$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: rayHI9qcEGrL6pqAsHdk9s7S2XpLvMQZsHuBY+R3kTo= Subject key identifier: 3F:4A:D3:0C:95:4A:81:10:E7:22:FB:9C:5F:29:E2:64:7B:30:F0:D2 Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34BC Signing time: Thu 18 Sep 2025 14:54:23 +0000 Manifest this update: Thu 18 Sep 2025 14:54:22 +0000 Manifest next update: Thu 25 Sep 2025 14:54:22 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: WqdBhHyK7+jE2Ey7/njjmw7VW5cneG7OgE5AnsX09T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Sep 18 14:54:22 2025 GMT Not After : Sep 25 14:54:22 2025 GMT Subject: CN=68cc1d1f-0c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:ef:c4:f7:21:67:bf:97:21:1e:d7:f0:f3: e9:8b:2a:a2:e8:43:94:e6:4d:0a:cd:6f:e1:e9:43: d4:77:b4:47:ad:8b:b1:73:16:87:dd:4c:74:59:b7: e2:5c:7b:8a:4a:91:d6:0f:7f:29:c8:d1:ff:48:37: fa:e4:d2:25:4f:13:97:27:a0:3e:0e:59:22:da:e1: 54:ab:0a:94:2a:8c:0b:14:d7:cd:78:3e:33:de:0a: 1f:76:7c:4d:70:35:cf:1e:77:e2:37:8e:5e:e4:6a: a3:0a:59:64:17:07:30:9b:c6:3c:b4:19:ab:10:b4: cc:0e:85:3e:6e:94:1d:82:f7:c9:f3:6f:6f:2b:c4: 9c:7b:bf:7f:26:a3:6e:e3:fb:5d:d9:0a:8c:4e:1e: 21:d8:59:1c:a7:ea:c9:d0:22:cf:d2:c3:f6:26:75: 1d:49:e7:14:cb:e0:8c:42:9a:5d:27:41:59:8a:3b: b7:ec:65:b4:b5:42:7e:f0:9e:bc:f5:37:87:29:5f: 64:25:da:25:bc:bc:cb:6b:d6:86:8f:04:9b:61:2b: 92:47:cd:f7:df:e7:bb:d7:1b:fd:cf:70:35:5f:af: 10:cc:9c:83:c6:e6:8f:53:59:c4:b1:ed:56:b9:72: 09:9e:9a:54:0d:18:01:04:66:7b:45:68:5d:d0:cb: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4A:D3:0C:95:4A:81:10:E7:22:FB:9C:5F:29:E2:64:7B:30:F0:D2 X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:09:60:bf:03:29:d5:49:60:30:18:af:75:39:ac:9b:47:65: 24:4f:cb:5c:41:1e:3f:0a:c5:19:8e:5b:50:37:22:a3:75:08: bc:fc:8a:2b:d2:8d:1c:3c:39:75:99:09:a3:04:cb:79:08:ab: c4:ce:69:0f:38:eb:1f:8a:d2:48:68:9f:69:30:e1:40:ae:97: 6a:53:f3:29:83:f1:08:3d:de:f6:1b:5d:04:ed:2f:32:4a:67: 25:8d:a9:7b:12:fc:ac:d0:db:21:71:db:47:50:19:9e:7e:a6: ef:2e:1d:3a:52:d3:ad:f9:70:0a:e7:f5:e8:74:d1:cf:07:41: a8:3f:4f:bd:d8:72:19:91:33:d1:9c:64:36:3c:be:61:45:b4: e3:18:40:8b:cf:1b:c5:61:e1:2a:31:f5:52:15:20:15:7a:8e: cb:20:b9:e2:00:53:79:96:06:30:88:c4:d4:4c:07:ca:c7:00: c3:44:89:0a:fc:18:b9:29:32:4d:4d:d0:c4:c7:85:6b:c4:2f: 77:ec:7d:0c:ba:dd:e1:ea:66:79:fd:a0:48:7c:93:ba:51:30: 76:a4:ee:7a:3f:75:d7:ee:28:55:fe:c7:da:56:6d:c5:46:6a: 72:91:d0:6c:16:f1:05:95:ac:72:f2:87:4a:c1:bb:58:8b:c5: 86:a0:ff:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUwOTE4MTQ1NDIyWhcNMjUwOTI1MTQ1NDIyWjAYMRYwFAYD VQQDEw02OGNjMWQxZi0wYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYXvxPchZ7+XIR7X8PPpiyqi6EOU5k0KzW/h6UPUd7RHrYuxcxaH3Ux0Wbfi XHuKSpHWD38pyNH/SDf65NIlTxOXJ6A+Dlki2uFUqwqUKowLFNfNeD4z3gofdnxN cDXPHnfiN45e5GqjCllkFwcwm8Y8tBmrELTMDoU+bpQdgvfJ829vK8Sce79/JqNu 4/td2QqMTh4h2Fkcp+rJ0CLP0sP2JnUdSecUy+CMQppdJ0FZiju37GW0tUJ+8J68 9TeHKV9kJdolvLzLa9aGjwSbYSuSR8333+e71xv9z3A1X68QzJyDxuaPU1nEse1W uXIJnppUDRgBBGZ7RWhd0Mvb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9K0wyV SoEQ5yL7nF8p4mR7MPDSMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCWC/AynVSWAwGK91OaybR2UkT8tcQR4/CsUZjltQNyKjdQi8/Ior 0o0cPDl1mQmjBMt5CKvEzmkPOOsfitJIaJ9pMOFArpdqU/Mpg/EIPd72G10E7S8y Smcljal7Evys0NshcdtHUBmefqbvLh06UtOt+XAK5/XodNHPB0GoP0+92HIZkTPR nGQ2PL5hRbTjGECLzxvFYeEqMfVSFSAVeo7LILniAFN5lgYwiMTUTAfKxwDDRIkK /Bi5KTJNTdDEx4VrxC937H0Mut3h6mZ5/aBIfJO6UTB2pO56P3XX7ihV/sfaVm3F RmpykdBsFvEFlaxy8odKwbtYi8WGoP9k -----END CERTIFICATE-----Generated at Fri Sep 19 03:39:15 2025 by rpki-client