$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: geivED5io2rJX2e4jRIP6lmy6Jryjcu4sZ+VGp/moj8= Subject key identifier: 5F:28:11:CB:D7:59:B3:55:DF:0D:97:58:F0:C3:D3:17:FA:6F:0E:DF Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 349C Signing time: Fri 18 Jul 2025 14:53:26 +0000 Manifest this update: Fri 18 Jul 2025 14:53:26 +0000 Manifest next update: Fri 25 Jul 2025 14:53:26 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: RpTMGrsU02cneqKynoniedYBufa+qzVRqDJYpiedZ+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Jul 18 14:53:26 2025 GMT Not After : Jul 25 14:53:26 2025 GMT Subject: CN=687a5fe6-3c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:1e:d1:93:2b:45:14:dc:71:52:d0:8d:16: 23:32:ca:35:35:d9:56:1f:e0:b8:24:66:0e:11:6f: dd:63:62:4e:8f:7c:ae:53:88:3a:83:4b:93:44:c8: 39:8e:88:71:2b:53:c0:fd:5a:8a:0e:d3:d0:14:43: a1:6b:07:7d:1b:5f:91:91:c6:1b:21:c4:85:22:24: 4b:d1:86:96:be:64:46:42:ae:ab:70:00:21:be:be: f4:82:01:45:7d:cd:1d:35:a1:aa:8b:24:61:2d:16: 55:05:10:ee:dc:b3:60:c0:ea:2b:71:cf:c0:fc:9e: 36:53:ea:22:b1:d2:7a:d5:ef:b4:0b:e0:52:ed:32: b8:c5:8d:9a:b4:50:47:4f:24:e7:6d:2c:12:0c:73: 84:62:f1:93:31:91:f1:8d:6c:ad:74:4b:68:78:59: 06:8b:2b:56:a4:2f:21:47:26:03:ff:a2:7f:aa:00: 84:10:e8:73:f4:71:0b:4f:ef:1c:2c:fa:0c:9c:4c: bd:5f:ee:fd:bf:ba:52:35:01:f7:3c:8f:1f:1c:76: 6e:8a:7f:96:b3:cd:b5:a6:3c:60:e5:66:53:b5:7b: 67:c8:37:39:d2:a7:0a:dd:23:a8:32:80:50:7e:7c: 2d:fc:67:1d:ce:01:22:7e:54:b6:75:8b:c3:33:ec: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:11:CB:D7:59:B3:55:DF:0D:97:58:F0:C3:D3:17:FA:6F:0E:DF X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:c0:ab:66:79:72:cc:07:22:c1:f6:ff:5c:e4:3e:b4:a7:f3: 93:d9:4a:19:d2:91:53:a5:12:ef:69:d7:59:0a:4c:f0:ef:49: 79:2a:48:e4:58:99:ca:f8:02:c3:ef:33:91:ac:5b:7a:e6:5a: 68:a5:36:10:a5:db:8d:91:28:bd:0f:76:8a:3b:c0:c8:1a:3c: 04:30:09:8f:d4:a1:b4:5c:9f:83:f7:3b:e7:64:93:93:f6:d2: 35:70:5a:9e:b0:54:84:b4:a5:e4:ab:27:ab:92:59:c0:b1:8a: dd:81:e7:ca:e1:9b:b0:5a:85:39:7f:2b:37:3b:3c:2d:fe:4a: 00:18:53:c8:87:fb:20:07:0e:b1:ec:f4:78:e5:2f:87:e8:dc: b3:8e:68:f4:bf:6d:98:48:41:88:f6:15:7d:4a:e4:11:e7:6a: ec:4a:86:6a:75:1b:ad:82:b1:d9:a7:24:70:f6:c0:9f:f0:50: 4f:88:17:cf:7d:36:ad:aa:83:b4:90:9f:55:51:9d:c1:be:6a: 48:a9:d5:45:90:1e:7a:e1:70:eb:c7:a8:5a:80:c7:db:5d:af: 02:54:f5:1a:5c:28:03:f3:51:24:f8:df:84:de:ce:d4:53:15: e6:77:87:4c:c4:2c:b5:4d:16:12:ba:2f:31:06:8f:68:63:0a: 54:a0:1e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwNzE4MTQ1MzI2WhcNMjUwNzI1MTQ1MzI2WjAYMRYwFAYD VQQDEw02ODdhNWZlNi0zYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPIe0ZMrRRTccVLQjRYjMso1NdlWH+C4JGYOEW/dY2JOj3yuU4g6g0uTRMg5 johxK1PA/VqKDtPQFEOhawd9G1+RkcYbIcSFIiRL0YaWvmRGQq6rcAAhvr70ggFF fc0dNaGqiyRhLRZVBRDu3LNgwOorcc/A/J42U+oisdJ61e+0C+BS7TK4xY2atFBH TyTnbSwSDHOEYvGTMZHxjWytdEtoeFkGiytWpC8hRyYD/6J/qgCEEOhz9HELT+8c LPoMnEy9X+79v7pSNQH3PI8fHHZuin+Ws821pjxg5WZTtXtnyDc50qcK3SOoMoBQ fnwt/GcdzgEiflS2dYvDM+xu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8oEcvX WbNV3w2XWPDD0xf6bw7fMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCswKtmeXLMByLB9v9c5D60p/OT2UoZ0pFTpRLvaddZCkzw70l5Kkjk WJnK+ALD7zORrFt65lpopTYQpduNkSi9D3aKO8DIGjwEMAmP1KG0XJ+D9zvnZJOT 9tI1cFqesFSEtKXkqyerklnAsYrdgefK4ZuwWoU5fys3Ozwt/koAGFPIh/sgBw6x 7PR45S+H6Nyzjmj0v22YSEGI9hV9SuQR52rsSoZqdRutgrHZpyRw9sCf8FBPiBfP fTatqoO0kJ9VUZ3BvmpIqdVFkB564XDrx6hagMfbXa8CVPUaXCgD81Ek+N+E3s7U UxXmd4dMxCy1TRYSui8xBo9oYwpUoB79 -----END CERTIFICATE-----Generated at Sun Jul 20 06:50:06 2025 by rpki-client