$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json) Hash identifier: 4zGwnHm6wEPMaF5GNrHQo9i3EtKLWsr+CKYk18yHQbg= Subject key identifier: FA:78:83:E7:59:D3:A9:51:17:24:E1:7D:0E:08:07:B0:17:CA:CE:89 Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft Manifest number: 1E Signing time: Wed 25 Mar 2026 08:05:31 +0000 Manifest this update: Wed 25 Mar 2026 08:05:31 +0000 Manifest next update: Wed 01 Apr 2026 08:05:31 +0000 Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: 5oWXCdVSHOyFrf6KD87oN002nBtvyCZXXiujJas/LY4=) 2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: hV/jnLK+I5DqGVULzWJLe2aTFemY0+Rn6OMG26sgrM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Validity Not Before: Mar 25 08:05:31 2026 GMT Not After : Apr 1 08:05:31 2026 GMT Subject: CN=69c3974b-3962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:78:a9:43:98:41:1c:87:40:78:4c:dc:fd: 68:15:2a:d2:29:b5:6f:68:5e:b6:42:71:3a:89:0c: cc:60:9b:76:c5:0b:9c:91:04:d1:4b:ba:33:48:68: 0a:14:56:f3:e5:de:be:67:9e:81:82:20:b0:48:90: d0:c7:30:c0:21:0e:87:57:ca:c8:d6:86:c9:00:8d: 4b:ab:15:03:9d:74:a6:61:8d:43:4d:48:3d:1f:88: 57:1b:a8:6f:46:cd:a0:5d:15:05:48:37:cf:41:70: f5:27:aa:ba:9e:5a:d9:51:73:76:fc:11:5d:50:96: c3:85:32:db:83:a8:9c:2f:7e:47:74:01:6c:42:3d: e5:a8:b3:ae:78:03:ee:a6:91:61:4b:93:f2:18:59: 3f:18:50:30:d6:d2:24:7c:94:0f:73:14:c5:32:4b: 5c:9d:97:71:e4:93:37:9a:e2:6b:26:b2:ca:22:d2: 6e:b6:4a:3d:b9:57:f2:92:6e:6d:bc:9e:e2:46:78: 24:21:a5:8a:39:1e:c9:7d:80:55:5e:66:bc:86:46: 82:65:c4:5a:4a:3c:07:4e:84:f7:d7:ec:26:0d:9b: bf:a1:df:9c:86:45:c4:9b:db:11:31:a7:2a:3e:61: ac:a0:da:32:a1:0f:de:bc:12:e4:b0:8e:7a:bd:3e: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:78:83:E7:59:D3:A9:51:17:24:E1:7D:0E:08:07:B0:17:CA:CE:89 X509v3 Authority Key Identifier: keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:77:39:92:c5:29:da:4b:c8:29:2d:9c:ee:d9:f4:78:7e: 73:06:1a:99:11:d7:f3:91:6b:b7:4a:4b:c4:8b:78:67:0b:79: 68:66:a5:3a:5e:51:b6:8e:08:c0:1d:4b:c1:fc:26:83:a7:60: 83:c1:c7:19:23:23:e2:3d:5b:66:cc:91:b5:5f:f2:4e:22:1d: 43:8d:22:c3:3e:2e:8a:22:11:5b:b4:16:03:44:00:4f:f4:bf: 87:4c:82:08:c2:3e:bd:54:af:ca:b5:fd:a0:b2:52:06:86:d3: bd:87:9e:9f:37:c2:6b:1a:3d:ac:06:36:82:38:81:01:db:44: 86:18:da:7a:f9:6d:53:b9:f8:b8:2a:4b:4c:9a:11:30:28:bf: 85:78:44:1c:35:f6:a5:88:86:29:db:ba:f3:4e:a4:86:5f:75: b6:2c:e6:ac:19:7f:6f:7e:12:ed:be:42:60:68:b5:fe:ae:33: 73:5f:fe:a2:15:46:61:fa:cc:e5:bc:5b:da:c2:79:50:73:15: d8:eb:e1:d3:33:cf:eb:48:90:c8:50:10:83:0f:c3:80:76:93: 51:8b:b8:eb:cf:6a:50:b3:79:b2:89:1b:4c:0d:5a:1f:ec:11: ca:69:bf:ff:53:53:ed:a1:a7:0c:0e:86:6f:74:4d:a7:75:a8: 2c:59:d0:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDY0ODExMC8GA1UEBRMoODlENjkwNDZFQzdDNzFBRDdGRkY5OEU0RkQ5QkI5ODgx RjI5OUM4OTAeFw0yNjAzMjUwODA1MzFaFw0yNjA0MDEwODA1MzFaMBgxFjAUBgNV BAMTDTY5YzM5NzRiLTM5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPznipQ5hBHIdAeEzc/WgVKtIptW9oXrZCcTqJDMxgm3bFC5yRBNFLujNIaAoU VvPl3r5nnoGCILBIkNDHMMAhDodXysjWhskAjUurFQOddKZhjUNNSD0fiFcbqG9G zaBdFQVIN89BcPUnqrqeWtlRc3b8EV1QlsOFMtuDqJwvfkd0AWxCPeWos654A+6m kWFLk/IYWT8YUDDW0iR8lA9zFMUyS1ydl3Hkkzea4msmssoi0m62Sj25V/KSbm28 nuJGeCQhpYo5Hsl9gFVeZryGRoJlxFpKPAdOhPfX7CYNm7+h35yGRcSb2xExpyo+ Yayg2jKhD968EuSwjnq9PuV/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+niD51nT qVEXJOF9DggHsBfKzokwHwYDVR0jBBgwFoAUidaQRux8ca1//5jk/Zu5iB8pnIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRENjQ4LzAxRjcwMkYwMDAx MjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2ExX181amtfWnU1aUI4cG5J ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRhUVJ1eDhjYTFfXzVqa19adTVpQjhwbklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE NjQ4LzAxRjcwMkYwMDAxMjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2Ex X181amtfWnU1aUI4cG5Jay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBId3c5ksUp2kvIKS2c7tn0eH5zBhqZEdfzkWu3SkvEi3hnC3loZqU6XlG2jgjA HUvB/CaDp2CDwccZIyPiPVtmzJG1X/JOIh1DjSLDPi6KIhFbtBYDRABP9L+HTIII wj69VK/Ktf2gslIGhtO9h56fN8JrGj2sBjaCOIEB20SGGNp6+W1Tufi4KktMmhEw KL+FeEQcNfaliIYp27rzTqSGX3W2LOasGX9vfhLtvkJgaLX+rjNzX/6iFUZh+szl vFvawnlQcxXY6+HTM8/rSJDIUBCDD8OAdpNRi7jrz2pQs3myiRtMDVof7BHKab// U1PtoacMDoZvdE2ndagsWdDZ -----END CERTIFICATE-----Generated at Thu Mar 26 08:21:42 2026 by rpki-client