
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: 6RMrkkb09h+OtSYlcmHAFmoJb8X72zm1vwgo54G7J5Q=
Subject key identifier: 4B:C9:83:5F:43:E2:8C:05:A0:3B:47:04:E4:5E:DB:90:12:95:EC:60
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 0108
Signing time: Fri 17 Apr 2026 05:46:55 +0000
Manifest this update: Fri 17 Apr 2026 05:46:54 +0000
Manifest next update: Fri 24 Apr 2026 05:46:54 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: dhsZxGuK79iurNMYauBMUFKakKYaLfbyJ4UCcTwlIqc=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: NpfMdIbhsOVnDHFHuWg5bIrLEGDX/gm1pUFVu8n7a6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Apr 17 05:46:54 2026 GMT
Not After : Apr 24 05:46:54 2026 GMT
Subject: CN=69e1c94f-cfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:6d:c5:0a:e1:ce:d7:ba:65:3d:c8:b1:88:
0d:49:68:7a:83:17:ba:fc:fb:65:4b:db:b8:72:f8:
bf:f7:a8:a8:46:89:2a:aa:df:83:05:b4:8d:b6:16:
12:00:97:ed:f6:53:ca:86:dd:1d:ca:7c:24:90:ac:
17:34:f1:37:70:95:89:20:66:5c:85:e4:da:7b:cc:
3f:35:eb:b4:3f:93:9c:96:0f:36:35:27:c5:21:37:
60:12:f3:dc:cb:ff:cc:52:7f:bf:61:87:15:f3:45:
cc:00:8b:b7:45:03:17:ca:50:f4:8b:81:12:26:c8:
aa:25:5e:9a:b6:3f:26:b2:4b:ab:c0:3b:22:5d:de:
3f:4c:09:27:52:1c:e6:e7:df:70:78:95:ab:6f:10:
c5:ee:96:15:35:e9:16:23:a3:5d:f0:c0:df:a6:bf:
f7:7e:35:6b:dc:3a:f7:54:13:3c:6f:16:2f:45:bb:
08:4e:61:9d:29:ae:4d:8d:fa:90:d0:61:d9:7b:83:
d0:f5:b0:cf:2c:dc:e4:17:d9:13:19:e1:b3:5b:ae:
0c:eb:a3:5f:77:d0:28:d6:68:5d:03:cb:9e:26:03:
02:94:6a:d4:c2:1f:81:37:89:63:01:29:a7:23:ba:
63:5e:95:4e:83:70:02:ef:8e:7e:28:65:19:96:19:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:83:5F:43:E2:8C:05:A0:3B:47:04:E4:5E:DB:90:12:95:EC:60
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:07:4e:4e:0e:4b:c1:32:17:6b:8b:d9:97:a0:84:84:77:b0:
28:03:07:f1:6e:9d:ff:66:a3:e5:d7:a4:49:53:3c:54:a4:e2:
f3:ca:62:27:7c:c5:fe:0c:2e:63:57:b7:af:84:bd:93:cd:4d:
a3:26:1a:24:08:b2:7d:5d:18:ba:3d:32:d5:fc:56:8a:35:23:
c2:cb:85:30:14:1e:c6:a3:26:1f:e7:db:08:4d:55:ac:ea:1f:
5f:60:86:5c:74:e6:b0:c8:3b:e1:99:21:b7:b8:13:c4:ce:7d:
32:31:21:70:50:7f:06:ab:33:b0:4a:60:c0:ad:81:c5:c1:05:
e6:b5:ad:f8:cf:a5:ec:79:3f:2b:70:4e:e7:e3:91:86:d9:40:
98:48:36:e7:fa:ac:27:98:c3:20:c0:1b:34:6a:1e:e0:6d:e1:
2d:9c:9e:b7:79:f7:d0:f8:c1:9b:13:0e:7a:31:d7:ae:c6:ab:
a8:6a:35:28:77:a6:42:44:d9:9b:4c:a5:2a:91:c6:99:5b:78:
bc:11:eb:4a:49:e1:57:96:b9:ba:cd:1a:18:68:d1:a1:40:c4:
61:c1:27:ce:87:cd:04:c7:05:3f:1a:90:8e:5d:14:44:cb:37:
2a:4d:88:b8:95:77:eb:7b:b2:e2:3f:c4:95:85:1f:c3:e3:67:
4a:9f:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:42 2026 by rpki-client