$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: trL2N4ND776hmW4esgIJ2gnS0ro2yldsvJ7nF7fA3tA= Subject key identifier: 41:4E:D9:B0:02:71:DF:F9:25:2D:7F:13:EE:D5:2E:6F:63:D3:C2:F0 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 3482 Signing time: Fri 30 May 2025 14:54:56 +0000 Manifest this update: Fri 30 May 2025 14:54:56 +0000 Manifest next update: Fri 06 Jun 2025 14:54:56 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: y5+vDgLbHT41di4wdH/P2JBH8WzdEahNu+hUQI1uXAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: May 30 14:54:56 2025 GMT Not After : Jun 6 14:54:56 2025 GMT Subject: CN=6839c6c0-bb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:58:3f:37:aa:13:24:5f:16:51:89:9f:c8: 8c:89:fa:bd:a6:87:3b:5c:f3:cb:78:c0:d8:bb:f8: a6:ec:3c:dd:a7:ab:bb:65:d3:3a:2a:ce:9e:93:6d: 4b:7f:d9:03:18:e0:f7:52:93:28:26:22:01:70:38: 47:bc:ab:cc:3e:3c:b4:10:67:da:94:1e:31:a1:e7: f0:96:1b:1e:e7:de:24:1e:22:21:e7:a8:c8:aa:c6: 8f:77:b5:83:d2:22:96:97:48:ec:a6:05:5c:dc:e3: 28:c9:a8:fb:11:05:96:c9:bc:23:93:2f:fc:05:c9: b1:c1:62:89:4a:49:12:ff:fb:07:6f:b9:c4:3e:7c: 0b:45:dd:55:e9:fd:52:08:3f:24:6f:63:77:6f:2c: eb:1d:13:46:23:da:87:5d:62:08:f6:98:f3:a1:b7: b2:4b:6f:4d:68:59:15:f5:e9:ed:50:66:8e:56:ad: 8d:3b:e0:1f:d7:4e:77:bd:81:46:37:8e:49:7d:4e: 41:63:68:2e:97:1f:b9:c0:1b:6e:e7:98:9c:c8:c1: 86:58:1e:46:95:25:71:4b:02:fc:29:4f:27:5e:9e: b5:f0:5c:b6:be:ac:bf:bc:ec:f0:44:de:32:5d:66: ad:c6:b2:4c:d4:97:d3:6a:b1:a2:2c:b3:7c:b8:f4: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:D9:B0:02:71:DF:F9:25:2D:7F:13:EE:D5:2E:6F:63:D3:C2:F0 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:4c:59:42:0b:36:fd:6c:b1:dd:8d:75:3e:bd:49:ed:8d: c6:c8:8e:8c:98:9b:a9:fc:89:4e:df:68:1f:2b:a5:62:a4:9e: b7:36:e3:ff:be:11:d7:ae:c0:77:38:84:e2:7b:71:75:1a:47: 50:bc:d0:c4:6b:97:fe:de:47:e4:f0:ba:88:1d:3f:19:0a:55: 24:e1:33:c3:6c:ed:d2:80:37:82:c9:19:27:90:58:a3:b5:6e: c5:ce:0a:99:84:b6:90:51:cc:83:bc:93:84:e4:22:cb:b6:fc: be:81:c9:8f:fd:ab:3b:9a:0c:4a:a6:f1:e8:95:ab:e2:da:2f: 09:8b:9b:01:ef:c7:e3:a0:f6:b1:a1:a1:00:a0:cf:5a:7e:2e: f1:05:19:65:25:5a:f8:de:e1:41:0c:d4:ff:60:58:32:db:8b: e5:36:30:2f:39:5c:0c:2f:7f:88:29:b3:71:e9:0a:77:20:06: 40:b7:6e:91:7f:52:4a:2a:ad:db:02:b9:77:c8:ce:ee:39:82: dc:c2:7f:d0:ab:8c:a1:b2:64:e1:b6:9b:45:ce:f0:1f:25:46: ef:f9:d8:01:ac:2d:8e:6a:1f:7f:bb:08:df:58:27:61:e0:1f: d0:f4:f6:d2:22:23:25:61:cc:03:b8:ed:fe:14:64:d9:9e:47: f2:88:90:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwNTMwMTQ1NDU2WhcNMjUwNjA2MTQ1NDU2WjAYMRYwFAYD VQQDEw02ODM5YzZjMC1iYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtNYPzeqEyRfFlGJn8iMifq9poc7XPPLeMDYu/im7Dzdp6u7ZdM6Ks6ek21L f9kDGOD3UpMoJiIBcDhHvKvMPjy0EGfalB4xoefwlhse594kHiIh56jIqsaPd7WD 0iKWl0jspgVc3OMoyaj7EQWWybwjky/8BcmxwWKJSkkS//sHb7nEPnwLRd1V6f1S CD8kb2N3byzrHRNGI9qHXWII9pjzobeyS29NaFkV9entUGaOVq2NO+Af1053vYFG N45JfU5BY2gulx+5wBtu55icyMGGWB5GlSVxSwL8KU8nXp618Fy2vqy/vOzwRN4y XWatxrJM1JfTarGiLLN8uPTV1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFO2bAC cd/5JS1/E+7VLm9j08LwMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4g0xZQgs2/Wyx3Y11Pr1J7Y3GyI6MmJup/IlO32gfK6VipJ63NuP/ vhHXrsB3OITie3F1GkdQvNDEa5f+3kfk8LqIHT8ZClUk4TPDbO3SgDeCyRknkFij tW7FzgqZhLaQUcyDvJOE5CLLtvy+gcmP/as7mgxKpvHolavi2i8Ji5sB78fjoPax oaEAoM9afi7xBRllJVr43uFBDNT/YFgy24vlNjAvOVwML3+IKbNx6Qp3IAZAt26R f1JKKq3bArl3yM7uOYLcwn/Qq4yhsmThtptFzvAfJUbv+dgBrC2Oah9/uwjfWCdh 4B/Q9PbSIiMlYcwDuO3+FGTZnkfyiJBZ -----END CERTIFICATE-----Generated at Sat May 31 16:40:44 2025 by rpki-client