$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: VpYFvYiK+ZLBYw1knjN+MF4eAwCz34ChKgnFEX5SX50= Subject key identifier: 35:91:F6:E8:26:7F:F3:41:A6:41:39:CA:A1:9A:E4:40:37:B7:B0:A9 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 3471 Signing time: Sat 26 Apr 2025 14:51:23 +0000 Manifest this update: Sat 26 Apr 2025 14:51:23 +0000 Manifest next update: Sat 03 May 2025 14:51:23 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: tf9rkoPKKRg+PjF3+D0lqdrFKetpOwYQPupx1krJR6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Apr 26 14:51:23 2025 GMT Not After : May 3 14:51:23 2025 GMT Subject: CN=680cf2eb-9139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:b8:a2:ce:b0:a7:d4:24:8b:3f:18:04:f8: a6:42:ba:e9:60:89:b7:37:a7:0e:21:0a:ff:83:cc: bc:27:f5:66:1d:13:f2:29:2b:a8:ff:c7:9b:bb:75: b9:01:83:40:f7:c6:9c:4f:62:3c:38:8f:7e:d3:14: 88:0b:74:ed:3d:a5:06:fa:cb:85:68:89:26:dd:87: 32:87:4a:d1:6a:13:68:89:4e:80:51:ff:f2:aa:49: 0e:77:1d:9b:d0:0b:6c:4e:41:32:0c:7d:cc:10:4e: 92:d2:f8:90:28:45:21:ea:51:b8:9e:a8:46:3d:81: aa:20:06:b9:a3:06:0d:98:22:6c:95:a0:7d:19:f0: 89:3e:ac:51:23:1d:79:94:fe:d5:d6:5a:db:01:b5: 89:5d:b8:74:5e:64:c2:94:a7:8f:b1:3e:d7:34:13: 9c:aa:58:3c:8b:7d:36:63:11:26:b4:4a:e4:c7:8e: f0:9f:c2:bd:0e:f8:09:18:9c:fe:91:96:f2:2e:35: 8f:58:e6:e3:bc:8a:3f:ce:b0:7f:a6:75:34:a0:9a: 66:9d:67:ab:22:b9:40:f5:b2:3b:51:ce:e0:c7:a4: 56:7f:72:37:e6:64:44:f5:8e:9c:8c:a6:0a:ed:a5: 1d:3a:0a:bc:dc:0e:1f:1e:3d:c1:57:ee:5a:62:35: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:91:F6:E8:26:7F:F3:41:A6:41:39:CA:A1:9A:E4:40:37:B7:B0:A9 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f4:f0:f6:39:0a:0f:cc:d3:9b:87:ab:c1:c6:bf:bb:03:9e: 0c:4c:83:76:75:4b:85:0a:b4:2d:c1:a3:2f:4d:14:6a:c4:2e: 72:91:a2:e9:1d:a9:dd:b4:68:48:32:21:0b:64:38:4a:98:65: 91:17:66:0a:87:e4:5c:a4:44:b9:8a:a1:60:4a:a5:c1:ac:a0: c9:16:c6:e0:4d:08:75:6f:5c:0f:39:d2:77:16:c2:b9:bd:93: 01:ef:db:5f:23:bf:bc:08:9e:3e:83:32:42:ed:2f:37:d6:4c: e0:e2:fa:ac:0b:ab:dd:12:b6:38:e3:d0:71:fa:49:e5:03:b1: 38:77:62:53:87:cd:8b:a1:85:2e:e9:9a:34:de:ff:c4:11:79: e1:d9:e2:8e:0a:44:2e:37:11:bb:c4:a7:1c:8b:fe:55:e1:09: 7c:9e:66:bb:be:3e:4d:fd:eb:f6:76:87:65:39:b8:68:30:54: 28:87:26:39:ab:bf:7d:3c:f0:53:f8:a4:0f:ee:3d:00:3c:31: bc:9d:8f:7a:b1:a9:c0:54:60:ac:e5:f2:89:2c:ce:18:79:a8: 1c:71:ce:cf:f3:2b:2d:45:f5:1b:f8:77:60:58:79:35:c3:4c: 2f:79:a4:6c:c3:96:d9:d1:a5:ef:f7:66:29:d6:fb:57:68:29: 79:c3:28:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwNDI2MTQ1MTIzWhcNMjUwNTAzMTQ1MTIzWjAYMRYwFAYD VQQDEw02ODBjZjJlYi05MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/O4os6wp9Qkiz8YBPimQrrpYIm3N6cOIQr/g8y8J/VmHRPyKSuo/8ebu3W5 AYNA98acT2I8OI9+0xSIC3TtPaUG+suFaIkm3Ycyh0rRahNoiU6AUf/yqkkOdx2b 0AtsTkEyDH3MEE6S0viQKEUh6lG4nqhGPYGqIAa5owYNmCJslaB9GfCJPqxRIx15 lP7V1lrbAbWJXbh0XmTClKePsT7XNBOcqlg8i302YxEmtErkx47wn8K9DvgJGJz+ kZbyLjWPWObjvIo/zrB/pnU0oJpmnWerIrlA9bI7Uc7gx6RWf3I35mRE9Y6cjKYK 7aUdOgq83A4fHj3BV+5aYjWfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWR9ugm f/NBpkE5yqGa5EA3t7CpMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9PD2OQoPzNObh6vBxr+7A54MTIN2dUuFCrQtwaMvTRRqxC5ykaLp HandtGhIMiELZDhKmGWRF2YKh+RcpES5iqFgSqXBrKDJFsbgTQh1b1wPOdJ3FsK5 vZMB79tfI7+8CJ4+gzJC7S831kzg4vqsC6vdErY449Bx+knlA7E4d2JTh82LoYUu 6Zo03v/EEXnh2eKOCkQuNxG7xKcci/5V4Ql8nma7vj5N/ev2dodlObhoMFQohyY5 q799PPBT+KQP7j0APDG8nY96sanAVGCs5fKJLM4Yeagccc7P8ystRfUb+HdgWHk1 w0wveaRsw5bZ0aXv92Yp1vtXaCl5wyhn -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:33 2025 by rpki-client