$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: BdiPKDm79159DSKLDcDOhBQzxaRVKAfsyQADqoqVkyg= Subject key identifier: DC:3E:8E:1D:36:84:39:48:92:37:D5:B3:10:2B:40:24:66:F6:0A:24 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34CB Signing time: Sat 18 Oct 2025 14:57:37 +0000 Manifest this update: Sat 18 Oct 2025 14:57:36 +0000 Manifest next update: Sat 25 Oct 2025 14:57:36 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: 2nSsALCzVvcS94KX8p+6SDUVO3YYiMc2hn2kCjwHYZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Oct 18 14:57:36 2025 GMT Not After : Oct 25 14:57:36 2025 GMT Subject: CN=68f3aae1-1a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:0f:82:e2:21:6e:0c:2a:ca:bb:7f:90:7d: b9:95:98:cd:b0:86:35:40:7b:fb:17:1b:50:a9:a6: 8f:20:7d:4b:a7:2d:dc:ee:94:68:72:d2:f5:8f:b0: fa:10:90:92:b8:ec:77:fe:16:b8:74:cc:46:36:d7: 55:50:ce:10:80:8c:57:45:86:81:ee:16:fd:93:93: b8:7d:e3:e6:fd:f4:fc:59:d4:d1:c3:ab:e0:e6:cc: 02:b7:21:f9:18:fa:42:cd:ec:87:aa:46:93:a1:17: eb:51:2e:6c:d0:11:2d:4e:d2:8a:c2:95:03:93:75: ba:5f:cb:e3:9f:30:fb:4a:df:8d:1c:5d:dd:1d:e9: 36:66:b3:23:59:1f:ff:42:50:d5:2c:35:b7:b3:0b: 76:d6:94:88:5e:9e:57:4f:07:77:08:af:f3:6f:43: 9e:cf:f5:08:ac:87:fc:0b:74:9a:7d:a4:a2:44:df: b8:e8:db:49:e1:b0:5f:da:53:15:ce:f9:06:d2:d6: 7c:bf:1f:72:09:68:56:24:e6:d2:a8:b6:64:50:7d: 22:d3:3e:14:28:a8:7f:a5:71:42:7c:1c:7d:5f:6f: 52:c6:ef:48:8f:8f:53:5a:2b:72:c9:58:82:4f:02: 97:43:9f:ba:ce:db:53:f0:9d:4e:4d:17:b5:8b:a8: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3E:8E:1D:36:84:39:48:92:37:D5:B3:10:2B:40:24:66:F6:0A:24 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:d0:89:dd:fb:12:40:14:5f:65:b6:ea:1d:15:0f:a9:5f:22: f6:74:81:a1:c8:87:ec:39:a2:46:e4:d6:0a:ae:3d:d8:0d:2d: 74:16:cd:a3:7d:ba:de:91:02:d1:b6:ae:d6:c0:9c:a1:6e:9f: f8:93:63:bf:a1:a4:12:8b:96:57:c0:9a:8d:74:8f:2b:26:16: 7e:c5:0e:35:c1:ff:83:7d:19:4e:25:6c:14:de:33:ed:96:90: c7:9c:83:2a:2c:c7:f7:67:07:a5:e7:43:50:a2:9b:01:1b:68: 6d:5c:50:b8:c8:51:22:70:b0:62:84:da:4c:b4:43:a7:e1:46: df:af:52:8b:15:ae:8c:06:c2:48:36:2a:ed:6e:bc:ad:22:8a: 75:90:42:94:ea:0b:4f:db:be:b4:e3:8d:a6:ff:b2:49:31:f9: 11:de:11:8a:02:2b:94:15:25:5a:e7:72:d8:ba:6d:49:45:0f: 42:73:0e:39:c8:82:94:fb:fe:91:66:1b:59:67:b7:9d:97:e1: 2a:2d:b4:8a:54:7b:dc:6d:f3:53:5d:ae:4a:df:20:b3:2b:c2: 33:83:2c:40:53:e1:d1:ff:6c:29:67:e1:c4:08:71:b0:83:d9: b3:40:73:7c:e5:62:51:5b:e7:71:42:58:16:be:8c:59:96:33: d1:84:81:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUxMDE4MTQ1NzM2WhcNMjUxMDI1MTQ1NzM2WjAYMRYwFAYD VQQDEw02OGYzYWFlMS0xYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NYPguIhbgwqyrt/kH25lZjNsIY1QHv7FxtQqaaPIH1Lpy3c7pRoctL1j7D6 EJCSuOx3/ha4dMxGNtdVUM4QgIxXRYaB7hb9k5O4fePm/fT8WdTRw6vg5swCtyH5 GPpCzeyHqkaToRfrUS5s0BEtTtKKwpUDk3W6X8vjnzD7St+NHF3dHek2ZrMjWR// QlDVLDW3swt21pSIXp5XTwd3CK/zb0Oez/UIrIf8C3SafaSiRN+46NtJ4bBf2lMV zvkG0tZ8vx9yCWhWJObSqLZkUH0i0z4UKKh/pXFCfBx9X29Sxu9Ij49TWityyViC TwKXQ5+6zttT8J1OTRe1i6hOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw+jh02 hDlIkjfVsxArQCRm9gokMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDa0Ind+xJAFF9ltuodFQ+pXyL2dIGhyIfsOaJG5NYKrj3YDS10Fs2j fbrekQLRtq7WwJyhbp/4k2O/oaQSi5ZXwJqNdI8rJhZ+xQ41wf+DfRlOJWwU3jPt lpDHnIMqLMf3Zwel50NQopsBG2htXFC4yFEicLBihNpMtEOn4Ubfr1KLFa6MBsJI NirtbrytIop1kEKU6gtP2760442m/7JJMfkR3hGKAiuUFSVa53LYum1JRQ9Ccw45 yIKU+/6RZhtZZ7edl+EqLbSKVHvcbfNTXa5K3yCzK8IzgyxAU+HR/2wpZ+HECHGw g9mzQHN85WJRW+dxQlgWvoxZljPRhIFA -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:03 2025 by rpki-client