c6:0c:d4:fc:08:7e:ae:63:36:8f: 74:cb:9d:f0:7e:fe:13:7e:11:a8:1f:f3:3d:27:d5: f4:b4:81:b2:70:36:3d:fb:62:ba:d4:84:12:39:23: 5b:3f:45:6d:63:ba:c4:02:f1:05:dd:bc:dd:d5:bb: 56:88:92:ff:70:c5:af:5e:8e:6a:5e:d2:03:dd:cd: bb:fd:cf:0a:8c:89:e2:51:3b:13:06:a9:ce:a9:d6: 9a:ce:52:d2:4f:1a:c1:bd:5c:d3:80:98:c7:9e:84: 7a:20:f8:e9:36:78:43:ee:a9:df:95:65:da:ab:67: 28:7d:16:c0:1b:f0:90:c2:3f:c3:d9:eb:a7:86:38: c0:de:79:24:96:1b:2d:25:2e:8e:a5:f5:d4:5c:5b: b6:97:02:67:48:72:3e:47:99:83:cd:18:ad:64:5d: eb:11:02:db:b2:b2:1c:ac:a2:55:80:63:24:2c:4c: a7:b7:b5:6f:9e:5a:a9:b3:10:a9:ba:d8:cb:d0:7b: 8c:d9:44:a3:32:f6:41:d5:7f:b7:bc:d5:0a:12:ab: 6c:3b:02:6f:3d:9f:99:61:64:fe:73:1b:e8:cb:31: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:62:21:70:B0:66:95:75:92:A8:C3:40:7F:06:8B:04:CE:0D:9E:24 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:48:4a:6a:14:f2:4a:9e:73:10:6a:33:bd:8a:bf:d0:9f: 38:64:61:70:94:78:15:84:ce:6a:65:f3:68:90:84:a8:80:cc: b5:67:e6:55:e8:55:c6:72:e2:f5:2f:96:00:45:18:23:a7:06: a2:4d:67:38:07:39:11:cb:b8:f1:15:20:c8:03:ad:a2:e1:3d: 1c:e9:46:3a:27:5e:a9:7f:2f:84:f1:39:26:ec:ba:61:fd:4f: 49:22:c0:7c:e4:fe:b3:03:6c:82:6d:62:33:0f:f1:41:96:b0: f0:6f:c2:76:20:40:d6:7f:ba:52:45:c9:31:92:5c:ab:1f:1a: 5e:c7:ef:41:b3:0d:ac:3c:90:22:43:7d:dd:69:05:49:2f:f0: 10:ee:9f:2e:18:63:c0:cb:a9:1d:b8:ee:a9:63:60:d7:03:46: 0d:bf:d0:9d:a1:c3:f5:96:c2:25:27:7a:12:b0:57:40:e1:ca: 0a:89:30:e3:31:dc:31:ff:54:db:1b:8e:a4:68:0a:8c:15:ef: b0:5b:88:ef:dd:fa:09:a7:1b:ce:ac:6c:36:5b:18:78:a9:ae: 92:1b:bc:1c:69:8f:1a:8f:65:c0:8f:4b:a8:04:92:e8:22:d8: d7:3b:cb:28:1b:8b:6a:9a:3c:d9:17:04:58:dc:b0:07:bd:83: db:f0:ad:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwNzIzMDM0MzMzWhcNMjYwNzMwMDM0MzMzWjAYMRYwFAYD VQQDEw02YTYxOGRlNS1lMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurjpbJicFgBfDlUa2DUteEQgn3MrPjCV2PO+enUZ0YkeLcYM1PwIfq5jNo90 y53wfv4TfhGoH/M9J9X0tIGycDY9+2K61IQSOSNbP0VtY7rEAvEF3bzd1btWiJL/ cMWvXo5qXtID3c27/c8KjIniUTsTBqnOqdaazlLSTxrBvVzTgJjHnoR6IPjpNnhD 7qnflWXaq2cofRbAG/CQwj/D2eunhjjA3nkklhstJS6OpfXUXFu2lwJnSHI+R5mD zRitZF3rEQLbsrIcrKJVgGMkLEynt7VvnlqpsxCputjL0HuM2USjMvZB1X+3vNUK EqtsOwJvPZ+ZYWT+cxvoyzGF6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1iIXCw ZpV1kqjDQH8GiwTODZ4kMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKKhISmoU8kqecxBqM72Kv9CfOGRhcJR4FYTOamXzaJCEqIDMtWfmVehVxnLi 9S+WAEUYI6cGok1nOAc5Ecu48RUgyAOtouE9HOlGOideqX8vhPE5Juy6Yf1PSSLA fOT+swNsgm1iMw/xQZaw8G/CdiBA1n+6UkXJMZJcqx8aXsfvQbMNrDyQIkN93WkF SS/wEO6fLhhjwMupHbjuqWNg1wNGDb/QnaHD9ZbCJSd6ErBXQOHKCokw4zHcMf9U 2xuOpGgKjBXvsFuI7936CacbzqxsNlsYeKmukhu8HGmPGo9lwI9LqASS6CLY1zvL KBuLapo82RcEWNywB72D2/Ct8g== -----END CERTIFICATE-----Generated at Fri Jul 24 06:40:13 2026 by rpki-client