$ rpki-client -vvf rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft File: idaQRux8ca1__5jk_Zu5iB8pnIk.mft (raw, json) Hash identifier: 21THm0Zj/vqV9Jzqzfbv/pi8JXp0nkdPY26FJlx5HNA= Subject key identifier: 91:35:E7:B9:E9:99:4A:92:E8:D6:A2:09:37:36:AD:62:4B:BE:F2:A5 Authority key identifier: 89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 Certificate issuer: /CN=A914D648/serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft Manifest number: 2A Signing time: Fri 17 Apr 2026 08:27:40 +0000 Manifest this update: Fri 17 Apr 2026 08:27:39 +0000 Manifest next update: Fri 24 Apr 2026 08:27:39 +0000 Files and hashes: 1: idaQRux8ca1__5jk_Zu5iB8pnIk.crl (hash: rIZUHUECjsWulHsZyO5qpBpyr5vETPgbyMKXrQjPKfc=) 2: 4A5A1A32001211F1BC55B3C9406F56BC.roa (hash: hV/jnLK+I5DqGVULzWJLe2aTFemY0+Rn6OMG26sgrM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D648, serialNumber=89D69046EC7C71AD7FFF98E4FD9BB9881F299C89 Validity Not Before: Apr 17 08:27:39 2026 GMT Not After : Apr 24 08:27:39 2026 GMT Subject: CN=69e1eefb-e699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:69:3a:27:64:6a:91:ef:1e:74:31:d4:92: a5:7f:d1:44:14:ac:0d:23:04:a0:e0:1a:ac:36:ce: 4b:5d:15:ad:de:33:74:7e:81:46:dd:4a:d7:88:3e: 09:e2:7a:d3:28:c7:ed:0b:a4:eb:f0:fc:2a:24:49: 4a:d5:22:52:f1:32:f2:1d:51:50:a1:5d:2c:98:0b: 58:84:02:69:c3:d0:95:1d:1e:70:37:5d:96:21:6d: b6:f0:12:96:b6:aa:d8:57:5c:a7:aa:22:b8:32:ac: cf:b0:f2:ad:bc:46:52:ab:62:0a:ef:b4:b0:de:29: e3:cb:0d:4c:c2:30:02:ef:eb:2a:5e:3e:f4:f7:c0: 1c:a8:ea:b6:f3:7d:d4:97:61:a2:19:a8:b9:3f:d2: 3c:ce:7c:03:43:41:e3:b9:71:88:b0:e4:84:3d:6f: 19:8d:df:66:85:ee:8d:09:3c:71:f1:b2:5a:99:34: 77:cd:12:ad:db:fe:33:08:24:3f:81:d5:39:45:d1: 98:2e:57:e0:73:34:22:8e:9a:f0:cc:8c:b1:a0:0d: e4:69:56:9f:76:df:00:ae:cd:37:1f:90:2c:92:ff: 6e:69:a6:57:61:43:ff:6a:06:34:2f:b0:6b:9d:b9: 64:b6:47:7f:44:b1:03:8c:d1:4f:2f:fd:5f:1d:f8: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:E7:B9:E9:99:4A:92:E8:D6:A2:09:37:36:AD:62:4B:BE:F2:A5 X509v3 Authority Key Identifier: keyid:89:D6:90:46:EC:7C:71:AD:7F:FF:98:E4:FD:9B:B9:88:1F:29:9C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idaQRux8ca1__5jk_Zu5iB8pnIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D648/01F702F0001211F1878F97C0406F56BC/idaQRux8ca1__5jk_Zu5iB8pnIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a5:fd:e7:b0:e3:67:5d:b0:e5:30:3c:b2:1d:dc:79:5e:9e: 