
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: 0R//85Z4obJ5D5LKoV41NQ5i8WmPOl9eeUrkWSCIp5c=
Subject key identifier: 4A:95:4F:24:0F:2B:24:A5:14:48:57:2E:A1:6E:2F:89:CD:45:38:C3
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 0167
Signing time: Mon 19 Oct 2026 05:38:53 +0000
Manifest this update: Mon 19 Oct 2026 05:38:52 +0000
Manifest next update: Mon 26 Oct 2026 05:38:52 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: mYsa8PGCQCs2VcfMNhG+qG5exPSi6zZ9pkr4/ONalbw=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: LTUGxDOLtfZ0NesWYWcxebgzBLD93r6lK3fhIulzleY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Oct 19 05:38:52 2026 GMT
Not After : Oct 26 05:38:52 2026 GMT
Subject: CN=6ad5acec-7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:58:36:ea:35:51:5c:34:fb:29:45:bc:c1:
47:4e:82:b5:41:65:ce:84:17:92:26:1e:45:71:3e:
d9:50:e0:0a:aa:57:c2:82:b6:37:a6:8b:6b:48:a7:
e4:5f:c2:ac:dd:e8:09:d3:1e:a7:44:4b:27:23:65:
82:a1:06:01:eb:c4:08:da:ae:1d:80:e0:66:1a:98:
b6:6b:4b:8b:d7:99:c8:b0:85:38:b4:fd:b3:8b:3d:
b4:0e:ae:83:17:cf:65:31:e0:02:c6:6b:1a:71:96:
f8:12:ee:05:dc:a5:f3:f3:ff:ab:6b:2b:c7:40:4a:
8a:b9:4a:ea:09:58:ce:d8:bb:21:ba:f5:5d:82:d7:
30:30:d6:6f:8e:42:00:87:37:c3:bf:a3:98:5e:40:
d8:7e:52:26:1c:36:5b:48:c5:74:44:39:44:9e:9c:
7b:ac:22:47:b0:67:1a:59:56:d3:d9:1f:e4:d7:96:
4d:e9:fa:30:38:40:35:5a:d6:c9:50:5f:a3:a7:4a:
ee:97:21:86:dd:b2:e9:77:5c:7c:b3:84:9c:34:c6:
ca:84:3a:b9:94:d5:79:0a:6c:ad:36:29:13:58:4e:
6f:f3:b2:71:e2:4b:30:11:68:d8:e5:b1:77:a9:47:
6e:bb:36:87:2f:dc:ef:fe:8d:31:aa:2a:e6:90:43:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:4F:24:0F:2B:24:A5:14:48:57:2E:A1:6E:2F:89:CD:45:38:C3
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:3f:45:99:8f:c2:8b:27:51:40:21:a7:f2:e4:03:fc:b6:4a:
fc:3d:e1:4f:a1:8c:3c:7c:1f:da:39:e5:9b:a5:de:d6:9f:87:
50:1f:ca:c6:4d:79:16:db:ce:96:4d:0d:69:da:74:92:1b:8d:
c4:5d:b4:21:dc:71:ae:7d:06:aa:32:0b:e5:64:53:ab:35:11:
12:35:f6:cc:d0:fb:8d:b5:73:35:53:a5:23:62:1b:b2:57:83:
91:a6:93:31:75:9c:e9:b7:aa:d8:18:ab:05:e5:39:e4:2d:c4:
e1:81:6f:47:a2:7d:1f:0a:69:60:97:3c:ae:41:de:79:15:d0:
2f:39:18:78:bf:65:3c:f5:b6:66:ff:44:bb:b9:ec:0c:bd:e7:
9e:a5:13:f9:dc:d5:35:e6:e4:e4:19:92:c6:cb:37:fb:f9:05:
b9:a9:6d:70:b9:c7:89:3b:42:d3:7f:b0:cc:64:98:d6:47:7f:
49:c7:0d:cd:e3:7b:7e:de:ea:5a:3a:c0:7b:13:36:c2:83:74:
22:69:e4:8a:74:11:a7:c3:81:e5:1c:16:0e:84:0b:f9:58:19:
cf:a5:e2:98:4e:6c:98:2b:22:55:34:e9:88:6e:f3:65:1c:26:
69:62:8f:5e:4b:90:84:04:e7:37:db:ac:98:5b:18:e1:d4:0d:
9c:b9:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:57:09 2026 by rpki-client