$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: in8X613k8jofmgh3x0DQxQdOWPkM0BUNzcD8KFz7IEU= Subject key identifier: 11:C1:B7:1C:20:B9:16:3E:12:D4:7F:5A:1F:AB:8D:95:A1:A3:31:FE Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: FC Signing time: Wed 25 Mar 2026 05:26:09 +0000 Manifest this update: Wed 25 Mar 2026 05:26:09 +0000 Manifest next update: Wed 01 Apr 2026 05:26:09 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: r2yyHGMk+hVdjevoeQwqZZ4NXJ9bAlDjcQgMIs04ag4=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: NpfMdIbhsOVnDHFHuWg5bIrLEGDX/gm1pUFVu8n7a6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Mar 25 05:26:09 2026 GMT Not After : Apr 1 05:26:09 2026 GMT Subject: CN=69c371f1-1308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:4c:ac:1a:9f:30:49:e1:86:5b:89:47:a2: 5d:7e:dd:7a:7d:58:62:8e:d8:ca:74:5d:84:e3:60: fa:60:13:ef:63:89:ad:e6:cc:16:bb:1e:51:96:f7: 2f:a8:ba:af:97:81:64:f7:5d:fa:6a:e4:e0:6b:20: f1:86:71:bb:ba:f3:84:e6:6a:62:9f:8c:a8:2e:9b: 7f:f8:c4:de:26:c0:f5:3d:5b:9e:d3:04:e0:9e:b7: 0f:b2:ca:5b:d7:c8:72:c4:a6:87:15:e2:ed:11:54: 2f:e9:34:f4:50:ef:e1:96:d3:77:02:f6:e1:8f:9d: 34:75:22:be:28:18:e9:d6:ce:68:7d:60:c1:35:dc: 4a:f8:b0:05:b0:f9:58:d4:7f:72:33:c7:cb:b6:97: d4:8c:8c:73:c3:c1:bc:d0:80:83:4a:ad:0c:1f:db: ac:83:af:82:1a:06:20:aa:d7:e1:28:89:8d:40:07: d6:c6:99:72:d9:46:7c:a4:c6:c8:83:62:22:80:52: 1b:11:f5:3a:d4:34:e3:4b:3e:b1:99:23:10:f4:6a: 71:3b:42:81:7a:63:77:83:18:70:62:67:3e:e3:0b: 6e:3e:90:d2:3f:c6:34:2f:2c:01:c5:8a:c9:a6:08: e8:f7:4c:6f:70:40:76:7b:2d:d2:1c:8e:69:2b:86: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C1:B7:1C:20:B9:16:3E:12:D4:7F:5A:1F:AB:8D:95:A1:A3:31:FE X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:72:f3:e9:80:ad:9e:06:cc:0c:a5:dd:13:0b:c4:82:e3:10: bb:1a:57:c6:7e:d8:64:a3:14:df:26:b6:f3:a6:72:33:3d:95: d4:61:28:fb:3a:d5:8e:fc:2d:e7:67:04:87:c3:fb:bb:33:60: 4c:37:dd:80:5e:d6:10:21:f0:e5:db:6d:57:b6:1f:74:64:48: 7f:c8:3c:6f:0d:22:90:ec:70:df:9b:a9:c9:f1:e3:62:5a:4b: 24:83:e4:72:9c:ce:e8:56:39:a8:c6:13:16:4a:7a:76:1d:a7: 85:b1:55:c4:bc:10:2f:d8:1e:8b:1f:2b:72:8a:1e:52:61:48: c7:ca:ac:e5:19:be:fd:17:3a:30:d9:dc:9d:f1:be:04:ad:af: 18:44:6e:05:ac:62:a6:76:33:41:7d:ac:6c:03:be:75:b6:58: 3e:50:06:b5:d7:e9:e2:6b:79:5d:9c:06:42:34:04:b3:2f:5d: 27:8a:a7:b2:b8:fd:87:be:2a:77:bc:35:03:5e:cd:f9:c7:e8: d8:ad:c7:08:44:69:b7:5a:4e:f6:04:ab:cf:8b:e4:00:f8:7c: 7d:99:94:35:9a:df:1b:c2:12:01:70:7f:4f:c6:bf:a4:80:37: 2a:20:fd:5b:bd:c2:87:f4:77:2f:d4:92:46:14:be:7f:0f:13: f4:14:07:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjYwMzI1MDUyNjA5WhcNMjYwNDAxMDUyNjA5WjAYMRYwFAYD VQQDEw02OWMzNzFmMS0xMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtttMrBqfMEnhhluJR6Jdft16fVhijtjKdF2E42D6YBPvY4mt5swWux5Rlvcv qLqvl4Fk9136auTgayDxhnG7uvOE5mpin4yoLpt/+MTeJsD1PVue0wTgnrcPsspb 18hyxKaHFeLtEVQv6TT0UO/hltN3Avbhj500dSK+KBjp1s5ofWDBNdxK+LAFsPlY 1H9yM8fLtpfUjIxzw8G80ICDSq0MH9usg6+CGgYgqtfhKImNQAfWxply2UZ8pMbI g2IigFIbEfU61DTjSz6xmSMQ9GpxO0KBemN3gxhwYmc+4wtuPpDSP8Y0LywBxYrJ pgjo90xvcEB2ey3SHI5pK4bN0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHBtxwg uRY+EtR/Wh+rjZWhozH+MB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqXLz6YCtngbMDKXdEwvEguMQuxpXxn7YZKMU3ya286ZyMz2V1GEo+zrVjvwt 52cEh8P7uzNgTDfdgF7WECHw5dttV7YfdGRIf8g8bw0ikOxw35upyfHjYlpLJIPk cpzO6FY5qMYTFkp6dh2nhbFVxLwQL9geix8rcooeUmFIx8qs5Rm+/Rc6MNncnfG+ BK2vGERuBaxipnYzQX2sbAO+dbZYPlAGtdfp4mt5XZwGQjQEsy9dJ4qnsrj9h74q d7w1A17N+cfo2K3HCERpt1pO9gSrz4vkAPh8fZmUNZrfG8ISAXB/T8a/pIA3KiD9 W73Ch/R3L9SSRhS+fw8T9BQH9Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:31 2026 by rpki-client