$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: EoF3HQg7zNtNHAmZOzp6Byiz0eZL8kbfysD5a5IiRec= Subject key identifier: 35:04:BD:55:CA:5A:A3:46:A6:B0:7C:FE:E2:21:02:54:9C:BB:8D:29 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 3478 Signing time: Sat 10 May 2025 14:50:16 +0000 Manifest this update: Sat 10 May 2025 14:50:16 +0000 Manifest next update: Sat 17 May 2025 14:50:16 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: c2hPDkDQUB82BKT0Y8N1M3DfSRl7Uik09Am0hrvcaY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: May 10 14:50:16 2025 GMT Not After : May 17 14:50:16 2025 GMT Subject: CN=681f67a8-cb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:98:20:96:f1:e0:fc:6a:91:7b:e8:e1:f0: 9e:17:7b:c3:b0:00:bd:0c:01:02:1d:8e:25:89:25: 1d:4c:ff:0b:e1:f4:88:78:ae:c3:12:cf:ff:f1:59: 43:91:e5:7b:65:01:db:b8:99:10:17:7d:77:b3:1c: 30:55:d2:32:67:04:81:d3:90:35:e5:46:f2:ec:8c: bd:3a:86:4c:bd:05:2d:bb:44:31:5e:5f:a4:84:7e: 82:ac:6e:45:02:80:9a:b6:41:0c:57:9e:75:1c:cb: 37:20:00:80:95:86:d3:c3:36:69:cb:32:e3:b9:d3: d5:07:63:b0:c4:ae:5d:75:6a:40:cc:c8:f8:ff:72: 95:aa:ae:23:c4:ba:cb:4a:6a:28:c7:35:b7:7b:4e: 6e:9a:fb:65:45:e5:a0:0d:81:35:f0:26:a9:c3:26: bd:d4:a4:33:52:4b:cc:3a:70:2c:6a:23:39:f3:b4: aa:f1:68:53:4b:ab:ed:b7:6f:a8:91:9f:fc:79:52: f4:8b:4b:44:74:eb:e4:f9:85:60:e3:4c:ba:12:57: 60:b3:be:18:9a:10:67:4c:d8:4c:e9:9f:e3:1a:90: 10:5e:6d:64:b4:51:c4:03:1b:24:25:6d:4b:75:77: 16:da:f6:fc:ef:ab:97:d1:fe:fe:0e:9d:12:bc:1c: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:04:BD:55:CA:5A:A3:46:A6:B0:7C:FE:E2:21:02:54:9C:BB:8D:29 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6b:0c:a6:5e:24:48:76:e2:be:b5:6d:3f:69:1e:53:70:eb: 98:f4:63:9a:66:c6:78:a9:7f:23:7d:fa:02:ee:7b:23:fe:7f: c7:5c:a1:b9:7f:b8:97:bb:23:5c:29:c4:f2:c1:6c:6a:8a:e5: d8:fd:6b:e0:06:c5:09:45:cf:8c:7d:56:cd:ed:97:35:d9:c5: de:70:3d:fc:13:b2:32:24:0a:47:33:25:99:6e:b6:4a:f6:95: 5e:9e:56:16:da:15:ae:f4:ee:b4:ad:62:05:54:4a:bd:9e:f6: c7:6a:ca:ee:20:6b:e4:55:9c:ed:be:8e:16:e3:4a:29:17:40: 62:73:80:0a:88:01:4f:18:cd:9b:e7:e2:11:aa:4a:3c:2e:ad: 53:87:df:26:5b:f2:bf:69:cb:4e:dc:90:8e:73:bf:e2:7f:4e: 91:fe:e6:76:d5:8a:ca:55:6f:de:22:5c:49:5c:36:c4:9a:8e: 21:03:93:1d:3c:6a:42:8d:47:32:0d:ff:0b:f7:2c:72:16:5f: ed:7a:c5:5d:c2:b0:f0:dd:ca:69:59:62:9d:ae:7d:51:bc:46: e5:50:43:55:36:c4:ca:75:1e:e4:77:bf:2c:96:bc:91:5c:8e: 63:83:b0:7a:7f:b0:19:fe:7f:6b:24:67:80:cb:f1:4e:75:c9: 95:c7:9f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwNTEwMTQ1MDE2WhcNMjUwNTE3MTQ1MDE2WjAYMRYwFAYD VQQDEw02ODFmNjdhOC1jYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5eYIJbx4PxqkXvo4fCeF3vDsAC9DAECHY4liSUdTP8L4fSIeK7DEs//8VlD keV7ZQHbuJkQF313sxwwVdIyZwSB05A15Uby7Iy9OoZMvQUtu0QxXl+khH6CrG5F AoCatkEMV551HMs3IACAlYbTwzZpyzLjudPVB2OwxK5ddWpAzMj4/3KVqq4jxLrL SmooxzW3e05umvtlReWgDYE18Capwya91KQzUkvMOnAsaiM587Sq8WhTS6vtt2+o kZ/8eVL0i0tEdOvk+YVg40y6Eldgs74YmhBnTNhM6Z/jGpAQXm1ktFHEAxskJW1L dXcW2vb876uX0f7+Dp0SvBzI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUEvVXK WqNGprB8/uIhAlScu40pMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHawymXiRIduK+tW0/aR5TcOuY9GOaZsZ4qX8jffoC7nsj/n/HXKG5 f7iXuyNcKcTywWxqiuXY/WvgBsUJRc+MfVbN7Zc12cXecD38E7IyJApHMyWZbrZK 9pVenlYW2hWu9O60rWIFVEq9nvbHasruIGvkVZztvo4W40opF0Bic4AKiAFPGM2b 5+IRqko8Lq1Th98mW/K/actO3JCOc7/if06R/uZ21YrKVW/eIlxJXDbEmo4hA5Md PGpCjUcyDf8L9yxyFl/tesVdwrDw3cppWWKdrn1RvEblUENVNsTKdR7kd78slryR XI5jg7B6f7AZ/n9rJGeAy/FOdcmVx59p -----END CERTIFICATE-----Generated at Mon May 12 01:46:36 2025 by rpki-client