$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: PlIGvpXH9hhby8Kt9wKhvWdvGho6LHNOWGQtoOBJU2w= Subject key identifier: E4:D6:8B:8D:0C:A8:6B:80:14:23:DE:1D:0B:53:7B:74:E6:F6:CB:25 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 0224 Signing time: Thu 21 May 2026 02:51:39 +0000 Manifest this update: Thu 21 May 2026 02:51:38 +0000 Manifest next update: Thu 28 May 2026 02:51:38 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: 4IjmFGUX050F+QsqifAHO5Wws3Qc16Aaw861G3ZV9Po=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: gZLmgQL8Id/ZC97jwL0iGOj/66jYcGItOBO3dCFihUg=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: VGPzKMnPimSMI2CiaOjVgyPC7/IcbTH85rF5mJCg2Ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: May 21 02:51:38 2026 GMT Not After : May 28 02:51:38 2026 GMT Subject: CN=6a0e733b-688d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:7b:2e:22:bf:d4:e0:6c:4d:09:9f:61:ce: cb:dd:0c:5a:90:7a:0d:5a:03:6f:fa:78:ce:14:db: 97:4b:b6:4c:d5:ec:bb:ad:42:a5:8b:3c:99:6d:0e: 9c:55:b5:9d:2f:15:53:f8:13:0b:a0:05:62:96:b5: 9f:c5:41:4e:76:34:5f:49:9b:cc:8c:04:4c:f8:b4: 60:5d:ce:ce:25:50:1f:d7:fa:5a:d7:e8:75:6a:b5: 2b:20:8b:77:71:b7:13:07:90:35:cb:08:29:61:62: 17:ec:f7:35:25:86:b7:b6:69:94:71:07:65:49:02: aa:63:42:ec:76:bf:58:a9:b9:46:75:95:bf:6e:69: cc:2c:07:fc:86:a7:00:d4:c3:3e:46:0c:38:99:c8: 29:4e:fb:39:d1:22:39:38:36:ed:cf:01:67:a3:e2: 85:ab:1a:fc:7d:00:62:c8:fb:58:2d:9c:c5:98:6b: ed:02:39:30:cc:13:b4:44:7d:ca:f2:28:15:24:3d: d2:9d:fa:b1:58:ef:6a:7c:27:25:76:33:7d:cc:d2: 78:ac:88:9a:96:4a:65:b2:3d:cc:75:24:3e:56:46: 94:c7:4c:38:55:b4:5c:16:75:a5:f1:eb:bb:1d:3f: 8b:11:8b:c9:2f:7a:e4:47:e6:7c:35:87:f2:a4:38: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:8B:8D:0C:A8:6B:80:14:23:DE:1D:0B:53:7B:74:E6:F6:CB:25 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:ff:7f:5c:8f:34:63:6c:96:a0:e5:df:72:7c:13:99:5d: 78:9f:6a:a3:6d:30:71:bf:22:2d:21:ba:b8:cd:1c:67:5d:7d: d5:24:33:f8:e6:c6:c6:d8:fa:7e:96:92:c1:79:70:d6:43:56: d1:cc:3d:34:12:a4:84:4b:9c:34:06:3b:9f:96:6d:9d:b5:c7: 78:46:55:de:4f:3f:4c:68:0c:10:d6:fb:74:78:d3:e2:d6:60: 9b:ce:ba:e4:81:35:02:1e:b9:28:bc:f7:5f:98:48:03:84:89: 09:a2:60:39:20:0f:62:41:ad:47:ba:03:db:2b:3e:4e:71:bf: 8a:ce:7a:45:1c:b3:99:0d:ec:14:96:3a:fc:31:01:fb:8a:ff: a3:e2:c4:a0:fd:68:4a:37:e6:08:db:88:30:0b:ac:e7:fd:cb: ec:b1:b9:dd:55:d3:62:dc:c4:0d:83:40:00:a2:b6:ef:ed:68: 00:7e:4e:5b:4f:cf:a5:7c:e8:17:2b:58:a5:c2:be:27:0f:b2: 07:82:af:d7:dd:45:8c:a9:9f:7c:a2:0f:f0:50:46:19:4c:c0: 45:db:df:ec:fd:d8:ff:1f:e0:6d:aa:67:36:b5:44:db:5f:03: d9:9e:02:1a:d6:fd:3b:f1:5e:c4:0e:87:82:b5:91:18:9f:a2: f4:98:1b:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwNTIxMDI1MTM4WhcNMjYwNTI4MDI1MTM4WjAYMRYwFAYD VQQDEw02YTBlNzMzYi02ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbl7LiK/1OBsTQmfYc7L3QxakHoNWgNv+njOFNuXS7ZM1ey7rUKlizyZbQ6c VbWdLxVT+BMLoAVilrWfxUFOdjRfSZvMjARM+LRgXc7OJVAf1/pa1+h1arUrIIt3 cbcTB5A1ywgpYWIX7Pc1JYa3tmmUcQdlSQKqY0Lsdr9YqblGdZW/bmnMLAf8hqcA 1MM+Rgw4mcgpTvs50SI5ODbtzwFno+KFqxr8fQBiyPtYLZzFmGvtAjkwzBO0RH3K 8igVJD3SnfqxWO9qfCcldjN9zNJ4rIialkplsj3MdSQ+VkaUx0w4VbRcFnWl8eu7 HT+LEYvJL3rkR+Z8NYfypDjqbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTWi40M qGuAFCPeHQtTe3Tm9sslMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo1v/f1yPNGNslqDl33J8E5ldeJ9qo20wcb8iLSG6uM0cZ1191SQz+ObGxtj6 fpaSwXlw1kNW0cw9NBKkhEucNAY7n5ZtnbXHeEZV3k8/TGgMENb7dHjT4tZgm866 5IE1Ah65KLz3X5hIA4SJCaJgOSAPYkGtR7oD2ys+TnG/is56RRyzmQ3sFJY6/DEB +4r/o+LEoP1oSjfmCNuIMAus5/3L7LG53VXTYtzEDYNAAKK27+1oAH5OW0/PpXzo FytYpcK+Jw+yB4Kv191FjKmffKIP8FBGGUzARdvf7P3Y/x/gbapnNrVE218D2Z4C Gtb9O/FexA6HgrWRGJ+i9JgbbQ== -----END CERTIFICATE-----Generated at Thu May 21 16:32:03 2026 by rpki-client