
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier: L56aYtAMo8q9ZiTrZKV9CpdlHWZ2J+E0NcWit/eWhRQ=
Subject key identifier: 5A:7A:05:64:A1:4E:D3:43:60:F5:34:D0:DE:9C:78:5E:AF:8B:74:CA
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number: 014C
Signing time: Fri 17 Jul 2026 06:19:53 +0000
Manifest this update: Fri 17 Jul 2026 06:19:53 +0000
Manifest next update: Fri 24 Jul 2026 06:19:53 +0000
Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: 30r42WItzk1Ex04PI12qh7iYJNKybTTaKFCjKOREBFs=)
2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Validity
Not Before: Jul 17 06:19:53 2026 GMT
Not After : Jul 24 06:19:53 2026 GMT
Subject: CN=6a59c989-18c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:f7:a7:14:0b:e5:1a:9c:26:c3:ad:c2:25:
3b:c8:dd:5a:59:1c:92:c1:a3:21:f5:0b:96:77:fe:
9f:90:fb:cd:c2:4f:95:bd:7c:df:ee:bb:7f:dd:be:
8b:16:6d:c6:6a:01:99:b3:f9:73:66:61:82:13:77:
5b:74:b2:6e:78:9f:63:dc:f3:ea:6e:e8:c0:9d:26:
f7:ea:a4:45:ed:ce:48:89:de:2e:6f:14:d3:4d:eb:
63:36:84:23:1e:68:fc:61:35:09:14:be:c4:97:16:
ec:ad:4b:e5:e6:25:8e:07:6f:d1:f5:6e:b9:94:0b:
2d:6c:c4:44:22:7d:b3:6a:cf:9b:20:20:c4:b7:fe:
e9:e5:9d:f4:d1:5f:45:15:fb:a9:22:bf:d9:21:d3:
3e:63:de:00:1c:32:a6:73:2e:4d:0d:a3:4d:99:49:
4b:98:c7:1b:9f:81:f9:a5:9a:c8:b7:94:fe:72:e1:
d2:c5:47:24:94:17:44:f8:4d:da:29:4a:50:f1:7b:
6f:9e:fd:4d:fb:6d:9d:0f:11:42:de:94:80:60:7a:
63:24:55:9f:0a:1c:63:9e:7f:f4:9e:4a:e9:c5:8f:
e5:be:4d:32:24:0f:c2:a2:31:27:49:43:76:80:35:
d5:c7:2b:b9:a0:76:92:33:2c:9b:a4:9a:9f:ce:7d:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:05:64:A1:4E:D3:43:60:F5:34:D0:DE:9C:78:5E:AF:8B:74:CA
X509v3 Authority Key Identifier:
keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:65:74:b4:0e:3a:e6:6d:73:bd:df:f9:ce:7f:91:5a:43:
a6:74:07:b8:cb:40:1e:41:20:a2:ba:e2:45:89:7f:2e:47:7b:
da:30:cf:96:32:42:27:87:ed:5e:f9:e2:da:05:a4:4c:9d:4f:
b4:1d:d3:72:92:11:aa:7a:ea:54:29:d5:ad:2d:d7:fd:99:cf:
28:bb:ca:f8:f4:4e:00:4b:32:c1:d4:73:64:8a:e0:bd:5f:e9:
3f:8e:5d:8e:ad:e1:86:82:dd:ba:ac:15:4f:5f:d8:b6:31:3d:
49:c6:f6:45:66:fb:08:81:12:0d:52:85:85:7e:70:bb:ff:a9:
e5:16:7f:b0:ab:1f:c6:cd:39:ff:cf:54:b2:fb:0f:16:62:49:
07:20:6a:dc:a2:44:9d:98:74:ed:96:36:37:37:50:cc:15:44:
da:01:22:97:ac:4e:28:19:a6:17:46:8e:64:f0:33:76:1c:5a:
1e:fb:b8:e8:96:15:6b:f3:79:ad:50:4b:a4:86:1d:a7:3b:c5:
26:95:1b:d2:28:0a:a1:4c:b3:70:97:e8:d0:73:ca:eb:81:4b:
00:fb:dc:c8:af:ae:ce:04:63:79:27:67:ea:31:68:e3:5d:5b:
89:5b:15:a9:44:5b:12:da:f5:0d:9f:38:af:64:30:7c:1e:9f:
09:18:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:20 2026 by rpki-client