$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: cZjyeMZl2Zy2sWK0S4JOK5o5ubwLCAibNU8k76CVdZY= Subject key identifier: 97:F0:C1:F9:3B:02:6F:EA:F8:6E:10:CF:23:48:BC:77:C9:BE:7E:2C Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: B2 Signing time: Mon 03 Nov 2025 06:06:35 +0000 Manifest this update: Mon 03 Nov 2025 06:06:35 +0000 Manifest next update: Mon 10 Nov 2025 06:06:35 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: mZIkHblKWIALFKmETRRbn5i/U0IWC2rJFVvZSAEr4s4=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Nov 3 06:06:35 2025 GMT Not After : Nov 10 06:06:35 2025 GMT Subject: CN=6908466b-8cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:c8:4b:65:b1:1d:72:d8:ee:ca:12:e2:a8: f0:78:cc:d6:00:35:b2:d8:86:fa:66:da:ff:4f:10: 34:cd:0e:b1:c5:b3:49:7e:dc:5b:d9:7b:f9:97:15: a1:47:d8:65:c5:0c:ca:02:6d:96:3e:40:ee:bc:1d: 1d:20:ff:6e:d5:c1:16:3f:8a:4c:2c:bd:34:7e:7e: 51:43:a3:78:f5:4a:71:6f:b8:b7:49:67:87:2f:ff: d1:23:b0:70:98:a1:90:de:0c:66:de:bc:bd:97:60: 2e:ea:dc:4c:cc:34:ce:0e:a5:4a:f7:85:03:f4:ce: e4:de:1e:39:c6:f7:f3:eb:6c:4a:02:d1:1e:aa:32: d0:12:89:b6:06:23:3f:86:1f:f1:bf:e2:e4:64:3d: cf:25:43:60:3d:db:c6:3a:32:6d:19:f6:8a:fc:7c: f1:66:c5:0a:ae:4b:88:6b:9b:20:92:8d:9b:24:63: 78:e1:2f:d1:fe:3a:5d:1b:af:d0:ad:45:ae:42:af: bd:7d:43:84:1a:ee:a7:fc:fa:75:69:c1:da:47:4e: 2f:1c:bf:cc:72:2b:0e:88:29:87:19:b9:c0:5d:c8: 06:90:f8:0d:bf:ac:1d:c8:92:0a:4a:95:37:9d:f5: 7c:51:b0:a8:3d:75:7d:21:52:d8:b2:54:6e:9b:c7: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:C1:F9:3B:02:6F:EA:F8:6E:10:CF:23:48:BC:77:C9:BE:7E:2C X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:90:3f:07:ad:b0:6c:9c:64:bf:c9:bc:d7:4f:bc:8d:29:5b: 49:ec:55:06:6e:40:a8:28:14:66:00:ca:0e:19:d0:b6:d2:76: 25:f6:e6:85:de:b6:4e:b5:be:02:34:aa:19:47:3a:68:b2:7a: 81:01:e0:7b:35:38:46:21:03:fe:96:bd:4d:38:6e:79:32:39: 89:d3:a3:e6:a7:0c:95:73:92:1a:db:a8:2b:f2:92:ca:07:ed: c3:17:c9:0c:2b:f8:02:73:09:b9:48:88:97:f4:87:ec:a3:84: db:0d:dd:fe:74:9b:6b:3b:fa:0c:00:ae:d0:ba:c5:73:c8:b3: 91:41:6c:e6:56:5c:2f:62:87:22:6e:71:d1:82:71:56:25:30: 5c:40:72:85:a7:74:74:aa:df:67:9b:0d:16:85:34:03:4a:d0: 29:ef:cd:4f:e4:c9:4a:79:4a:5a:4a:11:7f:df:60:45:a5:3d: ab:d5:57:f7:16:3b:fe:26:09:12:70:a2:e2:f7:15:fa:4a:e7: d6:97:7a:75:b4:c0:27:8a:00:1a:0f:17:d9:02:b4:8e:49:c0: e6:07:2c:56:26:68:ef:9e:d8:11:d1:7e:ef:32:7a:e4:b9:be: 60:ec:e2:21:d3:6c:7a:82:17:bc:3c:49:b2:8d:cf:ab:f4:5b: 79:06:71:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjUxMTAzMDYwNjM1WhcNMjUxMTEwMDYwNjM1WjAYMRYwFAYD VQQDEw02OTA4NDY2Yi04Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBXIS2WxHXLY7soS4qjweMzWADWy2Ib6Ztr/TxA0zQ6xxbNJftxb2Xv5lxWh R9hlxQzKAm2WPkDuvB0dIP9u1cEWP4pMLL00fn5RQ6N49Upxb7i3SWeHL//RI7Bw mKGQ3gxm3ry9l2Au6txMzDTODqVK94UD9M7k3h45xvfz62xKAtEeqjLQEom2BiM/ hh/xv+LkZD3PJUNgPdvGOjJtGfaK/HzxZsUKrkuIa5sgko2bJGN44S/R/jpdG6/Q rUWuQq+9fUOEGu6n/Pp1acHaR04vHL/McisOiCmHGbnAXcgGkPgNv6wdyJIKSpU3 nfV8UbCoPXV9IVLYslRum8dwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfwwfk7 Am/q+G4QzyNIvHfJvn4sMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfkD8HrbBsnGS/ybzXT7yNKVtJ7FUGbkCoKBRmAMoOGdC20nYl9uaF 3rZOtb4CNKoZRzposnqBAeB7NThGIQP+lr1NOG55MjmJ06PmpwyVc5Ia26gr8pLK B+3DF8kMK/gCcwm5SIiX9Ifso4TbDd3+dJtrO/oMAK7QusVzyLORQWzmVlwvYoci bnHRgnFWJTBcQHKFp3R0qt9nmw0WhTQDStAp781P5MlKeUpaShF/32BFpT2r1Vf3 Fjv+JgkScKLi9xX6SufWl3p1tMAnigAaDxfZArSOScDmByxWJmjvntgR0X7vMnrk ub5g7OIh02x6ghe8PEmyjc+r9Ft5BnHL -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:20 2025 by rpki-client