
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File: NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier: VCg3HcJYTFv8qiMlShfEIWsOFOjdRM++caKlbD6a6LE=
Subject key identifier: D1:B0:CC:6E:76:65:15:CC:2B:92:35:93:7A:C5:7A:34:76:4C:78:A1
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial: 1124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number: 1110
Signing time: Fri 18 Sep 2026 17:16:23 +0000
Manifest this update: Fri 18 Sep 2026 17:16:22 +0000
Manifest next update: Fri 25 Sep 2026 17:16:22 +0000
Files and hashes: 1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: Pv5gKPzFIg83C0HqOXGZkAfLtaqtLzbarCcsOFYUsiA=)
2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: ix8Y0mmn+/uiIe+QXDDaxKrAmCa1p4V0bjpTh/sxjE4=)
3: 252B08AA394411F18E3B3D83C3833773.roa (hash: OnSxIzXoVolQDucHFePW8Iyl7AQJrkNWpcnFIbtiYl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4388 (0x1124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Validity
Not Before: Sep 18 17:16:22 2026 GMT
Not After : Sep 25 17:16:22 2026 GMT
Subject: CN=6aad71e7-728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:02:b7:e2:ec:38:76:15:d3:d3:c3:25:b5:bf:
9a:b4:db:a8:d0:85:5a:7e:34:35:1a:f3:8e:6e:cf:
00:ba:65:64:de:e5:2c:55:bf:e2:23:1a:5f:e2:f8:
08:c3:46:62:07:af:e3:e0:e2:97:85:ba:f4:8d:4d:
0e:e8:e6:36:61:27:ba:7d:89:ab:5c:66:ee:42:1b:
49:7f:5a:52:2b:8a:b9:53:08:0a:43:92:a9:76:2e:
a2:cb:3f:45:08:ec:d6:6a:47:cf:eb:10:e7:37:23:
80:32:d8:a4:39:b1:5d:c7:c5:ac:b9:c2:ba:34:ec:
9f:05:f7:41:ac:5c:0b:2c:65:a1:76:fb:d9:d5:a6:
4d:cf:59:49:4d:27:3b:03:bc:3d:3c:a4:e1:4b:a4:
34:02:62:b6:14:d9:01:f8:5f:7d:e4:48:17:a5:ae:
9b:84:ab:e5:c9:08:7a:b4:46:01:98:b7:81:f2:7f:
e8:2e:86:8c:04:3a:67:b1:db:87:99:a0:87:06:25:
f4:94:5a:5f:69:92:a2:1a:52:91:d0:e5:9f:bd:77:
d9:0d:49:b7:37:21:a8:37:c7:03:9f:6b:f3:c2:e2:
dd:01:d8:e6:73:09:17:36:bc:31:50:0e:2c:78:b9:
56:74:5c:b6:64:99:3f:b5:ae:87:b9:17:fc:d4:41:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:CC:6E:76:65:15:CC:2B:92:35:93:7A:C5:7A:34:76:4C:78:A1
X509v3 Authority Key Identifier:
keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:69:c0:47:b6:32:00:09:a3:d7:dc:f4:e2:3c:08:c5:0f:
54:0e:0f:03:3a:ae:70:30:61:70:2e:7c:79:36:cc:8e:0c:42:
02:bb:eb:a7:2d:92:b9:03:49:e8:d9:42:d7:fa:ef:7a:cc:1f:
7b:13:e4:45:66:be:53:89:9a:69:0d:b5:2e:f1:68:13:7b:41:
f8:7c:c6:52:1b:35:7d:93:1d:e2:81:1a:84:aa:b6:73:ac:99:
ed:2d:42:55:f9:ff:a9:ec:69:1f:fa:a9:f0:a6:11:b8:17:01:
06:d9:4d:31:92:03:ae:23:13:d8:54:1d:63:c5:3e:1e:f1:f5:
ae:8d:7f:7c:ad:89:4f:83:23:36:42:52:a9:2e:b9:d1:a2:fc:
78:38:a2:55:c4:8b:a5:38:45:c7:23:6d:99:f3:c5:96:4b:3e:
45:0f:86:24:13:77:38:01:18:1f:7d:bc:b4:1b:48:df:b5:d3:
3e:dc:87:af:f0:df:1b:b1:a6:0b:26:70:d4:6b:b4:e3:89:f6:
b5:ef:8c:23:88:2f:43:4a:ba:73:0c:8b:1c:aa:7b:f8:03:ce:
cb:10:c9:1d:d3:29:85:3c:8c:12:07:87:70:e3:4b:c4:5c:f7:
a7:af:cb:02:28:1c:c6:d3:4c:67:a1:43:33:2b:fe:a1:ee:79:
04:1b:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:13:50 2026 by rpki-client