
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier: EwaXYqDe7uhCGSKZlXdR4R1gI3pvdc/V+S1xSpgVv1E=
Subject key identifier: F2:E8:99:DC:B5:60:51:CE:D0:D4:FB:EB:B6:DA:24:2C:6C:C1:08:7C
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number: 6A
Signing time: Wed 19 Aug 2026 08:43:09 +0000
Manifest this update: Wed 19 Aug 2026 08:43:08 +0000
Manifest next update: Wed 26 Aug 2026 08:43:08 +0000
Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: ZEtsRVNJNzlTgHEYivo8zzsLwh2Mb9QSaw6sbE3vs8U=)
2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Validity
Not Before: Aug 19 08:43:08 2026 GMT
Not After : Aug 26 08:43:08 2026 GMT
Subject: CN=6a856c9d-c7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:d0:f3:ba:0e:2e:55:74:9d:86:43:88:f3:
8f:d8:f4:23:d5:b6:b1:76:95:57:54:d6:ec:14:6a:
2e:65:34:fc:ad:36:93:c4:11:4f:57:53:33:83:ff:
db:85:26:6d:ee:c9:27:3c:6d:92:ad:8f:22:0c:d2:
88:73:26:0e:5c:e7:46:1d:10:a0:f2:91:1f:66:b5:
61:17:04:42:d9:d1:30:b2:65:ed:78:f4:59:55:3d:
de:4a:14:3e:84:42:26:85:3a:f6:3e:50:4a:d2:56:
a8:bd:54:6a:38:3e:2e:1c:f0:63:fa:db:7f:55:83:
a1:b7:e8:1c:81:5f:dc:d0:25:97:91:9a:7d:8c:90:
2e:5b:85:a0:f0:58:1d:d7:5c:c9:b4:48:44:7f:0f:
81:92:d5:3e:25:00:42:98:90:81:bf:83:da:26:b0:
01:c7:0b:f9:ef:15:a6:19:52:5e:8c:d1:5f:6c:0a:
35:de:39:89:a5:d3:3a:d0:39:fc:7f:7c:eb:e2:ce:
9d:8a:97:71:ad:f1:54:30:41:69:74:78:e6:bc:60:
8e:b3:e0:65:d4:db:90:76:b3:af:e7:52:25:f2:ff:
88:cf:83:1a:10:76:1c:cb:ba:ca:0e:39:e2:02:f5:
7d:b3:f5:9c:cf:50:90:5c:0b:75:4d:ce:0f:10:18:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:99:DC:B5:60:51:CE:D0:D4:FB:EB:B6:DA:24:2C:6C:C1:08:7C
X509v3 Authority Key Identifier:
keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:4b:8c:0c:e7:8d:45:49:8e:29:69:ce:34:82:09:37:a6:
ef:d6:83:b0:f6:ee:cb:f6:19:ea:1b:f4:b9:a6:82:29:3e:13:
e6:dc:3f:a2:d3:98:66:6b:79:c4:c1:65:6b:55:93:9d:b1:b5:
b9:cb:b5:f7:69:c5:42:b9:01:5c:26:74:93:ce:1e:0d:ea:07:
52:d6:7c:6b:e7:a7:0c:cd:02:9e:29:5a:50:4f:db:a8:02:86:
a8:10:33:6a:1a:ab:b0:30:c0:60:89:ba:0d:3b:57:31:9c:70:
ff:1d:2c:1c:dc:35:d9:0d:4e:46:42:1d:8e:25:dc:9a:49:88:
e3:de:ac:75:49:47:1c:e7:fa:34:9f:c8:ce:67:3c:76:93:16:
b3:8f:18:47:65:af:06:bf:c3:01:f8:84:c9:08:34:3f:9b:a1:
5c:ef:85:5c:b7:b6:8f:8d:2e:6f:45:c8:af:7b:6c:8e:82:ed:
86:e5:85:e9:8d:87:27:30:50:b8:1c:5a:ca:a5:52:fd:13:71:
2f:24:9d:52:f1:58:12:b9:54:b4:50:d1:0e:57:73:f3:36:70:
84:95:05:14:d3:b2:e8:01:b2:b5:72:ba:85:36:71:4e:7a:90:
a7:eb:d5:4a:d4:4d:5f:ca:7d:29:0a:bc:82:f9:54:70:9c:86:
63:31:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:02 2026 by rpki-client