$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: bJ+7AReY/5zgKRij0xy2LvNc1Rv9C70688U3qAFvQ3Y= Subject key identifier: B0:66:47:31:CA:11:8D:44:03:C3:FC:B0:6D:02:54:B7:76:15:74:9A Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 0151 Signing time: Mon 27 Jul 2026 07:04:06 +0000 Manifest this update: Mon 27 Jul 2026 07:04:06 +0000 Manifest next update: Mon 03 Aug 2026 07:04:06 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: 8zrHkjvjMAsra/GFcFq1B2SWlYbYpbX9e6YyYwExJb4=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jul 27 07:04:06 2026 GMT Not After : Aug 3 07:04:06 2026 GMT Subject: CN=6a6702e6-5a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:40:27:85:a3:28:a5:62:25:aa:ae:a6:d6: db:41:bd:64:ef:fb:d6:2b:de:f2:b0:a9:d1:8c:f4: b8:50:55:fa:82:71:e6:3f:d2:bc:74:92:78:1d:16: 94:3e:5d:c0:2f:eb:69:82:b0:53:f8:de:25:6e:b0: df:68:b4:f8:62:ba:96:1a:69:26:9a:fe:45:ef:c9: 4c:de:6c:84:65:e1:ae:63:1e:50:33:4f:f7:12:8f: 80:26:b8:1c:f1:df:5e:89:b5:77:65:b2:4e:ef:9b: dc:e2:25:4e:fa:cf:87:0a:c5:10:b5:df:de:8d:2f: 89:b7:11:cd:29:7b:28:49:18:37:78:8a:ae:46:fb: 3e:e8:38:af:36:70:f6:e6:4c:b6:d7:6f:86:6d:61: f4:48:b7:83:4e:51:16:74:3e:16:a6:ea:a2:37:70: dd:6f:46:1b:c8:97:94:5c:06:b7:8b:34:c6:07:69: 9a:b9:09:29:d9:37:ce:b1:77:44:a8:e6:d9:82:77: c3:99:6f:0b:76:db:6a:e8:81:24:0e:d2:56:1a:2a: 39:30:ce:37:01:6f:45:10:79:0c:8d:5a:0a:c8:c0: 31:25:04:69:3c:eb:f5:c9:2f:c2:34:5c:70:d5:24: 9e:a9:82:a6:fd:d3:c2:fb:c4:45:e6:27:5d:65:78: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:47:31:CA:11:8D:44:03:C3:FC:B0:6D:02:54:B7:76:15:74:9A X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a4:9e:74:dd:c2:c3:4c:4d:0b:59:e0:0d:4e:29:e4:0d:28: 8f:ed:dc:e3:7e:47:40:8c:42:e0:02:c4:de:52:77:43:37:ac: d1:65:f1:0d:fd:40:7e:65:a8:dc:4e:cf:7c:71:7c:53:09:f4: 16:e5:03:17:c8:ca:b5:74:33:d7:5f:4f:c2:95:4a:8c:a4:0e: 32:05:c7:4f:f3:7e:03:65:07:97:74:00:7b:34:5f:8a:06:fe: 06:b9:f3:e0:57:ea:be:0f:7d:46:5a:8e:75:fb:8e:55:7e:4c: 17:41:bb:47:81:d7:81:a9:36:e9:e2:58:88:84:0c:04:af:b1: a6:00:e1:2a:54:f9:ef:07:a2:8d:cd:b7:8e:6d:c5:3c:a5:64: 52:7b:04:c4:c3:17:29:86:b8:ff:11:f9:19:8b:54:26:14:da: 56:0d:fa:f2:ff:2d:05:4a:e0:e4:b3:dc:51:15:ac:45:88:85: 49:61:d5:25:75:c6:55:21:12:73:eb:22:a2:f7:12:f5:f2:09: 7d:2b:6f:03:bf:8e:53:5f:86:d8:a0:b9:f8:6f:a9:93:c8:a6: 57:38:27:82:eb:c0:1b:13:94:ea:11:8e:45:87:70:ab:d6:b2: 42:9c:74:73:fd:31:de:26:2e:b3:b5:cb:e3:aa:7f:72:63:52: c3:f6:2b:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwNzI3MDcwNDA2WhcNMjYwODAzMDcwNDA2WjAYMRYwFAYD VQQDEw02YTY3MDJlNi01YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRVAJ4WjKKViJaquptbbQb1k7/vWK97ysKnRjPS4UFX6gnHmP9K8dJJ4HRaU Pl3AL+tpgrBT+N4lbrDfaLT4YrqWGmkmmv5F78lM3myEZeGuYx5QM0/3Eo+AJrgc 8d9eibV3ZbJO75vc4iVO+s+HCsUQtd/ejS+JtxHNKXsoSRg3eIquRvs+6DivNnD2 5ky212+GbWH0SLeDTlEWdD4WpuqiN3Ddb0YbyJeUXAa3izTGB2mauQkp2TfOsXdE qObZgnfDmW8Ldttq6IEkDtJWGio5MM43AW9FEHkMjVoKyMAxJQRpPOv1yS/CNFxw 1SSeqYKm/dPC+8RF5iddZXiK6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBmRzHK EY1EA8P8sG0CVLd2FXSaMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVaSedN3Cw0xNC1ngDU4p5A0oj+3c435HQIxC4ALE3lJ3Qzes0WXxDf1AfmWo 3E7PfHF8Uwn0FuUDF8jKtXQz119PwpVKjKQOMgXHT/N+A2UHl3QAezRfigb+Brnz 4Ffqvg99RlqOdfuOVX5MF0G7R4HXgak26eJYiIQMBK+xpgDhKlT57weijc23jm3F PKVkUnsExMMXKYa4/xH5GYtUJhTaVg368v8tBUrg5LPcURWsRYiFSWHVJXXGVSES c+siovcS9fIJfStvA7+OU1+G2KC5+G+pk8imVzgnguvAGxOU6hGORYdwq9ayQpx0 c/0x3iYus7XL46p/cmNSw/YrmA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:47:15 2026 by rpki-client