
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: qxob5tHxWhwWaZ/haqYa42J3CiL4zXCVsA5u2X1jAv4=
Subject key identifier: 34:3D:7F:D3:55:90:8D:FB:FF:A7:AD:B8:41:74:CE:F9:CA:B7:E4:AE
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 0126
Signing time: Sat 13 Jun 2026 05:44:17 +0000
Manifest this update: Sat 13 Jun 2026 05:44:17 +0000
Manifest next update: Sat 20 Jun 2026 05:44:17 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: XP+3XcFUSOFXfm9tfi9T7ZGZmjtvCztck3zU427YIZU=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Jun 13 05:44:17 2026 GMT
Not After : Jun 20 05:44:17 2026 GMT
Subject: CN=6a2cee31-857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:d2:89:d0:e9:38:e7:7c:4d:03:1a:8e:ea:
02:46:19:04:3f:61:df:c5:f3:00:c6:45:c5:95:29:
9d:ae:3c:f4:03:52:e7:0f:b0:6d:68:8c:8b:c0:eb:
f8:90:f4:58:88:65:2f:be:ec:8d:2a:36:99:6a:7b:
54:b2:31:60:8d:a1:8b:b2:0c:79:e6:99:ac:71:a7:
4d:6a:d7:f2:ae:2a:b4:98:91:63:40:27:ab:3c:78:
16:6b:89:b8:2a:44:99:cd:4b:a7:f9:44:d8:dd:71:
dd:ef:1d:4d:81:e1:8c:ae:11:db:63:36:ee:ad:22:
a8:f0:5f:88:71:28:31:b0:8a:a9:b6:8e:6c:ff:28:
f3:e9:57:0b:e5:7c:b7:90:ef:05:65:c0:93:72:1f:
48:cb:e7:60:73:a3:9d:b6:44:80:34:22:1b:0b:cf:
fa:c0:4c:b6:07:e9:4c:3a:0d:9d:0a:87:be:62:72:
c5:c6:1e:1a:80:f2:9e:53:05:f0:f6:b9:ac:d0:47:
24:03:b4:43:28:96:40:c1:92:08:78:31:f4:db:35:
13:4f:81:91:54:a1:9c:96:1b:45:8a:b2:c0:63:75:
b0:84:e9:eb:7d:8d:53:0d:5c:db:d0:a0:0c:30:64:
08:0d:d2:52:11:ad:89:be:d6:4b:23:3a:50:c7:44:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:7F:D3:55:90:8D:FB:FF:A7:AD:B8:41:74:CE:F9:CA:B7:E4:AE
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:63:2f:07:c0:d1:69:16:fa:5c:21:9e:9b:ac:39:f4:aa:e0:
d0:f7:c6:82:6b:fb:4c:aa:65:eb:14:3a:11:d6:ef:aa:21:d8:
f9:d5:07:04:da:17:dd:46:5c:b4:16:3a:4e:fa:5d:6e:2f:3e:
0d:7f:bc:f7:21:63:4d:fd:25:d1:65:5b:b7:6c:d4:a3:34:db:
ea:d5:e9:3c:5a:fa:14:c0:27:f8:df:e4:d1:45:66:bc:3c:aa:
0a:37:33:89:04:81:51:61:8b:64:ec:43:1f:b4:0e:01:83:a0:
92:df:84:40:a1:75:53:0a:71:77:02:8e:cc:18:65:88:bf:bd:
ae:57:bc:a2:3e:81:0d:b7:e4:e9:46:fd:78:74:fe:b9:10:83:
d8:fb:12:3d:7f:3c:3a:f3:88:c5:13:f8:5e:28:1f:e8:81:47:
54:ae:43:cb:e9:70:00:90:d9:a8:47:b9:6a:e1:0d:5a:63:f6:
55:0a:96:43:ad:db:19:37:1e:0d:ca:51:23:f7:03:d6:57:10:
48:af:da:ee:7d:b5:16:81:b1:23:0c:fc:d5:a4:33:e2:90:66:
ee:09:02:c8:ac:3b:60:8f:2c:4a:a6:93:1b:04:ae:7c:be:f8:
50:1b:fc:0f:bd:12:bf:c8:88:1a:17:17:bb:2d:65:ef:bb:b7:
24:2f:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:42 2026 by rpki-client