
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier: fJfjdFIePjRvmjw1sr40xkR2chVlqSPpQygdfEvZO+A=
Subject key identifier: 9C:B5:0D:E9:0F:0C:00:13:E8:56:66:67:EF:D2:86:64:0D:DD:B1:F5
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number: 0106
Signing time: Sun 05 Apr 2026 05:29:47 +0000
Manifest this update: Sun 05 Apr 2026 05:29:47 +0000
Manifest next update: Sun 12 Apr 2026 05:29:47 +0000
Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: lhWH8468m5vJyXV16S/Mw1mpUtufGRzUv62OP/sIu9Y=)
2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Validity
Not Before: Apr 5 05:29:47 2026 GMT
Not After : Apr 12 05:29:47 2026 GMT
Subject: CN=69d1f34b-89fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:27:aa:83:bf:74:88:bb:3c:79:7a:56:3e:
5c:1e:6e:a1:49:16:ec:a5:31:1e:d8:9a:ac:1e:69:
41:f1:db:60:b0:dc:f5:8a:a8:56:cd:70:e2:b9:97:
f6:ed:49:22:e2:e7:4d:3c:aa:f2:eb:64:d4:c4:46:
c0:df:20:cb:b1:f9:fb:53:5b:35:dd:c3:4e:38:b6:
c8:a4:6b:9e:f2:c8:96:25:4d:75:96:d8:97:07:a5:
51:ad:ac:85:18:42:2b:db:c6:83:d8:10:bf:0b:c8:
e8:7f:c2:c9:4d:ed:bf:d1:21:5a:0d:40:eb:9c:24:
bb:af:e1:36:ae:63:d9:1a:26:cc:e3:16:12:f4:e5:
9c:d4:cd:47:5f:e4:eb:42:90:9d:07:2c:bb:42:f8:
2b:b8:e7:b0:45:0e:f7:a6:5a:5a:bc:1b:93:af:ce:
62:79:19:5e:2c:70:47:a6:1a:ae:09:11:aa:24:0b:
2b:7f:26:0e:c2:b0:70:de:ab:0e:4e:cc:07:58:6a:
ef:73:a9:3c:49:ef:c6:74:6b:08:e8:e3:3a:c0:56:
82:ee:81:48:71:ac:b0:c9:e9:b2:4d:6c:88:c8:57:
ac:e6:8a:28:d0:00:29:cf:3e:cc:70:18:a2:cf:4d:
3f:ba:94:c4:b5:de:f1:aa:76:df:5b:30:3c:37:f2:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B5:0D:E9:0F:0C:00:13:E8:56:66:67:EF:D2:86:64:0D:DD:B1:F5
X509v3 Authority Key Identifier:
keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:97:74:8c:93:48:b2:ff:60:27:79:cc:6f:4e:05:d4:8f:
26:b4:62:c9:7b:7c:36:89:dd:64:29:fb:f0:4e:de:7b:e0:27:
12:51:29:73:6b:59:ac:fe:67:39:65:09:ee:b2:2b:f4:e9:4c:
8a:05:70:f7:7d:4c:2f:cb:eb:ff:52:64:93:0c:b6:a1:c0:81:
b6:46:84:4b:4d:2c:19:30:69:96:02:a6:62:16:64:44:1d:3a:
3b:fb:bb:1b:91:bd:1c:b8:bc:9a:d0:57:12:c4:1e:ce:4f:9e:
b3:70:02:a1:a0:9b:31:1c:f5:12:7c:ac:34:a8:34:56:f0:0f:
1f:b3:18:e0:5d:64:94:2a:73:04:41:73:83:55:2e:0f:06:6b:
79:5a:83:04:d7:5a:d7:00:47:f9:96:5f:10:45:ca:47:ae:dc:
72:4c:b4:65:2c:c7:06:c5:81:1b:1d:34:7c:83:e0:b8:81:91:
8f:08:b9:1c:5b:9a:65:6c:3a:3d:31:99:9e:70:59:7c:52:05:
6e:d9:66:41:df:e0:4b:a7:11:41:d2:80:16:73:42:b6:60:f9:
54:ee:f2:bd:a3:35:e3:15:76:02:90:8f:47:bf:3b:25:21:bf:
eb:3c:8f:a1:bb:c9:90:3d:60:38:89:1d:60:4e:a1:d1:e5:9b:
e8:68:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:55 2026 by rpki-client