$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: OHE/u9kUTtOWc8omQyhepNwFkfQ2Cmu7GZF6oSCQNrc= Subject key identifier: 8C:C7:19:F7:F1:BB:B8:91:77:60:C1:E9:86:E0:F8:40:8D:D1:E1:EA Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34AE Signing time: Fri 22 Aug 2025 14:52:54 +0000 Manifest this update: Fri 22 Aug 2025 14:52:53 +0000 Manifest next update: Fri 29 Aug 2025 14:52:53 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: AgE2HlgWpWlDgXbeQ2173P9zzR+NXdgar4jUFNjBMjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Aug 22 14:52:53 2025 GMT Not After : Aug 29 14:52:53 2025 GMT Subject: CN=68a88446-0144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:69:a2:de:20:24:00:a5:d6:80:b6:0e:1e: 7e:40:52:cf:4c:cd:e1:2e:d4:aa:6a:0a:ac:97:7c: 0e:05:82:4d:28:f3:4a:a1:38:1c:00:a1:1a:8c:e2: a2:04:3b:28:58:47:c6:b7:e9:1c:c2:c9:95:8e:d8: b0:09:b4:34:7a:1f:b4:60:20:4c:43:65:21:6d:83: 4a:83:e3:59:db:e7:2e:93:5e:b6:db:98:08:03:54: 85:66:15:5d:7f:53:5b:56:fe:63:8c:e9:cc:21:c8: 34:45:18:8a:2b:52:7d:99:4c:39:ff:f6:9f:cb:e3: ac:a0:1a:8e:e7:fa:58:3b:48:6b:ac:64:2f:80:39: 69:18:da:d0:b4:7b:43:6c:50:f6:92:12:d8:28:56: 94:7b:93:6f:23:d4:39:6b:28:88:21:c0:df:ba:cf: ef:df:d4:fc:3c:a6:8b:b1:d4:a1:86:c6:fe:0d:c5: 63:9f:ec:d2:a7:b8:b1:96:bc:ab:3c:60:65:e8:25: 5f:74:f5:28:2f:1a:2c:8a:1a:90:83:20:91:6b:62: 6f:d2:64:8b:45:fc:93:44:ee:a2:f9:2e:21:18:4a: 79:e9:43:12:c1:80:65:65:35:06:e9:4f:91:b9:ae: 8e:0c:6b:45:7b:13:cd:23:08:17:26:06:80:61:fa: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:19:F7:F1:BB:B8:91:77:60:C1:E9:86:E0:F8:40:8D:D1:E1:EA X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:45:c5:cd:e6:50:cd:23:56:bf:63:e1:9b:c0:b2:71:da:49: 38:32:c2:26:31:4d:cf:f6:cf:ec:10:d6:d0:13:c5:78:02:ef: 90:ee:41:de:34:ea:a5:e9:a2:83:05:80:96:03:6a:d0:6b:5b: f8:38:2f:91:ca:54:ca:e5:78:01:69:39:88:94:80:1a:b1:8b: c7:f5:a3:7f:78:4f:12:68:70:14:62:48:4c:a5:54:61:e0:fe: a4:3e:71:3e:46:b0:e5:0e:2c:6d:0c:5b:c8:10:fe:fa:4f:ce: 6d:90:48:2f:30:76:6e:89:6a:15:dd:02:2a:80:fd:0b:c9:f2: 01:b8:f9:be:01:78:0f:c8:b2:cf:b1:2f:15:88:05:b5:5b:e5: cd:6e:0b:cc:9a:3d:3f:c3:c0:c1:86:7d:e7:07:db:d4:0f:ce: 84:4b:00:5b:66:9b:2c:bc:c3:15:73:fe:3e:3f:cc:ad:49:34: a8:83:0a:c0:f0:04:60:d7:c3:3e:de:f1:bc:df:44:1d:de:b0: 11:08:7a:14:91:b6:dd:de:f1:78:26:0c:98:32:6d:14:70:c3: 7a:98:af:fb:c5:7c:d4:88:8f:84:f5:42:1c:63:2a:18:0d:61: 51:5b:91:75:a8:4c:51:92:eb:5a:b6:dc:59:2e:88:60:a9:bf: 0b:53:58:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwODIyMTQ1MjUzWhcNMjUwODI5MTQ1MjUzWjAYMRYwFAYD VQQDEw02OGE4ODQ0Ni0wMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD1pot4gJACl1oC2Dh5+QFLPTM3hLtSqagqsl3wOBYJNKPNKoTgcAKEajOKi BDsoWEfGt+kcwsmVjtiwCbQ0eh+0YCBMQ2UhbYNKg+NZ2+cuk16225gIA1SFZhVd f1NbVv5jjOnMIcg0RRiKK1J9mUw5//afy+OsoBqO5/pYO0hrrGQvgDlpGNrQtHtD bFD2khLYKFaUe5NvI9Q5ayiIIcDfus/v39T8PKaLsdShhsb+DcVjn+zSp7ixlryr PGBl6CVfdPUoLxosihqQgyCRa2Jv0mSLRfyTRO6i+S4hGEp56UMSwYBlZTUG6U+R ua6ODGtFexPNIwgXJgaAYfq3GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzHGffx u7iRd2DB6Ybg+ECN0eHqMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDARcXN5lDNI1a/Y+GbwLJx2kk4MsImMU3P9s/sENbQE8V4Au+Q7kHe NOql6aKDBYCWA2rQa1v4OC+RylTK5XgBaTmIlIAasYvH9aN/eE8SaHAUYkhMpVRh 4P6kPnE+RrDlDixtDFvIEP76T85tkEgvMHZuiWoV3QIqgP0LyfIBuPm+AXgPyLLP sS8ViAW1W+XNbgvMmj0/w8DBhn3nB9vUD86ESwBbZpssvMMVc/4+P8ytSTSogwrA 8ARg18M+3vG830Qd3rARCHoUkbbd3vF4JgyYMm0UcMN6mK/7xXzUiI+E9UIcYyoY DWFRW5F1qExRkutattxZLohgqb8LU1hw -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:08 2025 by rpki-client