
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier: K8mVWjnFSt/Id7FPD4FCsieRVF41XKx0Qr7kstQ81eE=
Subject key identifier: 5F:CF:BC:32:07:A8:A9:B4:41:3D:33:0E:DB:27:89:72:11:33:6C:32
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number: 016F
Signing time: Wed 23 Sep 2026 04:39:35 +0000
Manifest this update: Wed 23 Sep 2026 04:39:34 +0000
Manifest next update: Wed 30 Sep 2026 04:39:34 +0000
Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: NSQime/3rQgitg9eqxnYNT78BW03Fx1BOvTuGXZuVE0=)
2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Validity
Not Before: Sep 23 04:39:34 2026 GMT
Not After : Sep 30 04:39:34 2026 GMT
Subject: CN=6ab35807-d53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:ee:76:c8:ae:d5:0e:98:15:96:0f:7b:3b:
a0:ac:75:d7:b6:54:69:90:8a:0c:1f:ed:0f:50:21:
aa:57:57:4b:09:d4:1a:78:4e:50:e4:ed:61:2d:3b:
e7:ca:9a:ab:c2:af:03:7d:8e:a2:e9:89:cc:f3:b2:
da:35:ba:07:be:57:8e:95:72:e7:5f:35:f2:84:8c:
9e:62:74:75:08:ea:6c:72:e1:55:c4:f5:53:ac:27:
ac:eb:ca:bb:ae:33:40:3e:45:b9:d1:c5:8a:a9:30:
db:4f:89:15:3c:f4:cf:4a:82:48:b9:a7:76:77:da:
1f:20:91:e6:36:bc:15:9c:20:32:4a:d0:2c:c3:a9:
6c:5e:88:af:04:bf:be:84:8e:30:0a:19:87:2d:46:
1a:92:39:69:d3:e9:48:86:8c:51:bb:b9:fc:83:42:
01:f3:61:6f:78:7a:17:96:bb:35:72:7b:40:27:f3:
f2:fb:8b:a0:37:db:5a:d8:fa:f7:23:85:6c:c0:88:
66:69:a8:63:1d:42:7c:15:0b:61:fd:e2:a2:22:27:
6a:85:6a:0e:1b:8c:a1:15:94:d3:19:31:6b:fa:d7:
4b:54:00:96:eb:bc:07:e7:25:01:c2:57:7f:68:2c:
a6:66:df:bc:ab:a7:e5:c0:84:a7:5c:77:d9:1e:53:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:BC:32:07:A8:A9:B4:41:3D:33:0E:DB:27:89:72:11:33:6C:32
X509v3 Authority Key Identifier:
keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:ea:31:fa:74:b7:a2:24:a9:fb:08:15:98:51:18:49:c0:
10:2a:ec:24:71:d2:36:26:c1:74:98:9e:52:25:8f:ff:18:2d:
19:32:fe:08:a7:75:b6:36:0a:ea:d1:e6:ee:b5:a5:1e:11:23:
3e:6e:7d:9d:af:94:32:e1:b1:e5:89:96:fe:6d:39:5f:1a:74:
45:0c:3a:9a:07:65:32:8e:82:7c:3b:0f:93:6f:2d:93:8c:fd:
19:89:52:17:1e:51:53:99:1c:83:94:85:73:d3:ff:a7:1d:21:
8d:3b:64:ea:3d:ea:82:fc:29:1d:b1:7e:7a:a9:c6:bb:31:c1:
3b:71:cd:d0:48:13:46:04:87:83:32:ab:9c:50:4d:ef:65:b4:
2a:a3:d3:d4:c9:35:2a:50:a4:13:0a:2e:25:4a:42:a7:7f:33:
9d:95:08:59:08:51:92:25:13:4b:12:c0:d8:d7:e8:8e:36:7f:
16:0e:c0:52:49:da:52:cf:a9:48:4f:0c:ac:8f:30:2b:0e:b4:
f3:dc:b9:93:9e:29:2e:2d:7b:a6:cd:95:c4:0a:07:88:37:aa:
a4:4f:f1:d2:4d:4b:2d:44:39:ce:15:ef:49:e6:12:eb:8b:4c:
34:8d:86:63:0a:2e:6f:36:2c:7d:65:40:1a:1a:1f:24:d6:32:
ee:24:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:46:05 2026 by rpki-client