$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: eqOP5nxhSj3X+AYImuM3jYoD84muEn2cdrNPae4hEGE= Subject key identifier: 5B:48:20:A4:6D:E8:E4:91:8E:D1:EF:71:88:5F:24:B9:00:1E:BC:1D Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0207 Signing time: Wed 25 Mar 2026 02:27:35 +0000 Manifest this update: Wed 25 Mar 2026 02:27:34 +0000 Manifest next update: Wed 01 Apr 2026 02:27:34 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: UeOi+G8HxmgqTO4g2xs4aUsS5oe+3ryrZDl5y44hIuQ=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: gZLmgQL8Id/ZC97jwL0iGOj/66jYcGItOBO3dCFihUg=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: VGPzKMnPimSMI2CiaOjVgyPC7/IcbTH85rF5mJCg2Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Mar 25 02:27:34 2026 GMT Not After : Apr 1 02:27:34 2026 GMT Subject: CN=69c34817-e7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:1e:97:96:58:79:c4:5b:11:17:e7:84:d2: 63:a3:c8:a5:24:3c:e6:e5:75:b2:5b:ab:10:e2:6d: ce:52:55:9b:46:fa:09:04:54:8d:80:d6:07:c6:94: 0a:2e:03:1f:36:01:91:ad:e6:d6:7c:16:53:c5:20: 2f:fb:09:6c:78:a3:8b:62:4c:cf:1a:1f:f4:c4:3d: 19:89:4d:6c:c8:68:e0:c1:a6:4b:a9:bc:ef:21:e7: 94:2b:f0:2b:e7:12:4a:8d:8c:5d:5c:fb:ab:b6:3b: 30:90:b3:64:52:f9:e7:a5:2c:1d:12:b1:62:01:93: 23:1c:a3:62:01:81:55:94:49:0a:b0:88:1d:f2:f3: 6c:af:c4:b5:6e:88:2b:a5:1f:4b:f1:20:4d:7f:d4: b2:5b:cb:3e:b5:f6:9f:a8:66:55:fc:e0:7c:bc:67: ae:c7:c5:7b:c9:e4:65:b5:07:1e:d2:11:bb:ea:c5: 02:15:86:7d:9a:2f:17:51:08:d1:1d:d4:58:aa:ad: 06:cc:f0:cc:7d:e1:e7:02:ad:78:11:85:30:bd:06: f5:61:ef:1e:a9:dc:97:e9:cd:87:50:ef:ed:29:34: 76:d3:7f:c5:61:33:78:01:7b:eb:e9:71:03:3d:d6: 3b:90:f8:b6:5d:7c:05:b5:eb:cd:89:d5:d4:52:4b: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:48:20:A4:6D:E8:E4:91:8E:D1:EF:71:88:5F:24:B9:00:1E:BC:1D X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e1:3e:85:9c:c5:70:d4:29:62:53:13:e5:f5:00:6e:53:e4: 84:41:b8:de:71:84:c7:cc:ce:7a:e9:1a:cd:89:af:e6:44:b5: 6b:bb:97:fb:2d:24:89:9d:55:19:38:20:34:9a:5f:d9:59:5d: b4:75:04:c6:cc:25:2b:04:4f:e3:a4:92:cb:6e:2a:59:62:51: 45:52:17:4c:1a:6d:ea:01:47:ac:ea:36:ee:60:9e:20:06:73: fb:0b:a0:06:49:57:ed:7c:64:7d:d6:73:40:5d:9e:c1:d1:f1: c0:ef:03:47:44:8a:3e:af:28:29:e4:ae:b1:f2:67:01:7c:8e: b7:95:d8:f5:e7:db:e9:06:35:ae:05:d7:cc:74:d0:fd:c4:21: 6e:67:7a:1e:48:cc:e6:2e:63:03:bc:d0:01:47:cb:d1:1c:22: c0:e4:cf:13:d9:70:86:ee:41:05:95:3a:20:e9:ed:7b:9f:9c: ba:12:6b:9a:58:6c:4d:39:5a:42:83:61:fd:35:0f:0e:54:2d: 77:5e:73:aa:b0:cc:cd:42:ed:38:13:22:d6:d7:dc:dd:16:0c: e5:d9:a7:b1:94:67:dc:83:3f:c7:c8:c8:d3:09:bc:80:6c:a6: 1e:44:df:51:32:0c:e0:e2:97:a3:c2:dc:ab:f7:7d:85:f3:d0: 56:0d:8b:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwMzI1MDIyNzM0WhcNMjYwNDAxMDIyNzM0WjAYMRYwFAYD VQQDEw02OWMzNDgxNy1lN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvMel5ZYecRbERfnhNJjo8ilJDzm5XWyW6sQ4m3OUlWbRvoJBFSNgNYHxpQK LgMfNgGRrebWfBZTxSAv+wlseKOLYkzPGh/0xD0ZiU1syGjgwaZLqbzvIeeUK/Ar 5xJKjYxdXPurtjswkLNkUvnnpSwdErFiAZMjHKNiAYFVlEkKsIgd8vNsr8S1bogr pR9L8SBNf9SyW8s+tfafqGZV/OB8vGeux8V7yeRltQce0hG76sUCFYZ9mi8XUQjR HdRYqq0GzPDMfeHnAq14EYUwvQb1Ye8eqdyX6c2HUO/tKTR203/FYTN4AXvr6XED PdY7kPi2XXwFtevNidXUUkvzgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtIIKRt 6OSRjtHvcYhfJLkAHrwdMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAueE+hZzFcNQpYlMT5fUAblPkhEG43nGEx8zOeukazYmv5kS1a7uX+y0kiZ1V GTggNJpf2VldtHUExswlKwRP46SSy24qWWJRRVIXTBpt6gFHrOo27mCeIAZz+wug BklX7XxkfdZzQF2ewdHxwO8DR0SKPq8oKeSusfJnAXyOt5XY9efb6QY1rgXXzHTQ /cQhbmd6HkjM5i5jA7zQAUfL0RwiwOTPE9lwhu5BBZU6IOnte5+cuhJrmlhsTTla QoNh/TUPDlQtd15zqrDMzULtOBMi1tfc3RYM5dmnsZRn3IM/x8jI0wm8gGymHkTf UTIM4OKXo8Lcq/d9hfPQVg2LHg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:50 2026 by rpki-client