$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: LOaB/OUuE7O3fIpprCqXkNDN1pEv9UVzmHtv+6LUmkc= Subject key identifier: CF:EA:F0:8D:8E:04:16:15:4B:56:68:1D:9E:75:D8:DF:1B:B7:7E:50 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34D4 Signing time: Tue 04 Nov 2025 14:55:02 +0000 Manifest this update: Tue 04 Nov 2025 14:55:01 +0000 Manifest next update: Tue 11 Nov 2025 14:55:01 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: 4XzvrJjsZD4EGkB8mghmCeg8VVQovWvI++vYvEt5F3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Nov 4 14:55:01 2025 GMT Not After : Nov 11 14:55:01 2025 GMT Subject: CN=690a13c6-98c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:b0:99:b3:70:f0:d7:73:4f:71:ad:6e:5b: 13:4d:7a:a4:f6:dd:7e:c5:50:c0:c8:2b:bd:bd:0e: a4:0e:f7:9a:75:ee:c5:38:5f:70:dc:5f:9f:7e:ac: 9e:b0:51:f0:4a:c2:d1:bf:8a:75:57:ae:7e:00:44: 00:f8:dd:d2:d9:45:7e:4e:f7:de:b0:45:fa:36:d9: 81:42:f5:88:8e:4b:b3:ae:e3:e8:06:9d:6a:3e:9b: f2:35:5a:75:71:5e:c8:42:8e:97:ff:9e:63:51:ee: 2d:b5:ba:de:93:c2:94:4b:7e:0d:b1:c2:df:07:8b: 26:55:7b:25:9d:00:ee:6a:8c:f1:10:50:ed:70:36: c9:a6:1e:2d:ce:7b:0f:f1:0a:8f:b3:0c:2b:dc:73: a1:98:8c:78:32:7a:89:eb:31:2a:45:94:34:e0:b5: 8f:d6:0e:88:8f:82:9d:ad:5e:b2:06:9f:be:1b:36: 71:7c:50:93:b8:39:19:a8:eb:04:7c:a5:1c:f2:62: 28:10:18:5f:8c:ab:c2:9d:a8:96:cd:71:67:40:b1: 78:04:da:5b:50:0f:50:a8:e1:0f:96:24:90:ce:69: f8:f6:72:c0:f5:db:3b:5f:b2:ab:bc:0f:01:58:e5: 6a:5a:2d:18:83:b5:4e:67:b7:c9:0e:18:c2:31:8a: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EA:F0:8D:8E:04:16:15:4B:56:68:1D:9E:75:D8:DF:1B:B7:7E:50 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:00:4d:40:14:33:51:e1:ee:bf:a9:f8:c3:54:72:89:2b: 9c:bd:09:b6:07:c7:b8:fb:5e:1d:16:b8:ea:2d:03:44:2f:d5: a1:62:7e:76:60:62:9b:42:2b:7f:61:65:02:c8:6a:d9:61:29: 1c:a9:36:99:17:69:0b:0a:7c:51:44:a2:51:3a:b1:b4:56:1f: 6a:72:68:ac:de:17:af:19:7c:a9:c8:6b:0a:75:d7:71:9d:e3: cf:94:af:b2:b1:f9:48:66:07:63:04:8c:d4:c4:2e:5f:d4:1d: 27:0c:04:87:8a:63:7e:32:30:97:c4:a3:2e:98:a4:51:a1:15: ad:6e:70:25:6c:a0:8b:2c:89:06:c2:82:2a:1b:fd:67:74:3e: 8f:83:54:41:ea:3f:5e:8d:74:25:02:50:7d:a1:4d:35:49:11: 75:db:fb:ed:89:d4:67:42:08:bb:2d:42:70:50:9f:74:ec:02: 53:fc:74:b9:d7:68:ab:45:a6:c6:01:c2:4a:6d:8a:91:fd:ce: e9:40:91:5a:ea:2c:cd:43:6e:76:f8:df:a9:54:e4:9e:dc:ac: 75:06:8c:1b:49:f8:64:12:98:8f:97:12:ff:d0:ec:da:10:82: c0:7e:86:02:4d:3e:89:45:c4:6e:f8:bc:b0:b8:1e:d0:eb:cc: 35:a1:09:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUxMTA0MTQ1NTAxWhcNMjUxMTExMTQ1NTAxWjAYMRYwFAYD VQQDEw02OTBhMTNjNi05OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiOwmbNw8NdzT3GtblsTTXqk9t1+xVDAyCu9vQ6kDveade7FOF9w3F+ffqye sFHwSsLRv4p1V65+AEQA+N3S2UV+TvfesEX6NtmBQvWIjkuzruPoBp1qPpvyNVp1 cV7IQo6X/55jUe4ttbrek8KUS34NscLfB4smVXslnQDuaozxEFDtcDbJph4tznsP 8QqPswwr3HOhmIx4MnqJ6zEqRZQ04LWP1g6Ij4KdrV6yBp++GzZxfFCTuDkZqOsE fKUc8mIoEBhfjKvCnaiWzXFnQLF4BNpbUA9QqOEPliSQzmn49nLA9ds7X7KrvA8B WOVqWi0Yg7VOZ7fJDhjCMYqBYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/q8I2O BBYVS1ZoHZ512N8bt35QMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+GABNQBQzUeHuv6n4w1RyiSucvQm2B8e4+14dFrjqLQNEL9WhYn52 YGKbQit/YWUCyGrZYSkcqTaZF2kLCnxRRKJROrG0Vh9qcmis3hevGXypyGsKdddx nePPlK+ysflIZgdjBIzUxC5f1B0nDASHimN+MjCXxKMumKRRoRWtbnAlbKCLLIkG woIqG/1ndD6Pg1RB6j9ejXQlAlB9oU01SRF12/vtidRnQgi7LUJwUJ907AJT/HS5 12irRabGAcJKbYqR/c7pQJFa6izNQ252+N+pVOSe3Kx1BowbSfhkEpiPlxL/0Oza EILAfoYCTT6JRcRu+LywuB7Q68w1oQnV -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:55 2025 by rpki-client