$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json) Hash identifier: VTuN5ML41QWd/wE3zBRAVxTt7el74lnjcgeNNz7e/NM= Subject key identifier: 1F:B9:DA:ED:38:B9:33:1B:05:57:9A:39:92:87:13:2D:52:26:87:FE Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft Manifest number: 025C Signing time: Sat 05 Sep 2026 02:08:18 +0000 Manifest this update: Sat 05 Sep 2026 02:08:17 +0000 Manifest next update: Sat 12 Sep 2026 02:08:17 +0000 Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: WqOGAwnylWSwoYizan1OmxKJocnkb+bGBuxJHOMaWkU=) 2: 596841CCA54D11F0BDA77C83C4F9AE02.roa (hash: Bwi7xlyf7sfwXmnEXmb5ZeQpkjWTJ7Jui2fMVOVFPX4=) 3: 31E63B1CA1C011F09810103AC4F9AE02.roa (hash: Gp0Y+oe7GdSnYg3smbU8hMB9bPBFkO3dCQ8rZKWS5+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Sep 5 02:08:17 2026 GMT Not After : Sep 12 02:08:17 2026 GMT Subject: CN=6a9b7992-594d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:1a:79:c5:87:6c:82:1a:23:e8:ef:24:e7: b5:96:68:c9:27:70:b3:25:82:de:4c:33:3a:c8:e3: 61:df:b1:05:75:69:b2:03:da:78:d3:ab:82:5d:fd: da:bb:68:e9:c6:cf:cc:dc:9b:f8:bc:ad:7f:54:65: 86:51:3a:53:25:40:6f:6f:ee:c4:64:50:a2:87:fc: f1:7b:e2:4f:95:93:4d:c9:7a:90:a0:ce:ba:36:ec: 5e:c1:53:07:8b:4c:0f:0f:bb:85:3c:9d:bf:32:fe: bc:51:d6:83:6f:f0:8e:b0:c1:5d:0e:fe:b7:f5:ac: 0e:14:50:a8:c6:9a:71:d4:3b:ae:78:cd:0c:95:4d: 23:93:03:f8:b8:e6:79:91:e8:40:ba:38:7b:16:18: 11:64:c5:c3:a0:ca:ed:dc:a5:03:16:10:20:6a:8c: 57:49:44:79:f6:4a:e5:26:c6:43:54:6b:88:7b:af: 80:6c:45:a8:ab:8a:af:f6:61:3c:51:77:70:16:2a: 30:cf:5f:23:a5:dc:fa:4f:bf:03:0f:7c:3e:dc:a8: 5d:79:ce:02:1b:ca:20:56:08:f1:64:c6:c6:b5:03: a3:b9:91:5c:24:12:9a:b5:b3:99:13:e8:e6:61:b4: 3e:2f:09:45:cf:d1:0b:17:0a:ee:a4:2e:e9:2e:6c: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:DA:ED:38:B9:33:1B:05:57:9A:39:92:87:13:2D:52:26:87:FE X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:59:d3:62:d0:ad:d7:27:6f:cb:0e:4f:b0:46:a0:c7:9e:58: ae:7b:01:6c:2d:b7:a6:90:4f:b8:48:33:15:64:93:f3:fa:10: c2:07:44:43:3d:f6:0b:5b:46:47:62:a4:bd:50:6e:3e:f5:29: 23:e3:eb:76:c3:a2:32:11:cc:3d:6f:03:ce:86:77:f7:34:d1: 01:fa:7f:57:2d:95:0c:87:86:0e:00:5b:89:88:28:e0:3d:cc: a4:a1:fa:c1:06:72:dd:26:4e:a2:dc:9b:22:0e:d7:a5:e5:a5: 73:60:6a:93:db:7d:1f:e3:8a:89:60:3f:9d:7e:13:6b:da:5b: 3f:39:ca:55:7c:8c:a7:73:d5:ba:81:ec:5f:ca:6d:1c:b9:d2: 94:d2:15:78:ae:c0:04:b6:8f:89:f0:b3:5e:cf:f2:95:ad:7d: a0:ba:ff:16:06:01:f9:e3:7b:2e:a2:9d:2f:3a:ec:3b:0d:4b: 34:a5:f2:fd:b1:01:69:b4:b2:97:94:30:d8:e5:e5:ac:e4:2f: 33:60:1a:9c:32:77:e0:a2:ac:35:7e:e0:af:5d:11:7e:60:f0: 68:fb:c0:28:d8:d1:4d:06:76:7d:fa:45:13:7c:4a:8a:a7:97: 0c:73:ae:8a:d3:7c:ee:bd:bb:3c:35:ab:49:3f:90:c5:8f:84: 97:54:b0:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjYwOTA1MDIwODE3WhcNMjYwOTEyMDIwODE3WjAYMRYwFAYD VQQDEw02YTliNzk5Mi01OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4EaecWHbIIaI+jvJOe1lmjJJ3CzJYLeTDM6yONh37EFdWmyA9p406uCXf3a u2jpxs/M3Jv4vK1/VGWGUTpTJUBvb+7EZFCih/zxe+JPlZNNyXqQoM66NuxewVMH i0wPD7uFPJ2/Mv68UdaDb/COsMFdDv639awOFFCoxppx1DuueM0MlU0jkwP4uOZ5 kehAujh7FhgRZMXDoMrt3KUDFhAgaoxXSUR59krlJsZDVGuIe6+AbEWoq4qv9mE8 UXdwFiowz18jpdz6T78DD3w+3Khdec4CG8ogVgjxZMbGtQOjuZFcJBKatbOZE+jm YbQ+LwlFz9ELFwrupC7pLmxE6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+52u04 uTMbBVeaOZKHEy1SJof+MB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNY UlI3eks3ZWhLLTF4MHNJLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACVnTYtCt1ydvyw5PsEagx55YrnsBbC23ppBPuEgzFWST8/oQwgdEQz32C1tG R2KkvVBuPvUpI+PrdsOiMhHMPW8DzoZ39zTRAfp/Vy2VDIeGDgBbiYgo4D3MpKH6 wQZy3SZOotybIg7XpeWlc2Bqk9t9H+OKiWA/nX4Ta9pbPznKVXyMp3PVuoHsX8pt HLnSlNIVeK7ABLaPifCzXs/yla19oLr/FgYB+eN7LqKdLzrsOw1LNKXy/bEBabSy l5Qw2OXlrOQvM2AanDJ34KKsNX7gr10RfmDwaPvAKNjRTQZ2ffpFE3xKiqeXDHOu itN87r27PDWrST+QxY+El1Swgw== -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:25 2026 by rpki-client