
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier: jHtgsssdBbNYo1Ss+Dzwwu2yzFlftiY1I0bWieJjovQ=
Subject key identifier: 84:B7:6C:F7:A3:27:6F:34:E3:8F:D3:F6:41:DB:33:10:44:03:68:DF
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number: F4
Signing time: Mon 02 Mar 2026 03:05:18 +0000
Manifest this update: Mon 02 Mar 2026 03:05:16 +0000
Manifest next update: Mon 09 Mar 2026 03:05:16 +0000
Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: LMDxwdhz91WbCtmEWj9pVBydY8HwSQ0gIyD3IMM3+Ms=)
2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Mar 2 03:05:16 2026 GMT
Not After : Mar 9 03:05:16 2026 GMT
Subject: CN=69a4fe6e-7335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:37:fd:47:9e:5f:c8:c3:85:70:1f:16:c6:
31:96:8c:6f:7c:32:ff:04:d7:58:ff:4f:e0:94:3f:
3a:72:2f:08:3e:e1:40:07:ba:1f:16:b2:11:ec:19:
5f:55:38:3a:54:d0:a7:b2:a9:de:3a:bf:dd:d9:18:
0c:57:01:ef:ca:55:87:b6:50:d8:e3:b2:c0:c3:5e:
30:63:af:3d:7e:cb:a3:71:4b:5a:7a:d5:17:60:66:
88:a9:a4:f1:3d:66:83:71:a6:37:b0:21:d5:34:52:
ac:40:f7:31:a2:4f:69:4a:aa:bd:8e:ba:2f:87:13:
a7:6b:d1:82:99:5e:a3:49:9e:d0:2c:e4:4f:0b:2d:
97:e3:d1:e0:e1:fb:6e:ca:70:d1:14:a8:0d:e0:55:
51:e6:aa:25:05:5e:b9:72:ae:d4:d1:69:ce:f1:53:
4a:60:af:27:a2:33:e3:eb:34:cc:77:6a:6b:26:48:
81:55:74:38:27:10:2b:80:f6:0e:ff:83:9d:97:25:
63:9f:b8:66:99:7c:cb:62:f8:56:e4:2c:e6:71:e9:
04:ae:92:7a:08:86:b2:dd:03:39:a5:ba:37:4a:85:
af:43:91:9d:3a:ec:e8:db:1f:1f:02:31:64:02:be:
89:84:aa:06:e7:e9:68:0c:1b:d2:a4:66:f2:3c:3f:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:6C:F7:A3:27:6F:34:E3:8F:D3:F6:41:DB:33:10:44:03:68:DF
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:50:c0:00:bb:3d:ad:26:25:8f:c9:8f:a4:17:57:18:49:
d3:1d:ee:92:bc:7b:8e:ff:70:a0:13:5e:85:0f:84:69:6c:cd:
27:8f:de:4e:28:ec:a8:3c:ff:ae:fa:90:12:1e:47:87:80:33:
ee:3f:9d:c0:80:e6:7f:66:e6:3e:0a:f6:41:13:7b:58:af:f9:
46:b1:be:10:0f:1b:80:bb:37:7b:db:b2:41:17:98:56:a8:92:
95:7d:13:f5:16:2b:91:6a:96:2b:52:57:5e:c8:2f:93:e1:e7:
29:22:25:1b:b5:5d:23:c7:7f:6c:c6:7b:26:5a:77:62:bc:8b:
8b:7a:b0:f6:86:7d:ef:6b:a8:3d:95:8e:b8:59:57:2a:d3:ba:
99:01:e9:e5:fa:f5:b5:47:2f:8b:a3:07:a5:34:2c:0c:93:05:
0f:7c:19:ab:78:52:ba:39:d3:d6:87:33:2a:1d:42:25:4b:9d:
dd:3e:cd:0f:a7:a6:75:99:52:4b:ce:22:f6:61:3f:47:8a:8f:
9d:fe:71:3e:9b:bc:31:f2:32:f5:82:6b:a3:f1:8c:ab:eb:bc:
cb:32:6c:a4:62:00:7d:26:d7:bd:6b:45:6e:c1:72:ca:c9:89:
b0:2e:1f:35:13:c3:e1:ce:2b:e7:c6:34:9a:4f:5a:bf:7d:4d:
99:6b:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:05 2026 by rpki-client