$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: PVIrOFxqQo1xvc7hVPq91QkB7AGqkb0bTsiP2i+tnk0= Subject key identifier: A6:71:9F:4D:83:EA:A1:89:3B:DE:D6:7C:EF:57:DB:13:0E:B1:14:5E Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34A6 Signing time: Wed 06 Aug 2025 14:53:19 +0000 Manifest this update: Wed 06 Aug 2025 14:53:18 +0000 Manifest next update: Wed 13 Aug 2025 14:53:18 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: cJWzlHn0e/+mgDxtx4xzMX9l7S7lMBDm3/WkceeSy2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Aug 6 14:53:18 2025 GMT Not After : Aug 13 14:53:18 2025 GMT Subject: CN=68936c5e-2254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:c6:35:ec:af:2b:ec:ac:ad:6a:6b:0e:a1: 29:33:bd:0c:89:a1:49:39:bb:1f:46:bf:45:9e:4c: 91:03:9c:96:44:a2:25:4c:cf:a3:67:f1:68:b0:ff: ce:65:6c:cc:46:00:1c:2b:37:d6:d3:77:ab:0f:ad: a5:c4:e1:d7:6b:a6:42:bb:24:d9:bc:0c:8a:91:f2: 01:f0:90:7f:66:12:d5:25:6b:51:0f:fb:37:39:d3: af:64:5f:d6:3c:dc:b3:5b:ce:cf:14:16:97:c6:ae: a6:dd:9e:87:40:b8:ac:c5:e4:db:b7:2c:3f:49:17: 4a:0f:e9:c8:9b:19:e2:f2:28:28:77:9f:11:1f:a9: 76:e3:d6:1e:99:26:76:2e:e0:4d:bc:34:17:5f:aa: a8:d3:e8:af:b9:57:49:e0:3b:38:c4:ed:64:68:f4: 33:1d:0c:ce:2c:35:bc:b4:a1:ce:8a:89:5e:48:a5: 5b:ce:23:ed:8b:0a:c5:1b:12:08:b8:96:04:e6:5a: 0a:93:6a:4b:de:73:23:9f:d5:37:7d:ae:3b:42:78: d2:6f:4a:04:e0:8b:3e:c4:ee:71:ed:fc:21:d9:ca: 3c:08:09:cd:77:73:e0:45:ed:f6:38:74:ff:8e:15: 14:9d:57:e4:36:78:cb:88:61:e5:d5:f7:1c:ff:db: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:9F:4D:83:EA:A1:89:3B:DE:D6:7C:EF:57:DB:13:0E:B1:14:5E X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:1b:16:0c:f3:12:40:f4:1c:42:ec:0a:cb:f3:d8:50:c6: 1b:0c:88:43:a6:2c:f2:6d:6d:c9:a7:10:5c:e8:ee:bd:52:a5: 88:51:dd:13:9d:ca:33:3d:08:d2:fc:cb:45:90:05:13:95:d2: 09:0d:8f:75:8f:2f:14:34:95:8e:e8:6e:7f:5c:2c:88:d9:e4: 19:4a:9b:dd:63:65:fc:39:97:43:78:ad:f9:fd:63:fb:07:52: 94:2d:b1:85:f6:19:e2:a6:1a:ce:2e:13:62:23:4f:90:41:85: 8e:0a:44:f1:df:44:e3:30:15:2f:02:15:09:1c:52:cc:d3:e5: 2a:37:49:a3:cc:df:d8:45:e6:df:b9:ab:7f:01:4c:29:c8:44: f5:8b:92:c7:f7:c5:c7:f1:07:a2:93:f1:da:38:4e:13:58:92: f6:35:72:0b:67:a2:36:9a:bc:39:be:92:d8:ad:05:ca:3f:07: 55:e2:03:37:65:22:43:2f:31:2d:b1:c4:3d:e7:5f:1c:a0:84: eb:cb:7b:95:79:47:90:1e:24:fb:1d:48:34:cf:f1:ad:d3:bd: f2:8e:4c:b5:d7:02:ac:aa:84:2b:62:9d:25:48:5c:15:d2:c8: ba:68:44:5d:47:b2:4e:b9:dd:50:20:c9:ab:1c:ee:4b:17:3c: 44:c6:25:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwODA2MTQ1MzE4WhcNMjUwODEzMTQ1MzE4WjAYMRYwFAYD VQQDEw02ODkzNmM1ZS0yMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiDGNeyvK+ysrWprDqEpM70MiaFJObsfRr9FnkyRA5yWRKIlTM+jZ/FosP/O ZWzMRgAcKzfW03erD62lxOHXa6ZCuyTZvAyKkfIB8JB/ZhLVJWtRD/s3OdOvZF/W PNyzW87PFBaXxq6m3Z6HQLisxeTbtyw/SRdKD+nImxni8igod58RH6l249YemSZ2 LuBNvDQXX6qo0+ivuVdJ4Ds4xO1kaPQzHQzOLDW8tKHOioleSKVbziPtiwrFGxII uJYE5loKk2pL3nMjn9U3fa47QnjSb0oE4Is+xO5x7fwh2co8CAnNd3PgRe32OHT/ jhUUnVfkNnjLiGHl1fcc/9v4xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZxn02D 6qGJO97WfO9X2xMOsRReMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNFxsWDPMSQPQcQuwKy/PYUMYbDIhDpizybW3JpxBc6O69UqWIUd0T ncozPQjS/MtFkAUTldIJDY91jy8UNJWO6G5/XCyI2eQZSpvdY2X8OZdDeK35/WP7 B1KULbGF9hniphrOLhNiI0+QQYWOCkTx30TjMBUvAhUJHFLM0+UqN0mjzN/YRebf uat/AUwpyET1i5LH98XH8Qeik/HaOE4TWJL2NXILZ6I2mrw5vpLYrQXKPwdV4gM3 ZSJDLzEtscQ9518coITry3uVeUeQHiT7HUg0z/Gt073yjky11wKsqoQrYp0lSFwV 0si6aERdR7JOud1QIMmrHO5LFzxExiWv -----END CERTIFICATE-----Generated at Fri Aug 8 12:53:48 2025 by rpki-client