
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier: P41JyWTtK/SrVBP5u5slrLhn85knugtKR4MGMJraSMU=
Subject key identifier: 63:02:CD:F6:2E:7F:CD:07:8C:3F:40:A5:CF:96:09:1E:CA:C9:73:66
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number: 0168
Signing time: Sat 17 Oct 2026 05:36:11 +0000
Manifest this update: Sat 17 Oct 2026 05:36:11 +0000
Manifest next update: Sat 24 Oct 2026 05:36:11 +0000
Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: c9UKdnDE9+fAPV8t2yDfTMMc9zLsS5e4LQC01RGeTl8=)
2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Oct 17 05:36:11 2026 GMT
Not After : Oct 24 05:36:11 2026 GMT
Subject: CN=6ad3094b-f816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:19:e1:0b:92:3d:c5:85:07:fd:10:10:e1:c1:
01:78:0e:ab:97:10:97:44:66:d1:21:d9:ce:bb:f2:
63:58:a3:8a:4a:78:68:a6:00:77:63:c9:eb:91:6f:
85:d9:0b:c2:5d:b0:db:5f:3f:aa:ca:f7:a0:af:fa:
10:e1:b4:d7:be:75:0f:0f:c7:6e:fe:ba:c4:80:b8:
cd:04:e7:d3:07:47:72:90:7e:14:7d:d3:51:8a:1f:
95:6b:95:a6:c4:cb:e8:68:3d:7f:97:c3:46:35:a9:
a0:94:1e:7b:39:c2:f0:93:7a:5b:f1:ed:34:30:23:
48:10:a2:3b:b5:14:f8:76:86:a3:f5:d5:6d:de:81:
17:ec:dc:87:06:3e:6e:13:b6:60:0a:1e:3f:e7:e5:
03:c4:22:e0:34:a4:63:db:78:b2:51:af:60:4f:b4:
23:d8:93:60:78:cf:c2:bc:2a:1f:49:36:b8:06:06:
67:7e:c9:b3:3e:33:f6:8b:15:24:b4:90:e6:78:13:
3a:c0:a1:25:69:6e:31:cd:64:57:9f:7f:59:ef:7e:
75:ba:19:9e:4f:fe:84:36:da:c1:81:15:41:c4:e1:
9e:84:a8:ff:21:d1:93:e9:24:f1:15:e7:2e:9d:ea:
ce:d7:56:b8:0f:7d:69:0f:4e:d0:37:9e:58:aa:fe:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:02:CD:F6:2E:7F:CD:07:8C:3F:40:A5:CF:96:09:1E:CA:C9:73:66
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:84:8f:f3:dd:c7:41:8a:60:01:c0:85:1f:39:a2:83:ef:dc:
ba:85:c2:48:fe:3b:aa:ca:0f:75:b1:d8:cd:84:2d:85:5d:f9:
98:20:89:69:a5:f8:ab:20:4f:80:ba:b9:69:56:57:28:9d:3d:
2f:d7:76:00:a2:7f:a9:42:9d:7b:3f:86:b0:62:4d:af:dc:6c:
c1:42:68:12:d1:6a:6b:1e:a9:b6:23:c4:d1:38:67:b9:7d:5a:
5e:20:e5:fb:bc:d1:df:cc:24:a9:7f:22:84:0c:f3:80:ac:a9:
20:cf:42:eb:bc:04:71:5a:85:1e:e2:68:73:0a:82:a9:78:36:
eb:b1:0a:4b:21:cc:b5:c4:a7:d5:27:54:e8:93:b7:4d:69:c1:
9e:97:63:8c:47:6f:c8:cc:58:08:6a:69:52:9d:a8:78:db:c2:
f8:7e:f3:b3:98:3a:bd:fa:2d:81:18:1d:d4:ed:ef:31:b6:51:
66:7e:92:9b:3d:56:80:fa:a3:db:ff:88:f4:a1:6d:8b:e6:48:
84:6c:65:59:0b:c1:39:5e:75:5b:ec:eb:04:32:13:32:d7:94:
91:d8:12:fc:a8:31:0b:cf:1d:65:6e:86:81:d0:18:de:7d:7c:
2f:d0:c9:3f:a8:43:06:e9:e1:3b:85:87:3d:c7:b0:cd:c2:16:
12:4a:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:56:41 2026 by rpki-client