$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: G3rBUWi7pkeZUszJsI+EahWB5V3QMCZ+1J/NPC46rpI= Subject key identifier: 29:89:FE:CE:FE:9C:DC:E4:42:19:5F:26:30:5A:F5:2F:1F:B5:02:6F Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 14:51:53 +0000 Manifest this update: Sun 02 Nov 2025 14:51:52 +0000 Manifest next update: Sun 09 Nov 2025 14:51:52 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: PuCNKD4bAEz4FuRtIF+xivY1ifkwGUFyEsv9+548D3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Nov 2 14:51:52 2025 GMT Not After : Nov 9 14:51:52 2025 GMT Subject: CN=69077008-b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:b6:0d:d5:1a:a4:40:96:c9:90:65:33:56: 73:28:e2:60:4a:34:7f:51:08:ba:69:1e:57:0a:9f: 4b:77:b1:23:a3:f2:02:66:f5:0f:b4:aa:9c:08:90: a0:cd:fa:cc:0c:77:bb:de:cb:8e:90:70:47:9d:33: 34:b7:68:ce:1d:5a:2c:7c:2a:ef:f3:5d:4b:78:84: 3c:34:1c:78:30:3c:bc:2c:d7:8f:2f:e8:a0:2b:9b: b9:17:30:52:27:f4:29:0a:62:e0:e7:dd:94:95:34: 6a:89:26:d0:48:2f:66:78:29:86:ec:b6:64:81:50: cf:f7:96:c1:1d:2c:7a:55:15:e2:60:1f:45:45:36: 28:f5:ca:38:44:be:82:69:f6:6e:17:c1:01:72:25: 94:74:02:3c:92:21:3b:a0:35:54:4b:ad:b7:d9:76: 7f:7b:c1:1e:e3:d2:00:85:2e:4a:91:2b:8e:00:a7: f1:8b:7e:53:20:b0:af:78:5a:3d:07:11:4f:f1:c4: 4c:39:5f:e7:d4:06:c8:8d:a9:80:85:21:37:83:e4: 89:b8:a8:89:13:7f:92:b3:44:4a:8c:95:59:1b:f3: 7f:b9:d0:00:78:ed:2b:e5:96:16:ae:62:54:b7:2d: 4d:b5:90:53:cd:c7:69:03:a0:0b:62:b7:e9:9f:a3: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:FE:CE:FE:9C:DC:E4:42:19:5F:26:30:5A:F5:2F:1F:B5:02:6F X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:38:91:f8:33:61:d0:c8:84:01:f0:ca:c1:ac:ff:2c:fc:63: c3:49:23:c8:b8:74:00:7b:a7:ca:99:29:d1:0a:5b:f8:9f:4f: 71:c8:64:5f:52:fc:81:bc:6f:55:71:82:a4:ca:b4:95:a0:63: 73:17:1d:67:19:4e:df:c2:69:c9:4b:b8:82:8f:b3:00:9e:2f: 50:69:f3:ea:f4:27:db:e6:45:bc:64:be:68:bc:a7:9d:a5:22: ef:06:ae:1b:d1:81:b5:90:7f:a6:c9:a1:eb:2b:f2:3f:4b:fd: a7:84:0a:ff:59:f0:f9:6f:ab:2d:9b:61:3c:4a:c1:77:fc:5a: 7e:0c:b3:d6:82:a6:97:0d:63:89:37:0c:83:d2:6b:60:68:9e: 35:4a:2e:36:71:51:09:33:8b:fd:8a:85:4e:53:ef:f9:29:48: a3:18:85:da:63:9e:14:e5:22:23:16:ff:e7:52:20:79:c3:f3: b9:69:98:02:23:e0:05:ae:a6:b3:8c:89:a9:99:6b:13:2d:1e: 14:bd:8c:05:06:5c:e5:eb:9a:60:15:82:16:7d:a0:fc:e7:99: d0:16:b9:95:f5:7e:dd:c5:60:ee:98:9b:f5:3a:ad:28:3c:ec: 61:f8:79:df:28:01:8e:5a:d3:4f:d2:48:61:62:64:fa:c8:2e: 10:c3:fb:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUxMTAyMTQ1MTUyWhcNMjUxMTA5MTQ1MTUyWjAYMRYwFAYD VQQDEw02OTA3NzAwOC1iM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w22DdUapECWyZBlM1ZzKOJgSjR/UQi6aR5XCp9Ld7Ejo/ICZvUPtKqcCJCg zfrMDHe73suOkHBHnTM0t2jOHVosfCrv811LeIQ8NBx4MDy8LNePL+igK5u5FzBS J/QpCmLg592UlTRqiSbQSC9meCmG7LZkgVDP95bBHSx6VRXiYB9FRTYo9co4RL6C afZuF8EBciWUdAI8kiE7oDVUS6232XZ/e8Ee49IAhS5KkSuOAKfxi35TILCveFo9 BxFP8cRMOV/n1AbIjamAhSE3g+SJuKiJE3+Ss0RKjJVZG/N/udAAeO0r5ZYWrmJU ty1NtZBTzcdpA6ALYrfpn6NE4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmJ/s7+ nNzkQhlfJjBa9S8ftQJvMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPOJH4M2HQyIQB8MrBrP8s/GPDSSPIuHQAe6fKmSnRClv4n09xyGRf UvyBvG9VcYKkyrSVoGNzFx1nGU7fwmnJS7iCj7MAni9QafPq9Cfb5kW8ZL5ovKed pSLvBq4b0YG1kH+myaHrK/I/S/2nhAr/WfD5b6stm2E8SsF3/Fp+DLPWgqaXDWOJ NwyD0mtgaJ41Si42cVEJM4v9ioVOU+/5KUijGIXaY54U5SIjFv/nUiB5w/O5aZgC I+AFrqazjImpmWsTLR4UvYwFBlzl65pgFYIWfaD855nQFrmV9X7dxWDumJv1Oq0o POxh+HnfKAGOWtNP0khhYmT6yC4Qw/se -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:22 2025 by rpki-client