
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json)
Hash identifier: wtnU6HFLA0+JYbpkXKobs2AzpfKLDnYVlU8/nznn8Ow=
Subject key identifier: 32:4A:99:33:9C:B5:CC:41:E0:47:95:73:AF:3B:27:DB:E1:80:AF:FB
Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
Manifest number: 7B
Signing time: Mon 21 Sep 2026 07:48:07 +0000
Manifest this update: Mon 21 Sep 2026 07:48:07 +0000
Manifest next update: Mon 28 Sep 2026 07:48:07 +0000
Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: K0QVoiBA1vzUIVjrlXrI1ey3DCK0eWejCbkaJZrwpcg=)
2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: yCCSOKLm19MpEiNQt1HNvusaS66zOK2dLX4/U/YPzqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89
Validity
Not Before: Sep 21 07:48:07 2026 GMT
Not After : Sep 28 07:48:07 2026 GMT
Subject: CN=6ab0e137-47b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:5a:3b:b8:0e:ed:7d:6a:aa:45:ee:ad:de:
60:6e:da:33:ea:33:b5:fd:1f:3a:51:07:b6:77:c3:
84:15:ae:3b:9b:c7:c9:bb:93:55:95:d9:64:49:82:
6b:cb:ea:86:e3:1f:5f:33:ce:c2:4c:73:a9:f7:98:
30:58:68:48:60:e3:67:b1:44:ce:63:86:2f:96:44:
0f:93:92:d7:63:51:21:10:bf:7b:ad:c3:cb:d2:f3:
c4:c7:a1:1d:5d:37:34:f4:c5:66:a2:1b:3a:24:e2:
41:c2:f4:cc:64:83:0d:0b:eb:b5:ab:29:76:cb:f3:
24:43:bc:44:4c:84:86:d6:87:b6:31:47:68:4a:ec:
fa:ce:54:ba:2b:b3:51:99:a4:73:06:81:79:ca:90:
da:83:e4:d7:c7:e9:d3:98:e8:87:16:b9:77:4d:89:
93:b6:fb:29:a3:2f:ff:5b:b2:67:06:79:47:85:6e:
4c:96:0c:db:5b:d3:1a:d2:c5:92:bb:40:6a:2b:fd:
93:56:b2:78:2f:47:89:f1:4b:71:c3:38:ec:6f:9e:
33:86:36:99:ab:e0:b8:61:66:45:a0:69:b9:69:2e:
2c:8a:65:1f:c6:8a:55:ba:44:ab:94:33:97:b6:6a:
e9:b5:35:56:8c:2f:30:1c:29:42:41:fb:5d:47:ad:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:99:33:9C:B5:CC:41:E0:47:95:73:AF:3B:27:DB:E1:80:AF:FB
X509v3 Authority Key Identifier:
keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:87:e8:ce:21:da:bc:20:3d:e2:fa:b1:a0:bb:93:0b:6c:
11:a0:68:bc:4f:3a:c4:03:f1:1d:aa:42:d4:39:9e:ba:58:d1:
20:d4:18:82:84:b3:73:89:f8:a7:b5:73:01:7c:76:6c:30:14:
29:2b:72:34:d2:02:f0:2c:53:0d:53:9a:e6:d6:7d:6a:65:85:
a1:41:d4:72:86:44:e5:d4:e1:2f:b5:93:bd:16:c5:3a:d5:05:
ef:d1:60:22:d0:55:9f:91:52:6a:67:ea:8f:09:8c:dd:f4:7b:
e0:c0:0c:bd:99:38:b6:3c:79:19:d0:d7:95:77:a1:b9:a2:3e:
19:97:cb:c1:f7:e5:bc:ec:e4:90:cd:7b:7d:7e:13:48:65:ae:
8d:8c:c7:59:7a:4a:c0:52:81:a5:a6:ec:c6:2f:87:01:d7:b4:
01:5f:32:60:62:25:7f:cc:eb:69:8f:84:e8:03:6b:71:15:d2:
ea:66:71:68:9f:6a:82:f6:fe:7d:b1:b1:8f:9c:21:14:a2:92:
a7:52:d9:f3:48:70:2b:44:8b:db:bd:89:e2:35:c4:e8:de:77:
40:b8:c0:1b:18:40:24:4c:fa:b8:55:2c:dc:a5:f5:c9:3c:14:
44:ac:84:e6:d8:34:7b:8b:b4:ad:b6:e4:18:00:b4:73:6b:d7:
10:e0:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:18:31 2026 by rpki-client