$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: LZDNu6gLBOXj3sh300BNwo/8xAJ0aRCuWlec9RQydJg= Subject key identifier: 7F:B9:41:34:15:DE:8C:64:4F:38:BF:63:5C:80:E8:34:D6:3D:4A:55 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 0113 Signing time: Wed 25 Mar 2026 05:07:00 +0000 Manifest this update: Wed 25 Mar 2026 05:06:59 +0000 Manifest next update: Wed 01 Apr 2026 05:06:59 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: BKxYbBmnO3k0QmQVmwUSskXw3b62StShQxa7Dge7i+Q=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Mar 25 05:06:59 2026 GMT Not After : Apr 1 05:06:59 2026 GMT Subject: CN=69c36d74-52a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:06:71:4f:81:76:b6:8b:07:32:62:78:61: 21:56:6f:0f:9f:51:7c:13:3a:c9:26:1e:6c:00:95: 6a:b8:6c:01:6b:17:0c:74:dd:af:84:18:b7:89:44: 50:37:3b:6a:9c:5e:d2:73:46:b2:72:bc:6b:d7:90: e4:86:71:12:cd:c0:60:27:8f:28:ce:18:75:71:c0: de:ea:76:aa:91:80:4b:d2:44:f8:e7:4a:2e:cf:eb: 4d:9f:f2:4a:a1:cc:99:3f:13:ea:8d:0b:ca:ac:7d: 9c:78:39:6c:69:46:08:59:ef:fb:9a:11:24:7d:ec: ab:52:42:c6:43:a3:78:3f:eb:0a:9b:60:78:a4:aa: 43:d6:1a:ea:9e:33:e0:de:de:4b:26:8b:a8:ba:20: 2d:2e:a6:08:25:2e:79:83:ba:a1:42:35:f7:18:55: 13:be:a6:f4:e2:c2:ab:18:43:70:34:65:f6:36:50: 23:a5:1e:a6:98:21:02:47:8c:d9:76:0a:32:d6:f4: 7e:a6:83:58:3f:27:3d:67:cd:74:57:5f:a2:ff:97: 83:16:41:af:e6:6c:a5:15:81:9d:d4:0b:67:84:8c: 8b:21:fb:ee:2c:cd:9c:cc:c4:a3:1f:8a:80:d3:a9: 91:f2:4e:6b:5a:fe:8d:7f:6c:89:24:26:e0:cc:52: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:41:34:15:DE:8C:64:4F:38:BF:63:5C:80:E8:34:D6:3D:4A:55 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:96:d4:e7:38:25:30:fa:dc:a2:f7:25:da:35:7e:53:0c: 5f:54:c5:ed:80:aa:9f:42:d5:d9:e1:b3:e1:7e:78:72:dd:2a: 0d:a8:50:ee:6e:ea:75:95:b0:38:0e:c9:4b:fc:4d:01:5e:ac: 34:55:b1:c4:11:12:4a:81:64:6e:05:b7:6c:89:26:bb:b4:d8: 43:f7:7f:41:c6:b1:60:72:1d:06:72:14:65:8c:03:65:24:85: e3:5a:7a:c2:e4:7d:30:3e:7e:ec:fc:5e:c3:18:32:c8:4a:e6: 83:62:41:f6:b1:59:81:fb:b0:74:33:38:3d:b8:74:7c:47:3d: fa:ab:dd:45:5b:da:61:2c:0e:ad:07:33:3e:c7:11:23:21:f6: fb:9d:89:98:32:1e:1b:89:74:b9:ca:ba:27:c8:13:cf:d3:f0: 54:83:1b:ec:5a:b9:67:ed:bd:2a:8b:9d:0a:ef:d3:ca:13:3b: fe:3b:ff:d0:05:cd:28:5f:99:e3:53:9b:0d:33:8f:ec:45:72: a3:2e:cf:99:90:7c:8c:a6:db:67:e8:24:9e:59:09:84:c4:bc: 45:2f:01:4f:1b:cf:37:c2:f3:ac:a0:6c:ab:ed:bd:00:3e:85: 0e:2d:99:0a:15:2b:6b:59:cb:7e:87:dc:3a:df:ed:6f:45:09: 82:67:0c:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwMzI1MDUwNjU5WhcNMjYwNDAxMDUwNjU5WjAYMRYwFAYD VQQDEw02OWMzNmQ3NC01MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i0GcU+BdraLBzJieGEhVm8Pn1F8EzrJJh5sAJVquGwBaxcMdN2vhBi3iURQ NztqnF7Sc0aycrxr15DkhnESzcBgJ48ozhh1ccDe6naqkYBL0kT450ouz+tNn/JK ocyZPxPqjQvKrH2ceDlsaUYIWe/7mhEkfeyrUkLGQ6N4P+sKm2B4pKpD1hrqnjPg 3t5LJououiAtLqYIJS55g7qhQjX3GFUTvqb04sKrGENwNGX2NlAjpR6mmCECR4zZ dgoy1vR+poNYPyc9Z810V1+i/5eDFkGv5mylFYGd1AtnhIyLIfvuLM2czMSjH4qA 06mR8k5rWv6Nf2yJJCbgzFJdFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+5QTQV 3oxkTzi/Y1yA6DTWPUpVMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFWW1Oc4JTD63KL3Jdo1flMMX1TF7YCqn0LV2eGz4X54ct0qDahQ7m7qdZWw OA7JS/xNAV6sNFWxxBESSoFkbgW3bIkmu7TYQ/d/QcaxYHIdBnIUZYwDZSSF41p6 wuR9MD5+7PxewxgyyErmg2JB9rFZgfuwdDM4Pbh0fEc9+qvdRVvaYSwOrQczPscR IyH2+52JmDIeG4l0ucq6J8gTz9PwVIMb7Fq5Z+29KoudCu/TyhM7/jv/0AXNKF+Z 41ObDTOP7EVyoy7PmZB8jKbbZ+gknlkJhMS8RS8BTxvPN8LzrKBsq+29AD6FDi2Z ChUra1nLfofcOt/tb0UJgmcM6w== -----END CERTIFICATE-----Generated at Thu Mar 26 17:49:01 2026 by rpki-client