$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: tJJysEuII21aRjV0no9LXFMcGpJuCiyIP2kvSRoBwoA= Subject key identifier: B4:63:91:3C:76:7D:C9:03:FE:2C:70:30:C8:A3:6C:0C:FF:E0:64:84 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0245 Signing time: Mon 27 Jul 2026 03:59:20 +0000 Manifest this update: Mon 27 Jul 2026 03:59:20 +0000 Manifest next update: Mon 03 Aug 2026 03:59:20 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: DdA/aDY+CPEhF2MbxUwlCxVoObDfL5sH4iBbZEcwE/A=) 2: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: VGPzKMnPimSMI2CiaOjVgyPC7/IcbTH85rF5mJCg2Ms=) 3: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: gZLmgQL8Id/ZC97jwL0iGOj/66jYcGItOBO3dCFihUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Jul 27 03:59:20 2026 GMT Not After : Aug 3 03:59:20 2026 GMT Subject: CN=6a66d798-94f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:9f:0a:6a:2a:4f:5d:a6:7a:bf:2e:ec:26: a3:9b:3d:f8:10:03:92:80:8b:57:99:02:32:05:46: 6d:5c:a2:65:73:0b:a3:bb:cd:bf:b9:01:80:16:b2: 46:2e:dd:8e:03:9d:76:df:27:74:83:83:26:67:c5: 5b:c2:27:62:61:44:29:f1:3a:ed:aa:f0:33:96:22: e9:9e:63:df:5f:fd:62:7c:88:00:3b:e4:23:88:0c: 78:bf:cc:59:83:be:fd:5a:97:74:00:87:54:a8:73: b9:4d:87:e4:21:28:b5:30:8e:66:84:73:77:5d:67: 9f:88:56:19:00:8d:c2:ab:90:f0:f4:fd:08:3a:f9: 66:6d:0a:6e:1e:0a:1b:a2:b9:a8:10:9b:74:8b:98: ad:d7:a9:cb:e4:53:5c:d8:8e:7d:0b:70:c6:12:21: 17:26:58:77:dc:c2:ab:b9:bb:57:da:bf:b8:c4:dd: cb:72:9f:52:51:87:04:62:ed:5f:d5:39:bf:5e:dd: 35:07:ac:9a:06:0f:f8:77:24:7a:c4:60:04:41:9a: 10:7f:09:a4:06:2f:20:3c:fc:1f:9d:16:82:51:4c: 80:68:bb:21:e2:e9:42:ad:6b:cc:e4:3e:59:97:36: 61:a5:55:56:e0:fd:7a:c7:ff:62:df:c8:4b:53:38: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:63:91:3C:76:7D:C9:03:FE:2C:70:30:C8:A3:6C:0C:FF:E0:64:84 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:dd:74:21:34:f6:fe:65:c1:c2:8d:38:b1:c7:4e:68:f0:45: 7b:17:84:2c:5b:8b:b8:73:ce:73:de:10:86:ba:64:a6:62:b0: 07:c6:fa:46:35:8c:25:20:61:a6:ee:25:b9:04:29:ba:52:55: 7f:39:31:d6:61:b8:14:dd:42:34:35:e3:ad:d6:af:8d:48:68: aa:35:67:e8:d4:03:a5:eb:e1:7f:a7:1f:d8:a6:27:a7:d4:1c: b6:92:6b:db:1b:57:28:5d:fc:dc:25:46:d3:f7:e9:8b:37:0a: 6c:bb:57:f6:ad:ec:d3:ae:52:57:b0:a1:7b:56:1a:84:e2:3d: 7b:ff:05:5e:28:72:b8:30:52:b6:86:8d:b6:28:42:4f:5d:57: 3d:67:88:ca:0d:ec:45:bb:8f:34:d0:21:79:fb:64:02:0c:c2: b8:0b:c2:8f:5b:09:14:ec:7b:69:32:8e:23:83:4a:b6:bb:91: 2a:c5:41:85:67:f8:dd:ca:ec:b1:5f:4e:3d:8b:2b:3a:0b:6d: 5e:59:28:1b:4a:0d:9f:52:ac:3f:a1:26:f5:41:3b:26:53:01: 2f:a4:04:2d:51:b7:37:2f:49:13:40:8b:94:36:e0:0d:9b:29: 8f:0a:e6:9c:36:32:e4:ee:be:8c:e2:2f:51:28:e3:e9:01:59: 87:de:d0:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwNzI3MDM1OTIwWhcNMjYwODAzMDM1OTIwWjAYMRYwFAYD VQQDEw02YTY2ZDc5OC05NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO2fCmoqT12mer8u7Cajmz34EAOSgItXmQIyBUZtXKJlcwuju82/uQGAFrJG Lt2OA5123yd0g4MmZ8VbwidiYUQp8TrtqvAzliLpnmPfX/1ifIgAO+QjiAx4v8xZ g779Wpd0AIdUqHO5TYfkISi1MI5mhHN3XWefiFYZAI3Cq5Dw9P0IOvlmbQpuHgob ormoEJt0i5it16nL5FNc2I59C3DGEiEXJlh33MKrubtX2r+4xN3Lcp9SUYcEYu1f 1Tm/Xt01B6yaBg/4dyR6xGAEQZoQfwmkBi8gPPwfnRaCUUyAaLsh4ulCrWvM5D5Z lzZhpVVW4P16x/9i38hLUzjHgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRjkTx2 fckD/ixwMMijbAz/4GSEMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq910ITT2/mXBwo04scdOaPBFexeELFuLuHPOc94QhrpkpmKwB8b6RjWMJSBh pu4luQQpulJVfzkx1mG4FN1CNDXjrdavjUhoqjVn6NQDpevhf6cf2KYnp9QctpJr 2xtXKF383CVG0/fpizcKbLtX9q3s065SV7Che1YahOI9e/8FXihyuDBStoaNtihC T11XPWeIyg3sRbuPNNAheftkAgzCuAvCj1sJFOx7aTKOI4NKtruRKsVBhWf43crs sV9OPYsrOgttXlkoG0oNn1KsP6Em9UE7JlMBL6QELVG3Ny9JE0CLlDbgDZspjwrm nDYy5O6+jOIvUSjj6QFZh97Qnw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:17:23 2026 by rpki-client