$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: gJ3EEI/k8WSuASxprA3ZyZ5jdNvMK1zIbkhzwRePivI= Subject key identifier: 78:96:C2:66:28:FB:0A:23:E7:27:5B:8D:FF:E2:F0:22:B8:E2:A1:62 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 011F Signing time: Mon 01 Jun 2026 06:34:43 +0000 Manifest this update: Mon 01 Jun 2026 06:34:42 +0000 Manifest next update: Mon 08 Jun 2026 06:34:42 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: dw4VRawTeFbAdPN75PyLJCf8c+4t/6p2I4FG3cvVx/Y=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: NpfMdIbhsOVnDHFHuWg5bIrLEGDX/gm1pUFVu8n7a6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Jun 1 06:34:42 2026 GMT Not After : Jun 8 06:34:42 2026 GMT Subject: CN=6a1d2803-1ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:2b:47:69:80:b7:cd:ca:6b:c0:d0:77:29: fb:74:f1:5c:14:e7:39:fa:3e:ff:10:bb:d4:90:81: 3b:c6:02:b8:08:db:08:9d:d7:99:ac:9e:60:9f:e5: 95:45:92:68:01:a8:a5:af:77:78:3d:4d:96:78:7f: 77:1c:ed:d5:81:9e:53:7f:09:58:91:d2:41:da:f1: e6:f3:41:1f:76:fc:3d:5a:ea:08:5d:1e:3e:c1:b6: 7f:d4:47:26:58:21:95:84:c7:71:7a:98:0d:ae:5d: bb:c5:02:87:6f:07:f3:d6:08:aa:c8:bb:40:51:c6: e4:9c:bb:46:1d:ce:29:ce:2b:5f:06:99:59:56:02: 77:5e:72:00:5a:23:46:a2:69:86:8f:d4:ce:97:fc: b9:d3:79:76:53:ce:d0:b2:06:13:99:c2:ea:00:b0: 1f:88:07:d5:09:26:4d:d8:1a:f9:c6:06:8d:46:0c: 80:50:f5:87:69:96:d2:b9:8f:6e:12:33:ab:b9:5d: 47:7f:40:2c:40:65:71:e9:4c:a2:85:64:c0:69:b8: 63:51:bf:2d:15:40:77:2c:61:da:4a:ae:f0:3f:25: 7d:75:eb:36:af:cf:88:38:fa:bc:2a:c8:f2:18:63: 8e:37:1b:fb:db:5b:a1:85:ec:15:a0:51:3a:8f:c2: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:96:C2:66:28:FB:0A:23:E7:27:5B:8D:FF:E2:F0:22:B8:E2:A1:62 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c4:40:e2:97:4d:f3:b5:35:11:82:09:56:6f:a9:62:4b:86: a9:4d:ff:5d:bf:40:ff:c3:75:26:4e:dc:59:25:cb:77:8f:b8: c4:13:53:e4:67:aa:17:0f:6d:1c:f2:f8:40:3d:e3:10:45:4f: 83:01:b2:04:5c:14:41:0e:84:dd:47:d8:2b:e7:e4:37:92:a6: 3f:04:ea:1e:97:e1:a0:8b:a4:b6:74:5c:4d:07:7b:ac:86:d1: 73:26:84:3a:51:68:6b:fa:b9:7e:ff:a7:27:a8:b6:e1:e3:70: da:43:77:f1:ab:5d:d5:1a:2a:b1:bc:03:ff:1a:97:ec:7d:ce: cd:5c:9a:d3:2c:1a:6b:c6:80:e3:2e:0b:65:26:39:4c:a1:ce: 00:c9:3d:4a:07:af:6e:ac:56:03:b7:db:1e:f3:7d:e8:49:53: c0:77:54:63:7a:1f:52:9a:eb:85:a1:29:31:c9:93:43:ad:1d: a7:bd:4e:3c:9b:25:5e:c0:f1:7b:20:ce:f9:2d:bd:de:14:9b: 94:4d:a1:ea:b0:fc:30:53:c8:d5:da:61:21:db:89:77:69:1b: e9:76:1c:5c:2d:1a:22:28:6b:da:6f:a7:6f:cf:e7:9a:9b:26: 3a:4f:e2:c3:7c:71:f7:09:8d:5d:e9:fc:81:81:1c:13:7e:f0: 85:2d:0d:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjYwNjAxMDYzNDQyWhcNMjYwNjA4MDYzNDQyWjAYMRYwFAYD VQQDEw02YTFkMjgwMy0xZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOorR2mAt83Ka8DQdyn7dPFcFOc5+j7/ELvUkIE7xgK4CNsIndeZrJ5gn+WV RZJoAailr3d4PU2WeH93HO3VgZ5TfwlYkdJB2vHm80Efdvw9WuoIXR4+wbZ/1Ecm WCGVhMdxepgNrl27xQKHbwfz1giqyLtAUcbknLtGHc4pzitfBplZVgJ3XnIAWiNG ommGj9TOl/y503l2U87QsgYTmcLqALAfiAfVCSZN2Br5xgaNRgyAUPWHaZbSuY9u EjOruV1Hf0AsQGVx6UyihWTAabhjUb8tFUB3LGHaSq7wPyV9des2r8+IOPq8Ksjy GGOONxv721uhhewVoFE6j8JSQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiWwmYo +woj5ydbjf/i8CK44qFiMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8RA4pdN87U1EYIJVm+pYkuGqU3/Xb9A/8N1Jk7cWSXLd4+4xBNT5GeqFw9t HPL4QD3jEEVPgwGyBFwUQQ6E3UfYK+fkN5KmPwTqHpfhoIuktnRcTQd7rIbRcyaE OlFoa/q5fv+nJ6i24eNw2kN38atd1RoqsbwD/xqX7H3OzVya0ywaa8aA4y4LZSY5 TKHOAMk9SgevbqxWA7fbHvN96ElTwHdUY3ofUprrhaEpMcmTQ60dp71OPJslXsDx eyDO+S293hSblE2h6rD8MFPI1dphIduJd2kb6XYcXC0aIihr2m+nb8/nmpsmOk/i w3xx9wmNXen8gYEcE37whS0NYA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:33 2026 by rpki-client