
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier: u+pZSyr9bMlF/sEWspra6fi2urwhHwuvRgP0/8E+XOA=
Subject key identifier: CC:ED:97:A0:0F:3A:E3:7D:5B:D5:E4:73:80:16:64:27:D0:F7:AC:95
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number: 013B
Signing time: Sat 13 Jun 2026 05:24:28 +0000
Manifest this update: Sat 13 Jun 2026 05:24:27 +0000
Manifest next update: Sat 20 Jun 2026 05:24:27 +0000
Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: N2GTu9ctau+XPsbXttNixM/uVllpt44glJ+aMg+GlNg=)
2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Validity
Not Before: Jun 13 05:24:27 2026 GMT
Not After : Jun 20 05:24:27 2026 GMT
Subject: CN=6a2ce98c-80eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:21:01:ab:97:bb:96:4f:a3:ae:da:d8:a4:
04:17:a3:77:96:d3:f4:dc:5e:8b:22:41:e4:0f:40:
b8:60:0b:d4:6d:c3:94:47:12:90:23:8c:8e:a9:53:
f6:36:57:70:88:bb:33:25:6f:4b:28:af:09:c6:01:
e4:08:39:1b:a3:89:fc:9d:a7:a6:11:09:c7:d7:ed:
70:17:bd:cf:56:73:3f:da:18:1e:6b:1d:a6:da:da:
cc:3e:c2:b7:5a:97:65:d3:78:9d:8f:40:15:b1:63:
72:15:1a:18:7b:18:ec:6f:af:cd:29:b7:07:a4:8d:
68:9d:e1:60:ad:bc:79:49:f9:1b:f3:45:c7:cc:2b:
1a:7b:4c:3a:31:ca:9b:bb:00:69:0a:62:4d:bc:c0:
4c:95:81:86:ac:84:6d:6d:a3:b3:e8:82:fc:ea:6c:
a1:68:12:eb:55:69:2f:c0:7d:9e:63:a1:88:c1:ab:
40:2c:51:4d:9e:c7:dc:fe:77:d8:62:49:95:84:ca:
db:a0:d1:99:fb:f6:17:34:68:1b:84:d5:d6:6d:7e:
19:7d:2d:3f:66:e3:c6:f1:5c:6a:d2:ee:49:67:e2:
f7:44:fc:84:d7:de:64:94:2c:73:8b:2c:85:fd:17:
b8:cc:07:ab:ab:0c:75:d0:57:5c:7f:0a:91:75:ac:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:97:A0:0F:3A:E3:7D:5B:D5:E4:73:80:16:64:27:D0:F7:AC:95
X509v3 Authority Key Identifier:
keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b7:e7:05:9f:60:8a:9d:33:d3:db:6d:57:63:8c:e3:56:73:
93:00:04:b1:50:0d:15:29:c4:1a:b5:44:2f:14:75:95:cb:a5:
7c:47:96:6e:d5:fd:7e:68:64:d0:b9:d3:c8:d9:65:73:bc:71:
3b:f3:ba:98:31:fe:2f:10:27:79:77:5b:90:f8:5b:a8:31:af:
af:d8:49:80:f0:c6:a1:a3:93:84:dd:dd:41:7d:bc:9c:b9:92:
7e:e3:c3:4e:f7:8b:f9:0c:0f:f3:93:6c:fb:09:83:a9:1d:eb:
77:c7:8d:ec:1a:c6:6d:7a:f8:88:9a:d4:a0:91:47:23:0c:8b:
8d:41:7f:9e:ef:1e:c4:5b:4c:a6:b9:2c:3d:96:8c:dd:f5:a1:
5f:1c:7a:80:c8:c8:a7:eb:26:2a:10:28:2e:c5:7a:9a:66:f8:
0a:e1:ab:04:b3:2a:c4:00:f9:3c:1c:15:80:81:d6:f8:13:d2:
70:6d:08:05:dc:77:9e:01:f7:0e:aa:75:f1:33:b3:c2:04:20:
46:42:5a:84:51:ed:00:35:26:33:ff:93:a2:ae:8e:46:de:05:
c3:b5:8c:c4:00:6c:5e:b8:66:be:d1:e5:0c:df:d7:2b:c9:37:
46:46:cf:12:ed:eb:88:a4:20:d3:94:63:d7:fd:51:77:8f:a1:
77:48:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:15 2026 by rpki-client