14:32:67:2e:4e:30:69:6d:ca:77:58:07:43:da:af:98:f6:7d: 20:0e:91:ac:ab:1d:bc:2c:29:40:89:35:93:5f:e5:48:13:03: 23:17:19:f4:c8:9e:82:71:c3:77:41:b6:04:da:cf:93:d7:bb: 9c:25:26:ff:4f:af:ba:b1:b9:ec:34:f2:71:00:a4:e0:a1:b0: 90:5c:95:a2:b1:d1:8a:cc:8e:81:ee:80:80:e2:58:5b:01:4a: ab:10:e1:1c:e4:7a:9c:2b:ca:f5:e3:71:01:c4:9a:0d:af:b4: 9b:1b:69:c9:73:85:c6:e5:ec:7d:40:03:c7:70:18:b0:3d:5c: 56:17:e8:e9:0f:f0:73:54:95:53:0d:d2:de:ca:8a:e2:88:75: b2:c8:a9:ed:f1:4c:73:01:73:9b:30:f7:c9:6b:2d:f5:fd:0c: ec:c0:8b:63:3c:9e:0d:2c:84:5d:16:db:5d:7f:b1:47:5b:7f: 7c:73:bb:c9:ab:51:af:ba:7e:ee:06:18:ce:62:17:d1:73:e0: bf:80:75:6d:b6:2b:ee:0c:57:b9:f6:99:58:77:8b:25:17:4d: b6:ee:40:c9:fa:bd:2b:97:82:3d:c6:d3:52:ef:9e:8a:33:62: dd:38:b4:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDY0ODExMC8GA1UEBRMoODlENjkwNDZFQzdDNzFBRDdGRkY5OEU0RkQ5QkI5ODgx RjI5OUM4OTAeFw0yNjA0MTcwODI3MzlaFw0yNjA0MjQwODI3MzlaMBgxFjAUBgNV BAMTDTY5ZTFlZWZiLWU2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaDWk6J2Rqke8edDHUkqV/0UQUrA0jBKDgGqw2zktdFa3eM3R+gUbdSteIPgni etMox+0LpOvw/CokSUrVIlLxMvIdUVChXSyYC1iEAmnD0JUdHnA3XZYhbbbwEpa2 qthXXKeqIrgyrM+w8q28RlKrYgrvtLDeKePLDUzCMALv6ypePvT3wByo6rbzfdSX YaIZqLk/0jzOfANDQeO5cYiw5IQ9bxmN32aF7o0JPHHxslqZNHfNEq3b/jMIJD+B 1TlF0ZguV+BzNCKOmvDMjLGgDeRpVp923wCuzTcfkCyS/25ppldhQ/9qBjQvsGud uWS2R39EsQOM0U8v/V8d+MF1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkTXnuemZ SpLo1qIJNzatYku+8qUwHwYDVR0jBBgwFoAUidaQRux8ca1//5jk/Zu5iB8pnIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRENjQ4LzAxRjcwMkYwMDAx MjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2ExX181amtfWnU1aUI4cG5J ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRhUVJ1eDhjYTFfXzVqa19adTVpQjhwbklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE NjQ4LzAxRjcwMkYwMDAxMjExRjE4NzhGOTdDMDQwNkY1NkJDL2lkYVFSdXg4Y2Ex X181amtfWnU1aUI4cG5Jay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnpf3nsONnXbDlMDyyHdx5Xp4UMmcuTjBpbcp3WAdD2q+Y9n0gDpGsqx28LClA iTWTX+VIEwMjFxn0yJ6CccN3QbYE2s+T17ucJSb/T6+6sbnsNPJxAKTgobCQXJWi sdGKzI6B7oCA4lhbAUqrEOEc5HqcK8r143EBxJoNr7SbG2nJc4XG5ex9QAPHcBiw PVxWF+jpD/BzVJVTDdLeyoriiHWyyKnt8UxzAXObMPfJay31/QzswItjPJ4NLIRd Fttdf7FHW398c7vJq1Gvun7uBhjOYhfRc+C/gHVttivuDFe59plYd4slF0227kDJ +r0rl4I9xtNS756KM2LdOLRE -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:07 2026 by rpki-client