
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier: 9XCeRH2Dk7q8xyTUyHpNpPP4zpOwSfL2oDq4Fh9GRlk=
Subject key identifier: 01:73:EA:F4:7D:45:2F:8E:AE:F5:B4:44:FE:A0:6E:27:E6:52:74:6C
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number: 0105
Signing time: Sun 01 Mar 2026 07:07:57 +0000
Manifest this update: Sun 01 Mar 2026 07:07:57 +0000
Manifest next update: Sun 08 Mar 2026 07:07:57 +0000
Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: jirOGVYggl7f8eTS+Rd1W6BjxXQsHzwMTN8uygZEsC0=)
2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: svxCNz/PtUeVtTEkfJI0UGnsP9Tbd78MIluuCyhiaVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Validity
Not Before: Mar 1 07:07:57 2026 GMT
Not After : Mar 8 07:07:57 2026 GMT
Subject: CN=69a3e5cd-12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:ce:f0:31:85:55:5a:c7:ef:5f:75:3f:c9:
bf:4c:a1:2c:33:0e:f0:ca:52:b3:ac:5c:6f:39:7a:
ef:b6:0d:c6:8a:b8:55:f4:1b:bb:7b:59:62:54:41:
df:65:1b:b1:f0:af:7f:8c:88:07:b2:62:ee:40:25:
74:ae:d0:8e:b4:2b:5c:53:c1:6a:8a:e3:9e:0b:b0:
54:5e:0c:5d:7f:a4:f0:22:be:a6:83:40:b3:77:42:
45:10:d0:5e:a4:89:b9:54:8d:f3:d7:4a:22:56:80:
ee:ac:54:1c:78:78:0c:e5:28:5c:9f:d7:8e:e1:3f:
a2:fd:d2:ff:de:82:5f:b0:7c:00:f3:c1:35:72:fe:
68:ee:3d:df:d6:8e:35:fb:31:0b:5f:1f:b9:38:87:
7b:ec:09:2e:05:60:d8:e1:5a:37:4f:4e:48:ef:10:
11:d5:b0:df:b4:b1:37:15:e3:f2:4e:28:db:9d:9c:
3d:e2:25:bb:b7:78:62:f0:0a:c3:ca:0e:95:6e:7f:
1f:ac:f2:e0:52:98:d9:64:07:c8:8d:34:ab:81:12:
a4:5e:da:c1:c0:6d:c7:ba:e2:da:ee:59:70:04:50:
b0:b6:81:93:8b:b9:55:74:6a:d1:3a:3b:95:27:c3:
59:79:97:fe:bd:0c:20:19:6c:e2:d8:cc:c8:f4:2a:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:EA:F4:7D:45:2F:8E:AE:F5:B4:44:FE:A0:6E:27:E6:52:74:6C
X509v3 Authority Key Identifier:
keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:e5:92:ec:3a:ca:ad:bf:ac:30:ef:5f:17:7b:f9:46:1c:
2b:3e:62:4e:b3:eb:41:ad:ce:aa:00:78:bb:2c:1a:0f:95:01:
38:59:58:40:09:a8:32:e5:6a:4e:8a:19:9c:2d:33:9b:4f:87:
96:73:f3:14:e8:28:b2:49:bd:ea:42:34:da:4d:d2:70:1d:9c:
67:27:e3:02:60:39:49:a0:d0:82:4e:cf:d3:14:5b:0b:50:d6:
46:cb:e5:98:81:ff:07:d2:5b:70:a3:a9:63:61:30:e4:87:a2:
63:d6:97:a9:82:da:02:fe:74:f3:07:3e:d1:77:ce:00:5d:f9:
d3:93:26:1e:b4:23:f1:49:30:25:9b:b2:bc:56:e2:5f:ab:dd:
81:3f:99:3a:2f:e4:ec:37:86:b7:18:12:bd:81:0a:9e:96:d8:
d5:13:87:e6:d1:01:e4:b9:d4:31:62:c0:f8:4c:ad:fb:f3:40:
a8:5a:95:6c:67:23:8a:b9:08:82:ce:04:da:6b:7d:ff:91:75:
41:d8:bb:4c:1d:87:ad:5f:f7:fb:29:66:af:34:98:19:d7:6f:
08:f1:33:f0:97:5d:24:4f:2e:cc:f0:d5:31:67:35:8d:8f:6e:
24:55:b2:ee:81:3b:10:59:3f:40:57:5a:34:f8:c9:77:dc:52:
2f:cd:de:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx
QkUxNjdENDQwHhcNMjYwMzAxMDcwNzU3WhcNMjYwMzA4MDcwNzU3WjAYMRYwFAYD
VQQDEw02OWEzZTVjZC0xMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArebO8DGFVVrH7191P8m/TKEsMw7wylKzrFxvOXrvtg3GirhV9Bu7e1liVEHf
ZRux8K9/jIgHsmLuQCV0rtCOtCtcU8FqiuOeC7BUXgxdf6TwIr6mg0Czd0JFENBe
pIm5VI3z10oiVoDurFQceHgM5Shcn9eO4T+i/dL/3oJfsHwA88E1cv5o7j3f1o41
+zELXx+5OId77AkuBWDY4Vo3T05I7xAR1bDftLE3FePyTijbnZw94iW7t3hi8ArD
yg6Vbn8frPLgUpjZZAfIjTSrgRKkXtrBwG3HuuLa7llwBFCwtoGTi7lVdGrROjuV
J8NZeZf+vQwgGWzi2MzI9CpAEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFz6vR9
RS+OrvW0RP6gbifmUnRsMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2
RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL
c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATxTlkuw6yq2/rDDvXxd7+UYcKz5iTrPrQa3OqgB4uywaD5UBOFlYQAmoMuVq
TooZnC0zm0+HlnPzFOgoskm96kI02k3ScB2cZyfjAmA5SaDQgk7P0xRbC1DWRsvl
mIH/B9JbcKOpY2Ew5IeiY9aXqYLaAv508wc+0XfOAF3505MmHrQj8UkwJZuyvFbi
X6vdgT+ZOi/k7DeGtxgSvYEKnpbY1ROH5tEB5LnUMWLA+Eyt+/NAqFqVbGcjirkI
gs4E2mt9/5F1Qdi7TB2HrV/3+ylmrzSYGddvCPEz8JddJE8uzPDVMWc1jY9uJFWy
7oE7EFk/QFdaNPjJd9xSL83eYw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:18 2026 by rpki-client