$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: hihhcImtfSKl/kADuGIAb0jiysHedGs/eWES2rFnHRA= Subject key identifier: 45:2C:7B:51:E4:0E:81:F7:5B:1A:18:25:66:07:70:22:0E:60:CA:7E Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 0170 Signing time: Fri 25 Sep 2026 04:52:38 +0000 Manifest this update: Fri 25 Sep 2026 04:52:38 +0000 Manifest next update: Fri 02 Oct 2026 04:52:38 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: zOLFetIsZvrHQs29uSuEMOwrDEcPj2BvxMuxjTy503Y=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Sep 25 04:52:38 2026 GMT Not After : Oct 2 04:52:38 2026 GMT Subject: CN=6ab5fe16-bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:3e:29:91:b5:ce:6e:b9:0d:ba:20:73:59: 63:e3:4b:65:50:06:91:ec:43:4f:d5:fc:60:b6:93: 92:0f:43:6e:36:c3:19:a0:da:00:8d:44:b0:5c:15: 2f:b2:27:bf:a4:16:fe:72:d0:2b:54:39:c5:98:7a: 4b:e8:d0:24:5a:08:8d:eb:d9:85:b1:1c:56:db:cc: e1:86:e2:1b:8a:36:42:44:28:38:ed:61:9a:72:02: 48:e5:0f:90:de:5a:41:aa:5d:42:ba:3a:51:a9:b1: eb:b6:4b:5c:5b:f3:19:2a:0a:b5:d9:c5:84:30:0c: 5b:0d:53:ed:d6:13:04:fc:4f:21:72:63:f8:b4:ff: a1:9f:4c:fd:a0:2b:34:7f:fd:83:cc:ac:9f:5c:18: 14:27:7c:a1:8a:a5:53:99:b5:63:3c:8d:1e:29:8e: 38:8e:34:dd:22:0b:75:90:6a:df:f3:98:46:01:f3: cb:fe:b6:fc:17:2b:c1:a0:ab:d6:83:5f:aa:8c:1e: 50:8b:4d:84:1d:7b:7c:b4:e8:00:42:fc:3f:69:3a: 0d:14:13:2a:b6:a0:0c:62:36:6a:62:91:b7:bf:a1: 74:18:97:f9:c7:ef:f7:ae:cf:b5:8a:ca:e3:81:a1: 46:ef:96:71:33:15:89:84:71:36:37:df:1d:25:5c: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:7B:51:E4:0E:81:F7:5B:1A:18:25:66:07:70:22:0E:60:CA:7E X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f8:9a:8d:33:e8:66:0d:4d:19:0c:23:6d:bc:e0:35:84:40: 6d:e9:53:2f:cb:fe:da:85:7f:38:b7:b1:f7:0a:23:44:16:17: b9:51:c0:99:60:04:92:b9:6e:73:68:93:1e:2a:ce:9c:a6:66: dc:ca:53:89:b9:d1:f2:71:67:38:60:9c:0a:d9:ba:bf:b2:59: 51:51:e8:07:b9:32:16:62:dd:59:24:08:c5:58:34:38:9e:20: 74:23:df:18:cd:c0:29:f6:f6:64:25:88:7d:a9:f8:01:4d:5e: 64:06:54:cb:73:bb:46:2d:85:78:82:5b:7a:36:ea:db:7f:0d: a5:a6:55:72:ba:4b:e7:aa:f1:e4:7e:50:c8:9f:e2:16:66:fb: 6a:ff:57:df:4f:92:b4:04:e5:15:ed:36:e1:cd:b7:8e:89:0e: 88:b1:3a:a4:4c:6a:67:56:d3:49:0d:a0:cb:51:f9:59:e3:fa: 6e:5b:4a:d3:e2:e5:3d:57:7a:d8:22:07:26:08:89:5f:57:55: ed:36:8a:a2:13:e2:6c:bd:5b:96:b2:89:4b:3e:1c:d4:75:d6: 1f:19:66:34:e6:69:d0:fe:48:ab:50:9a:50:0c:26:67:8a:69: 19:ca:3f:32:a9:27:b3:ae:17:e2:b9:ab:bf:d7:f6:73:d0:8c: 31:3a:c0:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjYwOTI1MDQ1MjM4WhcNMjYxMDAyMDQ1MjM4WjAYMRYwFAYD VQQDEw02YWI1ZmUxNi1iYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouE+KZG1zm65Dbogc1lj40tlUAaR7ENP1fxgtpOSD0NuNsMZoNoAjUSwXBUv sie/pBb+ctArVDnFmHpL6NAkWgiN69mFsRxW28zhhuIbijZCRCg47WGacgJI5Q+Q 3lpBql1CujpRqbHrtktcW/MZKgq12cWEMAxbDVPt1hME/E8hcmP4tP+hn0z9oCs0 f/2DzKyfXBgUJ3yhiqVTmbVjPI0eKY44jjTdIgt1kGrf85hGAfPL/rb8FyvBoKvW g1+qjB5Qi02EHXt8tOgAQvw/aToNFBMqtqAMYjZqYpG3v6F0GJf5x+/3rs+1isrj gaFG75ZxMxWJhHE2N98dJVy7sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUse1Hk DoH3WxoYJWYHcCIOYMp+MB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/iajTPoZg1NGQwjbbzgNYRAbelTL8v+2oV/OLex9wojRBYXuVHAmWAEkrlu c2iTHirOnKZm3MpTibnR8nFnOGCcCtm6v7JZUVHoB7kyFmLdWSQIxVg0OJ4gdCPf GM3AKfb2ZCWIfan4AU1eZAZUy3O7Ri2FeIJbejbq238NpaZVcrpL56rx5H5QyJ/i Fmb7av9X30+StATlFe024c23jokOiLE6pExqZ1bTSQ2gy1H5WeP6bltK0+LlPVd6 2CIHJgiJX1dV7TaKohPibL1blrKJSz4c1HXWHxlmNOZp0P5Iq1CaUAwmZ4ppGco/ Mqkns64X4rmrv9f2c9CMMTrA/w== -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:03 2026 by rpki-client