
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier: 1RCrdUUOvVCNfuhFlAiye8fTY0zRGsZNQp8Wq3fvKnk=
Subject key identifier: 55:E9:02:EE:AD:C4:B6:25:5A:15:2B:AE:AA:5D:97:4A:12:52:0A:7D
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number: 0123
Signing time: Mon 01 Jun 2026 06:30:34 +0000
Manifest this update: Mon 01 Jun 2026 06:30:33 +0000
Manifest next update: Mon 08 Jun 2026 06:30:33 +0000
Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: RXJhysqFpY1jVwKISpoOiuNC3zATlxjUGN6uqcaXOZ0=)
2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Jun 1 06:30:33 2026 GMT
Not After : Jun 8 06:30:33 2026 GMT
Subject: CN=6a1d2709-9119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:7a:9f:b2:8d:a2:10:21:41:b1:2c:7f:cc:
8a:d2:e8:00:d5:70:d7:76:8e:ae:59:e1:e6:9e:dc:
60:96:7f:05:4c:26:d6:96:43:40:6a:e8:80:57:11:
71:71:48:2b:5e:da:4a:d6:35:d8:e4:c9:ab:91:af:
f3:1b:32:cf:1d:3c:7c:04:85:09:be:45:8b:36:aa:
2c:31:b4:89:02:c6:40:fa:21:15:26:7a:f8:8f:9c:
c1:d4:5e:7a:19:d7:0b:8b:22:58:ec:87:31:d8:24:
3a:10:dd:24:f3:74:31:8f:c5:2a:f0:14:d9:5f:52:
37:12:5e:4f:bb:1f:bf:72:b7:25:a3:1e:75:8b:71:
f8:95:79:f5:75:47:5e:b4:d2:3a:d7:d1:59:e0:fa:
98:26:bb:b1:4f:8a:68:f0:95:76:b6:87:f2:3a:be:
cc:b4:ce:5d:d1:0f:aa:90:e7:33:56:a5:c8:8e:71:
ba:52:ef:8f:06:a7:22:38:fd:40:03:5d:c6:0d:fd:
d3:c5:4e:ca:b4:8b:99:03:4d:e5:6b:9b:44:a9:15:
38:7a:cf:48:d9:d7:40:0f:9c:eb:df:30:68:f3:f6:
2d:99:60:a6:f0:15:b6:b4:0b:8b:9a:91:c6:fc:8c:
1d:a3:d0:8d:1f:a5:cd:61:74:3c:77:84:58:0d:c5:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:02:EE:AD:C4:B6:25:5A:15:2B:AE:AA:5D:97:4A:12:52:0A:7D
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:56:75:a2:4a:5f:e7:fe:5e:18:71:2e:63:89:c0:e1:1a:72:
99:3b:a8:ba:00:19:39:4b:6a:c5:a2:0a:e3:2e:bf:17:a0:8f:
fc:36:1c:d9:a8:71:da:d4:47:a0:ea:77:10:bd:61:0b:f1:1c:
f5:7e:c5:5e:50:b5:e4:54:8d:22:3d:18:70:42:e9:fa:a3:5c:
05:2b:b0:de:1d:43:99:eb:f1:e2:fe:78:d7:07:55:57:d0:ce:
df:69:bf:b7:15:42:29:f1:77:98:d2:b3:57:8b:9b:32:b8:eb:
21:4d:db:11:8e:94:4b:ad:bf:78:66:ad:2a:6d:11:5b:91:a1:
19:20:5b:b9:53:8f:be:db:d3:97:ef:61:4b:67:99:23:88:fc:
66:8e:00:11:ec:9b:a7:18:76:7c:e9:01:8a:f0:19:6a:a3:49:
31:99:31:8e:1b:53:0e:ad:48:e6:f0:da:48:63:b1:cb:b0:f2:
2f:c7:3d:ea:c3:e2:74:6d:0f:26:a1:41:eb:7b:31:8b:0e:aa:
aa:5a:6a:63:7a:f9:ad:61:16:91:0c:90:61:b4:c2:ef:3b:c3:
3e:89:81:fe:e0:aa:50:cf:8b:27:d4:37:b9:74:e2:fd:18:b7:
c6:83:23:cd:25:ba:58:44:28:c8:f9:9f:c9:32:e8:fe:d2:67:
08:ee:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client