$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: LvNrAnupbtWmMwYp7y67gqxfoa0365LuoJVgJs0MvU8= Subject key identifier: 55:43:4D:23:BC:9B:2D:71:D8:86:72:2B:59:A7:59:FA:A5:7F:6A:A9 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 0114 Signing time: Mon 11 May 2026 06:01:58 +0000 Manifest this update: Mon 11 May 2026 06:01:57 +0000 Manifest next update: Mon 18 May 2026 06:01:57 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: CTNS1jPQPLFqPfrO2GsC5UicvpoLCFdzl40wlxBY2WE=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: NpfMdIbhsOVnDHFHuWg5bIrLEGDX/gm1pUFVu8n7a6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: May 11 06:01:57 2026 GMT Not After : May 18 06:01:57 2026 GMT Subject: CN=6a0170d6-8fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:24:c0:17:b2:1f:b9:8b:84:c8:d8:f0:e3:47: a3:01:65:81:52:15:28:00:4e:e3:3f:e6:ee:fb:2d: f8:ce:6b:4e:e9:e7:a3:6e:e1:83:4f:90:e0:79:d4: 2d:c2:8e:7d:ad:ab:8f:26:42:12:93:d6:4b:e3:23: 99:23:1d:41:fb:1b:ac:cd:37:b8:06:8b:84:f6:20: 46:4e:18:62:44:21:74:2b:8c:3d:2d:4a:1f:93:7d: 5c:ce:c5:57:9f:31:28:d1:5f:2b:b9:95:07:a8:15: d3:c9:cb:e2:56:5e:f0:03:f2:05:48:7f:74:ee:1c: cb:16:a8:66:e7:00:88:b4:f4:36:24:16:b5:69:7c: 69:07:9f:22:9c:e6:79:bb:19:20:15:9a:95:3c:bf: 51:56:c5:52:d8:92:10:14:ba:ea:a9:c0:42:a0:95: 35:fb:fb:a2:d6:8d:05:18:2c:f0:97:e1:cf:1e:7c: 00:45:fa:5b:ea:ff:b0:e9:15:e6:58:c4:92:18:5b: c9:53:29:21:3b:10:18:2c:a1:ed:47:c9:f0:b6:00: 91:fb:c9:da:d2:18:09:24:4c:50:e4:5d:7a:6d:2e: dc:f0:93:53:ed:51:b2:29:c4:c8:cb:0b:41:70:29: 28:c8:b7:ab:a8:c0:a1:73:a6:b1:71:d7:38:ea:af: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:4D:23:BC:9B:2D:71:D8:86:72:2B:59:A7:59:FA:A5:7F:6A:A9 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:3e:e6:f4:a3:65:dc:52:05:5a:78:39:c3:97:c0:53:b3:a4: 09:3c:c4:8a:e0:f1:a6:ee:02:1d:8a:c1:a1:07:83:5e:2e:ee: e6:92:a7:83:68:7d:e3:e8:c8:5e:86:5d:89:e4:18:41:39:b8: a2:46:9b:ec:f9:5a:90:fa:91:7e:dc:a1:5b:c3:4e:36:e6:0a: a1:d1:41:05:53:65:af:77:b3:a2:b3:c1:35:2e:99:f0:46:b3: e3:4c:1b:56:26:e7:40:ea:d7:fb:c4:cc:16:62:c5:e4:f5:e3: db:47:be:f4:b2:79:7c:75:c2:b6:c2:62:58:cd:35:59:aa:43: a6:ca:42:25:c9:c9:f9:1c:08:29:bf:14:fc:b4:bf:53:aa:d0: 49:c6:83:59:af:48:2d:ec:50:30:34:1f:43:ed:a6:7e:c8:3f: 63:c4:a5:22:39:a7:fb:87:49:16:3f:39:3f:cb:f6:c9:18:d8: d4:e3:dd:14:25:bc:8c:cd:56:8f:33:ff:e3:3a:a5:d4:68:d9: 5a:0b:9b:a5:46:53:0f:ef:fa:ac:4c:ea:6e:88:2c:7a:07:35: 06:3f:73:25:5c:cd:fe:30:f9:ba:89:c1:ee:ab:cc:55:fb:ba: f1:b1:8c:14:08:e3:6a:8b:ea:46:aa:bb:86:90:0a:9b:28:52: c3:ba:e1:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjYwNTExMDYwMTU3WhcNMjYwNTE4MDYwMTU3WjAYMRYwFAYD VQQDEw02YTAxNzBkNi04ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9STAF7IfuYuEyNjw40ejAWWBUhUoAE7jP+bu+y34zmtO6eejbuGDT5DgedQt wo59rauPJkISk9ZL4yOZIx1B+xuszTe4BouE9iBGThhiRCF0K4w9LUofk31czsVX nzEo0V8ruZUHqBXTycviVl7wA/IFSH907hzLFqhm5wCItPQ2JBa1aXxpB58inOZ5 uxkgFZqVPL9RVsVS2JIQFLrqqcBCoJU1+/ui1o0FGCzwl+HPHnwARfpb6v+w6RXm WMSSGFvJUykhOxAYLKHtR8nwtgCR+8na0hgJJExQ5F16bS7c8JNT7VGyKcTIywtB cCkoyLerqMChc6axcdc46q8sYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVDTSO8 my1x2IZyK1mnWfqlf2qpMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoj7m9KNl3FIFWng5w5fAU7OkCTzEiuDxpu4CHYrBoQeDXi7u5pKng2h94+jI XoZdieQYQTm4okab7PlakPqRftyhW8NONuYKodFBBVNlr3ezorPBNS6Z8Eaz40wb VibnQOrX+8TMFmLF5PXj20e+9LJ5fHXCtsJiWM01WapDpspCJcnJ+RwIKb8U/LS/ U6rQScaDWa9ILexQMDQfQ+2mfsg/Y8SlIjmn+4dJFj85P8v2yRjY1OPdFCW8jM1W jzP/4zql1GjZWgubpUZTD+/6rEzqbogsegc1Bj9zJVzN/jD5uonB7qvMVfu68bGM FAjjaovqRqq7hpAKmyhSw7rhEw== -----END CERTIFICATE-----Generated at Wed May 13 09:11:07 2026 by rpki-client