$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: uJXYaEOBTmr+tkmaiiWSsNDuGqhKjDm7ce4d+IGjQ/Q= Subject key identifier: 19:E2:86:4F:70:2B:74:C0:15:64:B0:8C:CE:25:91:DC:02:25:0B:BD Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 012B Signing time: Mon 11 May 2026 05:41:51 +0000 Manifest this update: Mon 11 May 2026 05:41:50 +0000 Manifest next update: Mon 18 May 2026 05:41:50 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: +0+xoKlAd8WcfTb4AFHR2kliM+ww9+qF7xKw1b5WtEc=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: May 11 05:41:50 2026 GMT Not After : May 18 05:41:50 2026 GMT Subject: CN=6a016c1f-f458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:7b:f8:7e:f8:9e:94:ba:93:c2:1b:a7:78: e0:60:3b:35:f6:47:f4:98:92:1b:32:e3:a1:c5:6c: df:62:ae:a4:8b:42:de:fd:cd:16:2e:74:b3:31:46: 93:c3:78:58:4a:67:8b:e3:12:3d:fa:b7:6c:48:c4: 53:56:84:07:e1:14:88:15:b1:9c:3b:bd:6e:e6:2e: cc:7d:77:3d:7f:61:30:61:81:53:16:88:9d:b8:a6: 2e:61:c6:b7:cf:f8:6c:80:14:07:e2:03:04:cc:75: fc:7a:9b:53:36:88:65:ca:33:1f:d0:95:1a:ff:c5: ba:c1:57:89:1e:68:f8:0e:45:a5:18:ef:0f:38:17: 88:d2:93:c9:dc:ac:c3:53:45:ac:6e:9d:71:00:b7: ee:8c:14:b2:ed:18:cb:ad:55:e4:6d:68:ef:ec:5e: 4f:b7:de:fb:7b:c8:ac:4f:ee:b5:1a:58:04:35:b6: e6:40:4a:41:d8:83:c9:e3:97:e4:d6:f0:52:ea:c4: cd:8a:a3:9f:fb:a0:1a:d9:7f:da:7d:69:13:43:3c: ec:85:01:8f:72:09:70:f9:b4:67:38:31:33:32:55: e7:9e:02:dd:8c:5d:91:f6:13:98:e4:65:3c:36:25: ff:84:2a:51:d0:df:6c:e1:67:47:1f:4c:f6:3d:59: eb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E2:86:4F:70:2B:74:C0:15:64:B0:8C:CE:25:91:DC:02:25:0B:BD X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:41:60:9d:f3:6a:4f:cf:88:70:42:44:cf:8d:f6:ae:e2:bb: 3f:c9:c5:4b:ad:b3:4b:76:32:84:b5:39:53:42:65:5e:51:fc: 25:a8:4c:6a:b8:64:d7:7b:55:f6:b5:9a:0e:10:7b:bb:54:1c: 96:87:b3:fe:ff:e2:3d:0c:5f:c2:88:c0:d4:c1:cc:68:4a:d9: 2c:72:d8:56:bc:c5:63:1e:01:ee:2c:5e:ca:0a:6a:28:f4:30: 57:24:20:35:da:12:b1:9f:dd:76:af:d8:b6:a1:b8:e5:04:af: cb:e7:cc:85:9d:2e:1f:2b:3c:6d:b3:e2:5a:4b:a2:45:b7:a3: f7:c8:f5:b4:a4:41:05:de:97:72:ee:c7:4a:aa:16:46:8f:d9: 1c:af:84:37:19:4f:c1:67:3c:f3:53:d0:1e:e1:65:8d:8a:c3: f0:54:3e:aa:a8:28:bb:8b:08:52:c0:30:40:52:9d:4f:cc:7f: c5:39:a2:bc:40:3d:d9:26:78:bc:4c:fd:91:f3:fd:94:3e:61: 88:52:71:b0:2b:83:54:8c:9c:d9:88:7b:0e:d0:00:80:f3:27: 84:e9:d3:cd:d7:c5:89:02:dc:22:cf:61:25:64:22:21:fa:c7: 60:99:ee:2d:c4:23:c8:4d:65:ff:c2:14:7b:2a:0c:29:50:93: 05:86:48:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwNTExMDU0MTUwWhcNMjYwNTE4MDU0MTUwWjAYMRYwFAYD VQQDEw02YTAxNmMxZi1mNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dt7+H74npS6k8Ibp3jgYDs19kf0mJIbMuOhxWzfYq6ki0Le/c0WLnSzMUaT w3hYSmeL4xI9+rdsSMRTVoQH4RSIFbGcO71u5i7MfXc9f2EwYYFTFoiduKYuYca3 z/hsgBQH4gMEzHX8eptTNohlyjMf0JUa/8W6wVeJHmj4DkWlGO8POBeI0pPJ3KzD U0Wsbp1xALfujBSy7RjLrVXkbWjv7F5Pt977e8isT+61GlgENbbmQEpB2IPJ45fk 1vBS6sTNiqOf+6Aa2X/afWkTQzzshQGPcglw+bRnODEzMlXnngLdjF2R9hOY5GU8 NiX/hCpR0N9s4WdHH0z2PVnrcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnihk9w K3TAFWSwjM4lkdwCJQu9MB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0FgnfNqT8+IcEJEz432ruK7P8nFS62zS3YyhLU5U0JlXlH8JahMarhk13tV 9rWaDhB7u1Qcloez/v/iPQxfwojA1MHMaErZLHLYVrzFYx4B7ixeygpqKPQwVyQg NdoSsZ/ddq/YtqG45QSvy+fMhZ0uHys8bbPiWkuiRbej98j1tKRBBd6Xcu7HSqoW Ro/ZHK+ENxlPwWc881PQHuFljYrD8FQ+qqgou4sIUsAwQFKdT8x/xTmivEA92SZ4 vEz9kfP9lD5hiFJxsCuDVIyc2Yh7DtAAgPMnhOnTzdfFiQLcIs9hJWQiIfrHYJnu LcQjyE1l/8IUeyoMKVCTBYZIuw== -----END CERTIFICATE-----Generated at Wed May 13 04:35:36 2026 by rpki-client