
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier: F27bw4iNk7/zJEctv/67IAalHDve2QtQT3AKfzXftEI=
Subject key identifier: 55:D1:CC:7F:A2:BC:A2:4E:68:45:71:AA:3C:D1:E3:5C:D6:86:A8:4C
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number: 3A
Signing time: Fri 15 May 2026 08:43:20 +0000
Manifest this update: Fri 15 May 2026 08:43:20 +0000
Manifest next update: Fri 22 May 2026 08:43:20 +0000
Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: d9duuruUpQ5c+i+hK9+iNJ1k7vn9HDN2KGbuyHAP6Wk=)
2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Validity
Not Before: May 15 08:43:20 2026 GMT
Not After : May 22 08:43:20 2026 GMT
Subject: CN=6a06dca8-2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:1b:dc:13:cc:0a:b9:39:bd:76:27:48:85:
dc:6b:7c:fd:ca:de:59:8b:27:2f:62:7a:3b:0f:53:
00:e1:26:10:dd:58:ca:6d:88:ba:b0:f1:a6:db:4d:
31:02:2e:40:63:f5:61:b5:66:04:27:2a:65:d8:ff:
5b:4e:b0:92:15:ac:88:57:39:b2:98:9c:14:f0:25:
c1:c0:b8:27:8f:f5:c2:0b:e0:50:9e:34:65:d7:98:
49:77:0d:dc:12:07:8a:20:2a:b3:2f:54:38:7f:3e:
f7:ce:5f:b1:f8:d0:54:e5:40:d3:be:57:40:bc:ae:
48:fd:83:21:84:74:a4:c5:91:81:39:12:23:2b:14:
20:fe:a6:70:8b:f3:ac:2d:b2:80:32:16:d4:c2:83:
8c:eb:b5:a4:58:63:a4:03:cd:91:06:cb:08:ff:2f:
83:42:07:c8:6c:c6:57:65:99:ac:b1:3c:a1:63:16:
e1:26:21:5a:80:18:92:56:c1:88:ed:05:d6:50:d4:
e9:07:0d:67:91:bc:c3:14:cf:f5:2b:16:65:ee:9c:
7c:6f:c2:5c:a0:8b:62:93:a1:c8:ed:0d:39:8e:90:
b0:0f:21:6d:70:8c:93:08:76:b8:f6:64:ab:dc:69:
d2:87:3b:1e:0c:29:c2:28:e2:04:46:29:34:0a:6c:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:CC:7F:A2:BC:A2:4E:68:45:71:AA:3C:D1:E3:5C:D6:86:A8:4C
X509v3 Authority Key Identifier:
keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b6:1f:ac:79:72:ac:7d:a5:d3:82:25:e4:00:27:4c:18:24:
75:20:78:48:94:85:11:20:0c:40:00:8e:3d:eb:06:7c:16:cb:
c1:58:20:e4:3b:28:7f:fe:85:08:3d:a0:d9:42:40:68:d2:c9:
4e:59:47:ba:69:fd:98:6e:7c:7f:e2:13:7e:7c:79:10:5a:6d:
fa:e5:4c:9b:c2:b0:26:f1:79:81:91:fe:fa:0b:d0:65:ab:8e:
05:a3:00:ba:c9:62:c9:dc:e7:f1:af:8b:da:7d:21:9d:cd:a6:
01:dc:6d:65:f1:cd:ae:af:57:73:1f:fe:32:48:e5:19:4b:dd:
b1:45:e6:94:77:cd:d9:48:12:e9:57:31:36:b5:35:6c:7d:c0:
0e:c8:df:f0:f9:cc:c8:ec:0b:73:2d:1f:74:7d:bf:e5:ba:16:
5c:39:66:12:dc:42:7b:a6:0a:a4:84:4d:e4:b2:5c:0c:c5:cf:
19:df:4b:75:a1:27:f3:54:2b:5e:88:b9:e7:1c:3d:c2:48:cf:
17:ba:27:0e:84:72:b0:b2:99:61:05:66:22:00:ea:35:80:2e:
70:88:e6:88:08:3a:de:38:f5:99:dd:5b:d2:16:2a:59:06:dd:
37:e4:23:e4:b8:15:79:81:90:fe:64:76:3d:53:1a:ba:85:e0:
4d:4e:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:18 2026 by rpki-client