$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: E2XDwSmsfGJOGo3OM1/P/JQ5HFvex3QXo54l6HvoTGw= Subject key identifier: F4:77:09:3D:A8:4B:AF:00:DB:57:BB:D7:6E:1A:F4:7C:0F:C1:09:17 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 8E Signing time: Sat 23 Aug 2025 06:46:50 +0000 Manifest this update: Sat 23 Aug 2025 06:46:50 +0000 Manifest next update: Sat 30 Aug 2025 06:46:50 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: iFJnWLQqXTMJxlDAX9WLp6ER6U6fGFho/6wDOFGT858=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Aug 23 06:46:50 2025 GMT Not After : Aug 30 06:46:50 2025 GMT Subject: CN=68a963da-c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:0f:73:d9:81:c4:81:2e:9c:7c:3f:d7:5d: c2:86:f4:b8:d5:72:83:32:9a:45:d6:f1:27:32:29: b6:12:5b:6f:c0:5d:27:69:da:67:ad:2c:46:45:f3: fe:77:2b:40:11:1b:59:d7:2d:9f:96:4b:5b:e3:57: ac:f6:72:56:72:53:df:76:c6:ff:fc:19:85:27:20: 07:36:b1:c2:4b:8a:18:85:84:01:dd:ff:f6:e5:85: d8:f4:68:96:df:3f:97:d1:ce:e1:f0:ea:f6:f0:0e: 79:06:25:2e:ed:39:83:f5:86:97:c6:95:d9:fd:57: c7:d4:f9:bd:fe:78:27:ce:0a:cf:3b:32:41:9c:fc: 3e:54:15:7d:96:62:6d:bd:33:20:32:8f:3c:bc:e6: d5:b7:63:d5:89:99:00:3a:24:96:32:c2:f7:7c:c3: 5b:7f:e2:b5:82:ef:73:3c:f4:2a:f6:c6:77:cd:bd: 9c:e1:9c:db:7d:aa:8c:18:b7:2d:a6:12:a3:b9:0a: df:a6:c1:5c:e8:fd:e2:b7:c9:55:64:f6:98:60:89: 6f:d1:8a:bc:62:4a:81:6e:85:14:58:c2:32:57:bf: 7b:8b:e3:56:45:56:bb:9a:16:57:8e:b9:bf:db:88: 92:30:12:42:a0:4c:e0:52:f4:90:30:3c:55:1f:52: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:77:09:3D:A8:4B:AF:00:DB:57:BB:D7:6E:1A:F4:7C:0F:C1:09:17 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ba:ae:a3:5a:93:02:fe:35:4c:68:8c:aa:fa:91:ac:09:aa: a5:22:e5:b3:98:bc:19:5a:c8:ec:17:23:0e:8b:73:d7:1c:8b: 6a:b8:f0:78:f8:82:cf:58:c0:75:b4:dd:7c:8c:8c:1c:a3:36: 86:b8:79:1f:df:b2:ad:16:68:58:33:08:54:b5:a4:21:a0:76: cc:4e:4f:a4:a0:9d:eb:94:2d:3d:8c:07:3c:9f:b7:fa:bb:c9: 0c:e7:f9:f6:9a:aa:ea:4e:1e:0c:83:11:e3:f4:69:bf:8e:05: 38:31:e9:a0:29:eb:5f:8d:0e:32:28:59:ba:9b:ad:70:60:0d: 1f:f0:d3:29:2a:9d:36:6b:76:3e:d5:02:f0:a6:a8:05:75:93: 25:92:9b:51:40:42:b1:bb:e9:42:95:a8:47:6c:c0:b7:c1:49: 4e:01:db:a2:0d:84:2e:4c:ec:44:22:da:fb:a6:40:bd:66:b9: 3a:07:ad:fd:2e:4f:ef:9e:51:e4:69:21:61:c7:73:e0:28:05: 91:f5:df:eb:50:6c:e9:6f:1a:ed:ad:25:e3:73:16:17:5d:37: b3:16:9a:53:48:e1:23:9e:40:34:55:f6:9a:4f:33:6a:e0:4f: 92:b2:2d:ba:5e:e9:aa:9c:28:2d:bf:12:e9:a2:16:9b:16:e1: 5f:95:fd:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjUwODIzMDY0NjUwWhcNMjUwODMwMDY0NjUwWjAYMRYwFAYD VQQDEw02OGE5NjNkYS1jOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrwPc9mBxIEunHw/113ChvS41XKDMppF1vEnMim2EltvwF0nadpnrSxGRfP+ dytAERtZ1y2flktb41es9nJWclPfdsb//BmFJyAHNrHCS4oYhYQB3f/25YXY9GiW 3z+X0c7h8Or28A55BiUu7TmD9YaXxpXZ/VfH1Pm9/ngnzgrPOzJBnPw+VBV9lmJt vTMgMo88vObVt2PViZkAOiSWMsL3fMNbf+K1gu9zPPQq9sZ3zb2c4ZzbfaqMGLct phKjuQrfpsFc6P3it8lVZPaYYIlv0Yq8YkqBboUUWMIyV797i+NWRVa7mhZXjrm/ 24iSMBJCoEzgUvSQMDxVH1KBHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR3CT2o S68A21e7124a9HwPwQkXMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRuq6jWpMC/jVMaIyq+pGsCaqlIuWzmLwZWsjsFyMOi3PXHItquPB4 +ILPWMB1tN18jIwcozaGuHkf37KtFmhYMwhUtaQhoHbMTk+koJ3rlC09jAc8n7f6 u8kM5/n2mqrqTh4MgxHj9Gm/jgU4MemgKetfjQ4yKFm6m61wYA0f8NMpKp02a3Y+ 1QLwpqgFdZMlkptRQEKxu+lClahHbMC3wUlOAduiDYQuTOxEItr7pkC9Zrk6B639 Lk/vnlHkaSFhx3PgKAWR9d/rUGzpbxrtrSXjcxYXXTezFppTSOEjnkA0VfaaTzNq 4E+Ssi26XumqnCgtvxLpohabFuFflf1Q -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:49 2025 by rpki-client