
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: 0xEhnml149ahp5QrZiqThLDdFOyV4bSXkKrKFheEWLE=
Subject key identifier: 75:97:5E:F7:65:EF:22:6C:F9:B5:0D:DB:73:BE:33:B0:F7:24:C8:F5
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 0137
Signing time: Fri 17 Jul 2026 06:41:07 +0000
Manifest this update: Fri 17 Jul 2026 06:41:07 +0000
Manifest next update: Fri 24 Jul 2026 06:41:07 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: 0N7n870AKcodv93yYB7CQVntI/TwMgWJdE24/DI6i2Q=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Jul 17 06:41:07 2026 GMT
Not After : Jul 24 06:41:07 2026 GMT
Subject: CN=6a59ce83-4503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:6c:a3:16:09:69:50:d4:89:e3:d3:2d:6f:
a6:d7:f9:77:a0:b9:27:30:51:30:87:22:fd:bd:e1:
a0:5c:e3:d9:4e:fd:02:8c:1e:c6:cc:94:ab:d9:97:
f2:83:46:50:df:42:6b:68:a8:35:c1:75:ba:8f:bd:
69:2a:25:74:44:c0:ba:b4:d5:8d:72:63:8d:32:f5:
71:b2:11:a3:0d:85:ba:ff:ad:b6:2e:b1:69:72:73:
e2:a0:bc:94:f5:f0:4e:da:aa:6b:92:6a:7f:6f:2f:
74:d3:bd:b5:88:24:71:e7:46:10:f6:d9:fd:ac:19:
09:ba:97:d0:85:10:ab:59:13:f5:c3:a4:18:a3:9d:
1e:1e:72:1d:e0:96:c2:e2:b0:0c:31:85:16:8e:c1:
cd:a5:c8:05:d0:8b:6f:b9:63:19:41:93:19:54:f2:
fe:68:5d:7e:83:d1:42:a8:58:98:83:31:54:4e:cb:
a9:3a:f1:39:06:e1:7e:ef:43:3b:0c:ac:40:a2:84:
f6:d2:b7:80:68:85:08:4f:00:65:6a:aa:09:98:e0:
c2:0d:bb:d7:6f:c9:48:89:91:59:ad:49:fa:91:bf:
61:bf:b0:3b:e3:73:be:0a:9a:54:0e:1a:02:39:8d:
1f:96:b8:f1:ee:48:2b:eb:47:0f:ac:53:be:3c:e4:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:5E:F7:65:EF:22:6C:F9:B5:0D:DB:73:BE:33:B0:F7:24:C8:F5
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b1:fc:fb:91:94:31:1a:12:0c:9b:d7:e2:72:45:2a:3e:5d:
33:b8:22:26:d1:c9:cd:86:5f:b6:80:1e:3d:b1:80:22:18:c5:
92:5d:60:24:a6:ef:34:1f:c9:c7:82:de:27:89:98:a7:ba:6b:
79:a2:5f:96:ea:2b:ef:31:d5:f7:ab:1f:5d:f5:1e:eb:2c:d7:
d0:94:af:5b:50:54:6b:d7:28:98:46:c3:5c:b5:03:62:98:94:
65:85:c8:4a:30:bc:88:95:25:06:6d:e0:1c:96:3c:58:d3:06:
11:c7:ae:0d:ce:d4:04:a3:d6:e5:23:c4:40:e3:a4:87:32:a7:
a4:8d:20:98:4a:83:4b:34:1d:c5:69:39:3b:ba:07:c3:15:20:
73:9f:b3:cb:6e:b5:1b:9a:3f:bf:54:f1:86:49:61:51:c6:9a:
51:c0:d9:d3:57:49:a9:17:0f:17:e0:4b:58:f5:ef:d5:0b:47:
58:3e:57:e0:99:28:f8:c8:67:08:f4:7c:b8:99:e3:1e:b4:ad:
12:87:99:f3:1f:c5:18:34:80:22:11:db:a1:7a:e2:88:fa:ae:
9c:75:7a:e8:bd:49:9b:b3:e3:36:1b:f4:6e:9a:24:21:3a:45:
4a:47:d0:83:c7:f5:c5:09:0c:8d:96:64:eb:37:9a:ba:0c:f2:
a2:76:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:46 2026 by rpki-client