$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json) Hash identifier: UtkEQz4AE4i9QeH2IxerTD6oB9v7idADRVgv3TED72s= Subject key identifier: 56:1F:99:4A:99:B2:84:C6:94:22:12:B6:34:CA:BD:04:03:E0:AF:38 Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft Manifest number: 38 Signing time: Mon 11 May 2026 09:42:02 +0000 Manifest this update: Mon 11 May 2026 09:42:01 +0000 Manifest next update: Mon 18 May 2026 09:42:01 +0000 Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: DVK04KcexsddtraCmv/CEwMIuuypgpDYumPOjo0jP5Q=) 2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Validity Not Before: May 11 09:42:01 2026 GMT Not After : May 18 09:42:01 2026 GMT Subject: CN=6a01a46a-bdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:c7:4c:64:12:25:d0:3a:68:25:a6:a0:4c: 6b:b7:00:66:0b:b5:22:a5:dd:6c:93:ba:13:b5:56: 3d:df:ea:18:57:15:27:2c:bd:e7:f9:5d:3e:22:fa: 76:fd:46:0f:fb:cb:cd:46:3a:a0:f4:2d:c1:2a:64: 3e:25:b2:dc:85:b7:16:5d:53:0c:24:b3:1b:ae:65: d5:2d:bb:32:fa:e5:f1:a4:7d:19:96:d0:4f:db:a6: dd:48:79:2f:91:ba:97:03:af:b7:7c:ab:a2:41:40: 7c:7b:1f:23:12:81:06:02:b7:78:56:e3:65:ad:1d: c1:f8:88:74:82:56:56:3e:20:b2:4d:44:62:93:3b: 1e:a7:1c:1d:80:32:73:e8:2e:32:1c:c2:54:4d:92: e2:85:00:0e:2b:58:51:07:46:e9:69:1e:08:3e:ba: d5:0a:35:3e:6e:79:f1:d2:dc:08:4b:3c:ce:81:11: 3e:42:61:47:bf:83:fb:9b:8f:40:4c:dc:80:59:c2: 15:24:27:ec:0b:46:ad:c8:e2:06:b3:a9:7f:22:a7: 0a:f8:52:0c:9a:02:99:f8:6c:d2:21:0f:b5:69:25: 32:1e:eb:ff:a2:ca:66:78:92:71:e6:0e:d6:b6:4c: be:e0:77:3b:25:a8:36:e0:d3:4a:e4:94:a2:97:09: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1F:99:4A:99:B2:84:C6:94:22:12:B6:34:CA:BD:04:03:E0:AF:38 X509v3 Authority Key Identifier: keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:6f:54:83:ae:08:a5:1d:95:06:50:fd:2e:f9:a2:a3:75:7f: b6:0c:af:8e:cd:50:e9:fa:30:7c:77:81:78:3a:ab:93:7d:b8: 0b:a8:14:e0:10:27:25:9e:e1:e5:f7:c4:84:f2:c9:82:cc:da: 82:50:ca:bc:0f:46:f9:07:31:02:fb:ea:b3:aa:8d:2e:e6:df: 19:2f:22:3e:a3:4e:13:27:b5:1f:ec:13:94:68:ec:04:d1:ad: 34:69:12:7c:2f:35:76:2b:94:7f:bb:fa:cf:d3:01:cc:07:24: 6d:fd:6b:77:52:38:a5:ea:43:0e:9e:ad:ee:ce:83:84:06:86: 53:bc:1f:25:db:87:46:7c:68:d6:02:13:c4:92:85:ad:d2:4a: 19:8b:cb:b9:b2:b6:3e:cb:4d:81:ae:40:6a:37:8c:1b:2f:47: 10:17:12:f6:58:fd:e5:aa:e3:48:f3:4f:c3:78:a0:ff:02:21: 7e:c4:c8:b9:8c:56:4d:c0:cb:1e:4e:ee:76:da:27:11:06:4b: fb:53:28:69:0e:f3:4f:62:5b:48:c1:68:2c:23:f4:83:d6:cf: 40:a8:10:1b:58:71:fd:5f:98:36:87:2a:9c:94:f5:62:60:e7: 08:2c:c2:d7:cb:85:56:c9:d0:ed:29:ac:48:df:fc:bc:1a:83: f7:b0:0d:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDY0ODExMC8GA1UEBRMoODlENjkwNDZFQzdDNzFBRDdGRkY5OEU0RkQ5QkI5ODgx RjI5OUM4OTAeFw0yNjA1MTEwOTQyMDFaFw0yNjA1MTgwOTQyMDFaMBgxFjAUBgNV BAMTDTZhMDFhNDZhLWJkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCRsdMZBIl0DpoJaagTGu3AGYLtSKl3WyTuhO1Vj3f6hhXFScsvef5XT4i+nb9 Rg/7y81GOqD0LcEqZD4lstyFtxZdUwwksxuuZdUtuzL65fGkfRmW0E/bpt1IeS+R upcDr7d8q6JBQHx7HyMSgQYCt3hW42WtHcH4iHSCVlY+ILJNRGKTOx6nHB2AMnPo LjIcwlRNkuKFAA4rWFEHRulpHgg+utUKNT5uefHS3AhLPM6BET5CYUe/g/ubj0BM 3IBZwhUkJ+wLRq3I4gazqX8ipwr4UgyaApn4bNIhD7VpJTIe6/+iymZ4knHmDta2 TL7gdzslqDbg00rklKKXCZqVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVh+ZSpmy hMaUIhK2NMq9BAPgrzgwHwYDVR0jBBgwFoAUidaQRux8ca1//5jk/Zu5iB8pnIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRENjQ4LzAxRjcwMkYwMDAx MjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2ExX181amtfWnU1aUI4cG5J ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRhUVJ1eDhjYTFfXzVqa19adTVpQjhwbklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE NjQ4LzAxRjcwMkYwMDAxMjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2Ex X181amtfWnU1aUI4cG5Jay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpb1SDrgilHZUGUP0u+aKjdX+2DK+OzVDp+jB8d4F4OquTfbgLqBTgECclnuHl 98SE8smCzNqCUMq8D0b5BzEC++qzqo0u5t8ZLyI+o04TJ7Uf7BOUaOwE0a00aRJ8 LzV2K5R/u/rP0wHMByRt/Wt3Ujil6kMOnq3uzoOEBoZTvB8l24dGfGjWAhPEkoWt 0koZi8u5srY+y02BrkBqN4wbL0cQFxL2WP3lquNI80/DeKD/AiF+xMi5jFZNwMse Tu522icRBkv7UyhpDvNPYltIwWgsI/SD1s9AqBAbWHH9X5g2hyqclPViYOcILMLX y4VWydDtKaxI3/y8GoP3sA1A -----END CERTIFICATE-----Generated at Wed May 13 11:09:12 2026 by rpki-client