$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: HA6NsGLJSHjVUEsnC0X/IY+E2/sy5gfgWa1AeNGis5o= Subject key identifier: 53:4A:F1:48:7F:34:D9:A5:24:19:DE:4D:C7:3A:05:6C:B5:F8:5D:40 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: AB Signing time: Sun 19 Oct 2025 09:23:27 +0000 Manifest this update: Sun 19 Oct 2025 09:23:26 +0000 Manifest next update: Sun 26 Oct 2025 09:23:26 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: xdZ1hTq0iwkOOouOEYclp+qqQ1Iv/9U/2KyMEScWKjg=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Oct 19 09:23:26 2025 GMT Not After : Oct 26 09:23:26 2025 GMT Subject: CN=68f4ae0e-dd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:6c:3b:af:4b:f7:43:6a:a5:65:c0:7c:94: b8:bf:42:f0:fd:56:b2:40:59:f1:54:35:61:25:31: ca:ec:ef:a7:fc:38:a5:7b:ef:a2:d1:e2:bb:a9:20: c4:21:6c:0c:f1:00:ba:cf:f8:6c:a7:01:c1:b6:c2: 3a:8a:46:04:12:0d:12:18:63:f0:b6:42:5d:bc:c8: 4b:e7:9a:9c:4c:42:86:40:18:c6:84:d4:66:47:a6: 25:be:49:11:0d:02:a0:98:43:7a:04:58:f7:7c:b8: 7a:b5:53:2a:f3:2e:eb:85:45:a2:1a:29:d9:9c:64: 19:c7:d2:26:35:9c:d6:f1:cd:67:cb:39:4a:35:6a: bc:72:ca:4b:e1:b5:76:24:62:c8:a1:6f:97:e8:d7: e3:4e:27:a0:29:3d:fe:88:6b:e1:20:0a:64:39:77: ac:64:d3:77:90:33:97:3d:6f:28:04:d5:bd:af:3f: 5c:88:9d:7b:54:f2:b3:f6:cd:7a:ee:86:b5:72:d9: 2d:ae:36:42:f2:d2:5d:b4:5a:49:40:e0:78:e3:52: d1:16:ba:40:07:9d:ac:ee:70:2e:d8:c2:8d:1b:aa: 5d:f7:17:34:6f:2d:01:c3:cd:c5:9f:0c:1f:21:e9: 96:9f:42:2e:09:9f:aa:92:50:d0:f3:6e:7f:f0:b1: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:F1:48:7F:34:D9:A5:24:19:DE:4D:C7:3A:05:6C:B5:F8:5D:40 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5f:23:b0:e9:f0:a7:ef:c3:41:e6:c4:3a:f0:19:04:2e:3a: 93:dd:ce:71:28:59:bd:c0:af:de:97:43:23:a7:ed:16:50:d1: 91:bd:78:e6:85:0b:4d:23:a5:8f:76:39:0a:43:63:1d:92:2f: 1b:1b:48:b5:75:cf:f0:a0:2e:e6:40:f4:6c:47:63:3c:6a:c1: ef:ad:1f:09:3c:8f:7b:50:d0:b1:30:f0:77:69:3c:23:08:88: 68:93:ba:09:67:d5:5e:73:f3:f6:8b:78:17:2f:b5:e2:ba:28: 14:ba:52:f2:2b:eb:4d:79:c9:d5:d4:1c:1c:a4:ec:c5:40:ee: 8a:5d:8d:83:7d:7d:fd:0b:ab:ce:03:ab:87:43:f4:87:4c:2b: d1:d0:2b:f4:ea:69:f5:fa:b9:97:43:ba:31:5e:b3:f6:26:8a: 40:73:dc:b9:b3:94:b4:28:0c:27:15:6e:d7:b2:1e:34:8f:ac: 84:94:26:bd:82:e7:c7:fc:7c:69:78:19:8e:a7:86:c8:a0:96: bb:f6:b4:c7:9c:66:1a:28:65:fc:00:b4:2b:b4:71:00:70:6f: bb:7f:cf:2e:02:79:61:81:7c:98:2c:c0:4c:93:de:1a:1c:ab: 7a:ef:d1:6c:20:30:e5:60:fa:42:cf:f5:9d:c9:8c:c0:9a:db: fd:7f:c2:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjUxMDE5MDkyMzI2WhcNMjUxMDI2MDkyMzI2WjAYMRYwFAYD VQQDEw02OGY0YWUwZS1kZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBZsO69L90NqpWXAfJS4v0Lw/VayQFnxVDVhJTHK7O+n/Dile++i0eK7qSDE IWwM8QC6z/hspwHBtsI6ikYEEg0SGGPwtkJdvMhL55qcTEKGQBjGhNRmR6YlvkkR DQKgmEN6BFj3fLh6tVMq8y7rhUWiGinZnGQZx9ImNZzW8c1nyzlKNWq8cspL4bV2 JGLIoW+X6NfjTiegKT3+iGvhIApkOXesZNN3kDOXPW8oBNW9rz9ciJ17VPKz9s16 7oa1ctktrjZC8tJdtFpJQOB441LRFrpAB52s7nAu2MKNG6pd9xc0by0Bw83Fnwwf IemWn0IuCZ+qklDQ825/8LEqUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNK8Uh/ NNmlJBneTcc6BWy1+F1AMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXyOw6fCn78NB5sQ68BkELjqT3c5xKFm9wK/el0Mjp+0WUNGRvXjm hQtNI6WPdjkKQ2Mdki8bG0i1dc/woC7mQPRsR2M8asHvrR8JPI97UNCxMPB3aTwj CIhok7oJZ9Vec/P2i3gXL7XiuigUulLyK+tNecnV1BwcpOzFQO6KXY2DfX39C6vO A6uHQ/SHTCvR0Cv06mn1+rmXQ7oxXrP2JopAc9y5s5S0KAwnFW7Xsh40j6yElCa9 gufH/HxpeBmOp4bIoJa79rTHnGYaKGX8ALQrtHEAcG+7f88uAnlhgXyYLMBMk94a HKt679FsIDDlYPpCz/WdyYzAmtv9f8Jq -----END CERTIFICATE-----Generated at Tue Oct 21 15:15:14 2025 by rpki-client