$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: PpeTrxl3KO3zZjDIeyFIDPm/OhvZr2GqO3QeaWMLvcE= Subject key identifier: 9B:C4:83:BF:83:9A:8B:20:F8:5F:02:48:3E:AC:98:E9:57:F8:18:20 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 026B Signing time: Mon 05 Oct 2026 02:27:31 +0000 Manifest this update: Mon 05 Oct 2026 02:27:30 +0000 Manifest next update: Mon 12 Oct 2026 02:27:30 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: XrmmPksH49IFs75GD5d+W51EVZ7d7g1g4LtkiglhkdE=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: Bwi7xlyf7sfwXmnEXmb5ZeQpkjWTJ7Jui2fMVOVFPX4=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: Gp0Y+oe7GdSnYg3smbU8hMB9bPBFkO3dCQ8rZKWS5+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Oct 5 02:27:30 2026 GMT Not After : Oct 12 02:27:30 2026 GMT Subject: CN=6ac30b13-3597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:59:0b:60:bd:53:ff:80:05:cf:e1:ac:dc: 33:ce:a7:b8:0c:a4:0a:55:5a:22:8b:13:6d:74:3c: d7:00:9a:09:f6:9a:47:d8:62:0e:79:43:27:44:c0: e9:03:fd:9f:9b:cc:ba:a0:db:08:74:8c:a8:5b:fe: f4:f6:34:bf:62:54:48:ab:bc:dd:65:3a:76:1e:67: 5a:58:99:f1:28:b9:23:54:25:9b:8c:4c:ea:65:8c: 8b:63:2b:88:6d:95:12:ea:22:b0:d1:f5:b2:d9:2c: 32:16:0c:10:12:d2:b1:cb:4a:61:c3:7e:84:fa:5f: 1b:03:50:0f:3f:b1:70:fe:21:8e:89:0f:96:ed:b0: 62:eb:8f:79:60:7c:42:50:f4:f1:17:2e:34:af:7e: e3:1a:c7:b6:be:b4:01:b8:cf:0f:46:0b:92:b0:bd: 0a:e0:c0:ac:02:93:6b:b2:e8:ce:c9:dc:66:54:10: 7b:f1:15:83:36:8f:d7:fc:ba:9c:82:7e:e4:56:a6: f3:b5:f4:63:1e:96:7c:3c:8b:15:13:b5:1d:f3:71: 43:4b:9c:37:72:9d:18:43:a9:e7:66:6a:9f:1c:48: e9:d0:71:21:0b:ef:6c:81:6e:b6:e2:93:28:52:7f: 49:a6:e8:4a:a5:e1:58:72:ee:c6:71:21:7d:17:73: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C4:83:BF:83:9A:8B:20:F8:5F:02:48:3E:AC:98:E9:57:F8:18:20 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f9:90:24:14:1c:84:cd:a7:c4:62:25:d6:89:b4:59:01:05: 35:64:59:bd:1c:93:ab:6a:ec:31:7c:a3:69:e0:67:36:18:9c: 51:63:4b:c0:1b:72:33:76:24:e3:19:8a:41:3c:3e:dc:f9:c5: 41:99:49:b8:2b:5a:6b:80:16:d6:86:e6:52:bb:79:f5:47:ab: 2d:6a:74:f5:2b:84:e5:8c:50:0a:ea:ba:3b:61:d1:f1:0d:14: b0:98:2c:2e:85:80:14:15:2b:93:63:90:59:a7:ac:f1:04:44: 68:a7:28:f3:37:52:11:2f:a7:f1:81:dd:65:eb:c9:48:53:4f: a4:1a:14:4c:f9:84:a5:56:34:0f:06:ba:a1:d6:fe:8f:de:99: b7:a7:cf:c8:16:5a:77:ff:99:2a:46:9b:f8:a4:9f:ae:47:41: 2a:46:1c:43:b3:2f:13:11:be:f0:8e:76:47:c5:6d:bb:22:e1: 53:07:62:4b:e9:9c:50:69:12:fb:5a:c4:56:f7:f4:a5:91:5b: 03:59:e7:2f:5b:3a:78:27:97:3a:28:b0:1b:c0:4d:97:43:e8: 76:94:ea:cc:95:9b:46:09:59:4f:dd:53:7e:fb:a6:11:8c:1c: 3a:a4:a8:88:98:8b:ff:3e:4c:7a:3c:53:4f:4a:55:20:27:61: f8:ae:e7:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYxMDA1MDIyNzMwWhcNMjYxMDEyMDIyNzMwWjAYMRYwFAYD VQQDEw02YWMzMGIxMy0zNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xJZC2C9U/+ABc/hrNwzzqe4DKQKVVoiixNtdDzXAJoJ9ppH2GIOeUMnRMDp A/2fm8y6oNsIdIyoW/709jS/YlRIq7zdZTp2HmdaWJnxKLkjVCWbjEzqZYyLYyuI bZUS6iKw0fWy2SwyFgwQEtKxy0phw36E+l8bA1APP7Fw/iGOiQ+W7bBi6495YHxC UPTxFy40r37jGse2vrQBuM8PRguSsL0K4MCsApNrsujOydxmVBB78RWDNo/X/Lqc gn7kVqbztfRjHpZ8PIsVE7Ud83FDS5w3cp0YQ6nnZmqfHEjp0HEhC+9sgW624pMo Un9JpuhKpeFYcu7GcSF9F3M4CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvEg7+D mosg+F8CSD6smOlX+BggMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAavmQJBQchM2nxGIl1om0WQEFNWRZvRyTq2rsMXyjaeBnNhicUWNLwBtyM3Yk 4xmKQTw+3PnFQZlJuCtaa4AW1obmUrt59UerLWp09SuE5YxQCuq6O2HR8Q0UsJgs LoWAFBUrk2OQWaes8QREaKco8zdSES+n8YHdZevJSFNPpBoUTPmEpVY0Dwa6odb+ j96Zt6fPyBZad/+ZKkab+KSfrkdBKkYcQ7MvExG+8I52R8VtuyLhUwdiS+mcUGkS +1rEVvf0pZFbA1nnL1s6eCeXOiiwG8BNl0PodpTqzJWbRglZT91TfvumEYwcOqSo iJiL/z5MejxTT0pVICdh+K7nRw== -----END CERTIFICATE-----Generated at Mon Oct 5 12:55:10 2026 by rpki-client