$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: ECvUN1fLEUAKhAE9xyTeENa7yoyU1m3v4ZQdYX/sqcY= Subject key identifier: 06:CD:C5:AB:80:6A:88:98:AF:5C:00:A7:78:2F:CE:69:96:1C:DE:74 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 0152 Signing time: Wed 29 Jul 2026 06:26:50 +0000 Manifest this update: Wed 29 Jul 2026 06:26:49 +0000 Manifest next update: Wed 05 Aug 2026 06:26:49 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: A+pmV7LyooUbcfdnow4uWg8Dv/8XRGfTItlHKQIIdxs=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 05:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jul 29 06:26:49 2026 GMT Not After : Aug 5 06:26:49 2026 GMT Subject: CN=6a699d2a-fa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:a4:8a:6b:7d:84:e0:65:24:e5:be:29:57: d6:ac:74:74:bb:bb:86:ff:b8:37:e4:65:1e:38:88: 03:4f:f7:7f:70:7e:c1:06:66:2c:11:94:85:67:92: 34:db:c3:13:3a:93:3c:c9:5f:64:86:88:6e:89:0d: 6f:16:81:f1:0b:be:87:14:0e:f4:ac:80:92:ba:99: 2b:83:fb:6a:f0:d1:d8:7a:84:38:d9:be:4f:04:7a: 30:7c:11:73:d9:0d:43:61:41:8c:ec:9d:31:1d:c1: 76:ac:41:05:9c:b1:1c:f1:27:58:c2:ec:e9:8f:df: 48:ad:bc:0f:1b:ba:b2:4a:64:61:35:23:c9:b7:b2: 17:a9:fa:ca:b8:9c:f3:5e:ad:fe:2a:2f:61:a5:5a: ce:f5:5b:d0:85:24:b1:f5:60:d9:af:dc:c3:1d:82: d4:40:03:39:96:20:ec:c2:04:2a:e0:8d:e6:62:d4: b7:4e:6c:bb:50:57:ec:7c:45:4b:45:64:25:d3:03: e7:c0:b0:bb:8b:25:1f:5d:ba:f4:f6:e8:5d:64:b6: a5:56:58:10:d4:ae:5c:13:eb:ec:f9:bc:b3:97:6b: 97:50:80:cf:0f:a3:7a:4c:db:58:b1:b7:88:46:78: 90:34:6d:46:22:ac:78:04:c9:5b:b6:20:f4:b8:51: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CD:C5:AB:80:6A:88:98:AF:5C:00:A7:78:2F:CE:69:96:1C:DE:74 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a3:7b:b4:2f:49:24:2c:c4:06:55:92:66:24:11:4f:2b:92: e9:b1:9b:6c:54:ce:b5:6d:cc:75:6b:d9:af:e4:a0:5d:15:a2: 2d:32:62:b1:ad:f8:45:0e:76:4b:4d:c9:4a:e4:43:5a:68:9c: cc:53:12:69:7d:6e:86:37:5c:34:b1:f5:8a:5a:f0:a6:49:34: 76:19:f5:d8:4a:09:be:f1:f3:74:a2:fd:0c:a9:62:5b:2e:57: 37:20:7b:6f:1b:f0:30:eb:b0:a6:e1:64:14:75:18:e5:0e:9f: e7:72:01:85:d7:1c:06:5a:77:b1:55:96:82:90:c3:b5:25:57: 7b:88:3d:5c:fc:a4:36:ac:40:5c:b6:51:8a:d9:a8:71:7e:49: dc:d2:3e:d2:a9:b5:d7:cc:22:9c:4e:63:74:b5:6c:96:28:fe: 0a:29:c2:0e:57:6b:4b:c7:40:94:0b:fe:24:7f:53:84:6b:6c: 5f:90:9a:f9:08:11:0c:0d:44:93:1f:11:2a:da:aa:88:10:c6: 0c:28:fb:10:d6:a3:94:ab:65:71:f5:3c:e7:02:8c:ba:94:b9: b9:18:e1:e0:dc:f7:2c:05:aa:5b:97:df:a0:aa:90:60:f1:55: 4f:6e:63:76:c6:74:45:eb:69:fc:b1:eb:0a:c2:29:21:9d:56: 4e:d1:d2:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwNzI5MDYyNjQ5WhcNMjYwODA1MDYyNjQ5WjAYMRYwFAYD VQQDEw02YTY5OWQyYS1mYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNakimt9hOBlJOW+KVfWrHR0u7uG/7g35GUeOIgDT/d/cH7BBmYsEZSFZ5I0 28MTOpM8yV9khohuiQ1vFoHxC76HFA70rICSupkrg/tq8NHYeoQ42b5PBHowfBFz 2Q1DYUGM7J0xHcF2rEEFnLEc8SdYwuzpj99IrbwPG7qySmRhNSPJt7IXqfrKuJzz Xq3+Ki9hpVrO9VvQhSSx9WDZr9zDHYLUQAM5liDswgQq4I3mYtS3Tmy7UFfsfEVL RWQl0wPnwLC7iyUfXbr09uhdZLalVlgQ1K5cE+vs+byzl2uXUIDPD6N6TNtYsbeI RniQNG1GIqx4BMlbtiD0uFHRKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbNxauA aoiYr1wAp3gvzmmWHN50MB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKN7tC9JJCzEBlWSZiQRTyuS6bGbbFTOtW3MdWvZr+SgXRWiLTJisa34RQ52 S03JSuRDWmiczFMSaX1uhjdcNLH1ilrwpkk0dhn12EoJvvHzdKL9DKliWy5XNyB7 bxvwMOuwpuFkFHUY5Q6f53IBhdccBlp3sVWWgpDDtSVXe4g9XPykNqxAXLZRitmo cX5J3NI+0qm118winE5jdLVslij+CinCDldrS8dAlAv+JH9ThGtsX5Ca+QgRDA1E kx8RKtqqiBDGDCj7ENajlKtlcfU85wKMupS5uRjh4Nz3LAWqW5ffoKqQYPFVT25j dsZ0Retp/LHrCsIpIZ1WTtHSRA== -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:34 2026 by rpki-client