
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: uesQphIyfb8SGLAEsu5rmEk6YlpDCAVrgRST5sfWE3Q=
Subject key identifier: 64:50:00:57:5D:77:0E:EB:36:1A:C7:82:62:33:26:7C:62:BF:1F:82
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 0159
Signing time: Mon 21 Sep 2026 05:11:16 +0000
Manifest this update: Mon 21 Sep 2026 05:11:15 +0000
Manifest next update: Mon 28 Sep 2026 05:11:15 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: /uy2B5ihFD0oskHYFRLwK8aSJCHJI1JsLwWZUnpwH2c=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Sep 21 05:11:15 2026 GMT
Not After : Sep 28 05:11:15 2026 GMT
Subject: CN=6ab0bc74-39fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:62:59:7a:ff:9e:8a:78:d7:c8:33:30:6e:
04:ed:f6:3a:04:13:51:23:b0:4b:f7:83:f5:92:1d:
d6:ad:43:3a:db:8c:83:07:4e:e3:37:28:53:67:90:
be:26:c0:50:81:f6:44:af:c3:84:80:aa:14:34:94:
d2:53:c2:88:a7:9e:e5:be:3a:83:83:fe:6e:c2:93:
24:5b:55:e0:ab:37:fb:ba:64:90:8d:43:b7:4e:2a:
f1:1e:f6:fa:80:a8:d5:6d:b4:82:17:9e:a9:6f:78:
88:3b:be:67:1b:9c:06:7e:7b:9a:fa:65:aa:37:aa:
19:f5:a9:81:aa:54:d5:d2:ed:d1:04:a4:e9:1a:f6:
88:6c:10:89:87:17:9c:d1:ca:d6:aa:58:a6:02:bb:
6b:b0:47:a0:2e:da:e9:5f:2e:96:99:20:c8:02:e5:
6d:71:47:66:47:9b:43:c4:13:d2:f0:c6:4d:63:d6:
f9:3d:52:60:79:2f:e3:02:f4:b8:4f:7b:3d:0c:ee:
9a:90:ed:a1:c8:26:8a:26:27:dd:b5:75:c3:32:31:
4f:ec:df:eb:93:3f:0b:81:bd:78:d9:66:88:0f:99:
86:b9:e9:dd:3a:6c:49:0b:9f:82:cc:e0:83:b0:2b:
1b:3a:74:81:09:84:85:09:f3:ae:56:dc:38:5c:47:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:00:57:5D:77:0E:EB:36:1A:C7:82:62:33:26:7C:62:BF:1F:82
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:27:e6:96:19:9a:ac:74:21:44:d4:22:5c:f4:46:e4:d4:d7:
f3:cc:cd:b5:4f:9b:d5:50:46:5d:39:6a:a0:22:7e:89:b5:a7:
4a:66:a9:89:a2:fa:75:22:de:10:a0:88:80:88:d2:e8:3b:0c:
e6:dc:82:57:29:5a:a8:08:da:ce:2b:16:a7:d0:a9:d7:ac:c5:
6f:81:62:06:7b:24:20:91:ef:84:fd:aa:ff:13:4b:04:b2:f3:
81:63:7e:c0:be:1b:23:25:6f:6c:ad:fd:a8:cd:db:57:ab:5e:
04:1f:6e:49:3d:fd:d7:c8:c6:59:2a:ce:99:a5:36:dc:6d:78:
0a:68:46:01:6c:ab:50:be:79:ab:39:85:4f:6a:88:b6:b6:59:
bc:77:c3:fa:44:2d:f5:bf:59:2a:97:6e:17:21:74:42:0a:33:
2c:cf:4a:9c:66:ca:0e:45:f1:b1:38:e8:8b:f2:62:65:4b:f3:
73:7d:e2:1d:b5:0d:76:2a:33:10:03:0c:79:8c:c8:34:7e:3f:
8b:5c:1e:43:cd:59:ca:a3:ac:26:2e:91:a7:5a:9f:91:c4:2b:
64:24:4a:26:1b:c9:76:e1:fa:01:16:30:a2:6d:df:b7:9c:a6:
a3:5b:ef:6f:d4:62:88:e9:44:03:4c:03:33:2b:7f:e8:33:42:
fe:a4:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:37:52 2026 by rpki-client