$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: vH+lFntXw7ejZNWpRmZ4GBTwMxD485eIE7JxQHfzawQ= Subject key identifier: 5C:41:AF:16:A9:01:CB:EC:0A:87:FA:31:D2:E3:AC:6B:CC:DA:67:CD Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0279 Signing time: Sun 01 Nov 2026 03:01:29 +0000 Manifest this update: Sun 01 Nov 2026 03:01:29 +0000 Manifest next update: Sun 08 Nov 2026 03:01:29 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: 6fzJt01AkdKjjPSSh8wSsOGcaNwBbD1TaAd4R87cEBA=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: Bwi7xlyf7sfwXmnEXmb5ZeQpkjWTJ7Jui2fMVOVFPX4=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: Gp0Y+oe7GdSnYg3smbU8hMB9bPBFkO3dCQ8rZKWS5+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Nov 1 03:01:29 2026 GMT Not After : Nov 8 03:01:29 2026 GMT Subject: CN=6ae6ab89-76d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:b7:f1:50:74:eb:4a:cc:a0:b7:55:36:42: 24:62:2a:8c:e5:ec:25:d5:b7:46:66:c5:32:4a:27: 9e:0f:47:a1:61:9b:69:d5:5b:50:5f:5f:5c:38:c6: 85:10:86:42:61:1a:aa:3c:01:65:b6:96:1d:9b:42: 38:22:94:11:fc:96:e7:93:61:c5:a4:fe:92:9c:ec: 2f:7e:58:43:40:e4:02:25:be:ac:12:f0:11:49:d4: 1c:1a:45:12:e2:9c:c4:34:ca:de:ac:e3:15:6a:53: fb:b8:84:7a:8e:07:b8:ca:3b:43:fe:e7:f0:1a:f2: ab:a5:f5:e9:21:79:8b:43:d7:02:5c:e5:57:d0:a2: de:69:87:87:98:54:6d:3a:b2:8f:d5:0f:60:b0:e2: 23:30:a3:07:c3:b6:3d:74:fb:f6:81:a1:5c:c4:47: 92:28:fd:56:34:89:82:d4:80:8a:3f:be:08:05:d9: 8f:f7:f9:45:c5:22:a1:e5:4f:75:88:58:c8:7a:f5: 03:25:97:e2:f9:77:3e:7e:d6:f0:6f:9c:c4:3b:42: 5e:33:af:10:1a:7c:2b:a2:3e:fb:39:2b:a6:d3:06: cd:5c:db:88:b0:15:42:f9:18:a7:b6:a7:a3:23:8c: 02:78:52:26:63:01:58:ea:16:7a:41:ab:73:b0:b6: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:AF:16:A9:01:CB:EC:0A:87:FA:31:D2:E3:AC:6B:CC:DA:67:CD X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8b:e4:8f:8c:d8:b8:10:e2:59:11:57:7e:df:9b:34:46:13: 94:05:6e:d5:52:08:e2:f0:bc:d8:80:99:06:01:2a:f1:29:51: 5b:17:47:2e:47:4f:fe:58:e6:31:69:c3:40:c3:37:e1:bc:84: 8e:75:77:75:e3:27:d2:a2:14:7b:90:af:f3:ef:48:2b:ed:6a: 5f:c7:6e:ac:6f:d0:40:55:fe:29:0a:10:21:70:5e:10:01:13: 63:fc:51:e8:5f:bd:40:30:74:31:91:52:b1:44:6d:4d:85:07: 97:0e:d5:1a:fd:dc:86:52:45:45:5f:bd:6a:1e:3c:72:cf:32: b2:a5:3a:a4:18:5b:02:d0:a7:f3:3d:6d:bd:9c:7e:47:49:6e: bc:b3:ad:cb:b9:4f:d5:52:49:5d:c2:ca:3b:53:f6:13:f8:42: 1d:d9:1b:21:77:f2:fc:45:0e:fd:19:36:1e:d1:28:f9:4b:d4: 3f:41:54:a1:7a:21:05:da:c4:63:dc:e9:75:b9:f4:d9:7b:ec: 2f:75:0d:5a:5e:2b:32:ef:26:ac:54:e5:8c:3e:ed:d5:ad:3d: 01:d0:86:36:c2:b3:a8:c3:19:19:c6:0f:95:4f:47:e3:91:f2: b9:93:38:aa:40:bd:0f:b1:d4:bb:5d:42:85:0a:c6:6e:0b:e5: 40:88:fa:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYxMTAxMDMwMTI5WhcNMjYxMTA4MDMwMTI5WjAYMRYwFAYD VQQDEw02YWU2YWI4OS03NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ve38VB060rMoLdVNkIkYiqM5ewl1bdGZsUySieeD0ehYZtp1VtQX19cOMaF EIZCYRqqPAFltpYdm0I4IpQR/Jbnk2HFpP6SnOwvflhDQOQCJb6sEvARSdQcGkUS 4pzENMrerOMValP7uIR6jge4yjtD/ufwGvKrpfXpIXmLQ9cCXOVX0KLeaYeHmFRt OrKP1Q9gsOIjMKMHw7Y9dPv2gaFcxEeSKP1WNImC1ICKP74IBdmP9/lFxSKh5U91 iFjIevUDJZfi+Xc+ftbwb5zEO0JeM68QGnwroj77OSum0wbNXNuIsBVC+Rintqej I4wCeFImYwFY6hZ6QatzsLa4zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxBrxap AcvsCof6MdLjrGvM2mfNMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKovkj4zYuBDiWRFXft+bNEYTlAVu1VII4vC82ICZBgEq8SlRWxdHLkdP/ljm MWnDQMM34byEjnV3deMn0qIUe5Cv8+9IK+1qX8durG/QQFX+KQoQIXBeEAETY/xR 6F+9QDB0MZFSsURtTYUHlw7VGv3chlJFRV+9ah48cs8ysqU6pBhbAtCn8z1tvZx+ R0luvLOty7lP1VJJXcLKO1P2E/hCHdkbIXfy/EUO/Rk2HtEo+UvUP0FUoXohBdrE Y9zpdbn02XvsL3UNWl4rMu8mrFTljD7t1a09AdCGNsKzqMMZGcYPlU9H45HyuZM4 qkC9D7HUu11ChQrGbgvlQIj6Pg== -----END CERTIFICATE-----Generated at Sun Nov 1 16:25:44 2026 by rpki-client