$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: MpuDTdK9PiAFU7K63VVr0NtFTjyee11YRlOuiGidQqk= Subject key identifier: 5E:80:47:5F:E2:1C:59:BE:DB:A7:E4:A0:F7:A6:93:31:83:D1:A1:1C Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 14:50:50 +0000 Manifest this update: Sat 14 Jun 2025 14:50:49 +0000 Manifest next update: Sat 21 Jun 2025 14:50:49 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: VVvJksUWh4guCbHQit9F8Rxxr9hMos8KAPrHP8cQR8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Jun 14 14:50:49 2025 GMT Not After : Jun 21 14:50:49 2025 GMT Subject: CN=684d8c4a-86a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:76:49:d3:4c:c0:dd:ba:8b:af:d8:95:76: 8f:fa:65:d1:12:7e:1a:25:00:38:a1:a5:98:0b:63: b6:21:b9:4a:7a:6e:c7:80:fe:c5:7d:73:eb:14:12: ba:15:9f:00:f3:0f:07:9a:35:7e:6f:86:3d:99:54: e9:28:c4:e8:2a:d4:39:ba:c2:41:23:68:c6:a3:4d: 3e:32:ac:b2:6b:2e:ed:11:ef:19:c3:38:50:5b:b5: 16:55:e2:7d:67:a9:42:b7:e4:cf:e8:1f:bf:24:9c: a4:1e:c6:fb:3d:ca:a4:19:32:c5:ea:75:0c:ba:61: 2f:27:f7:06:e8:42:4d:7d:51:e3:96:93:93:4e:75: cc:6f:29:b6:40:e1:44:d7:2c:b2:52:a8:85:29:4e: 77:e6:fe:f7:c7:21:13:53:dd:ad:3d:aa:9c:2a:da: 04:16:78:ef:ff:fb:84:00:0f:dc:87:e1:a6:4d:97: 67:00:36:19:ca:39:58:fc:81:65:8c:26:b4:e8:54: 41:54:81:6c:44:d1:1b:f9:b8:fc:cd:a0:90:d1:04: ac:56:09:70:b1:0c:85:95:a2:7b:71:e3:93:3d:aa: 08:da:ac:da:9b:ce:e1:13:83:f2:d3:92:62:0d:8e: 8d:4f:f7:30:c2:8e:d2:b1:3e:fa:83:16:b3:be:45: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:80:47:5F:E2:1C:59:BE:DB:A7:E4:A0:F7:A6:93:31:83:D1:A1:1C X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3b:bb:93:7b:e1:e7:85:1b:d6:30:b1:c9:76:d8:ab:94:81: 5e:4b:06:6c:e4:88:30:43:65:27:5d:29:a1:99:e6:4c:eb:7d: 05:17:8a:2f:45:0c:23:b7:ba:a2:ec:91:44:2a:e5:e6:de:73: 16:b2:a1:70:e8:e7:f8:8a:ad:11:72:1d:ab:55:74:d6:7b:a9: 34:1a:a0:a5:b8:4d:a1:b9:85:0b:c9:59:45:e7:b7:c6:c8:29: 91:db:f3:de:a8:2d:de:b4:3c:63:89:f0:81:c8:5a:d9:db:30: f7:f8:10:ff:b0:8a:b9:86:21:42:d6:9c:b1:1f:77:49:80:22: 26:d4:81:2d:a1:df:a1:fa:4a:75:30:31:a0:c8:67:4f:10:80: 79:1d:ee:e8:7d:fd:c4:2c:6a:0b:d7:fd:7a:ac:e0:69:32:18: b7:0d:5b:8c:b0:fe:eb:24:1c:3e:99:e7:0d:dc:a9:20:ad:89: a6:9b:d0:e7:ac:f9:ac:92:04:e1:1c:a5:9b:66:bf:40:9d:fc: 8c:da:a5:39:d2:16:1c:10:8e:e6:16:10:9b:66:6a:7f:ed:d3: 84:ab:dd:15:52:44:72:b1:48:01:e1:81:1e:31:2e:17:88:e4: 9c:b0:4c:1f:82:98:da:65:38:43:ab:2a:c5:50:a6:8d:38:d2: b5:0b:28:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwNjE0MTQ1MDQ5WhcNMjUwNjIxMTQ1MDQ5WjAYMRYwFAYD VQQDEw02ODRkOGM0YS04NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMZ2SdNMwN26i6/YlXaP+mXREn4aJQA4oaWYC2O2IblKem7HgP7FfXPrFBK6 FZ8A8w8HmjV+b4Y9mVTpKMToKtQ5usJBI2jGo00+Mqyyay7tEe8ZwzhQW7UWVeJ9 Z6lCt+TP6B+/JJykHsb7PcqkGTLF6nUMumEvJ/cG6EJNfVHjlpOTTnXMbym2QOFE 1yyyUqiFKU535v73xyETU92tPaqcKtoEFnjv//uEAA/ch+GmTZdnADYZyjlY/IFl jCa06FRBVIFsRNEb+bj8zaCQ0QSsVglwsQyFlaJ7ceOTPaoI2qzam87hE4Py05Ji DY6NT/cwwo7SsT76gxazvkVUlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6AR1/i HFm+26fkoPemkzGD0aEcMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbO7uTe+HnhRvWMLHJdtirlIFeSwZs5IgwQ2UnXSmhmeZM630FF4ov RQwjt7qi7JFEKuXm3nMWsqFw6Of4iq0Rch2rVXTWe6k0GqCluE2huYULyVlF57fG yCmR2/PeqC3etDxjifCByFrZ2zD3+BD/sIq5hiFC1pyxH3dJgCIm1IEtod+h+kp1 MDGgyGdPEIB5He7off3ELGoL1/16rOBpMhi3DVuMsP7rJBw+mecN3KkgrYmmm9Dn rPmskgThHKWbZr9AnfyM2qU50hYcEI7mFhCbZmp/7dOEq90VUkRysUgB4YEeMS4X iOScsEwfgpjaZThDqyrFUKaNONK1Cygh -----END CERTIFICATE-----Generated at Sun Jun 15 07:02:59 2025 by rpki-client