
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
File: neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json)
Hash identifier: 35AIr3VJlVatcJDLWxFycu/YYz5BxvFCGbqYtxSMbT8=
Subject key identifier: EA:D5:7D:5C:97:0A:1E:36:6A:13:04:50:9B:CE:73:26:CB:3D:B8:35
Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
Certificate issuer: /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
Manifest number: 01FE
Signing time: Wed 05 Nov 2025 02:32:47 +0000
Manifest this update: Wed 05 Nov 2025 02:32:46 +0000
Manifest next update: Wed 12 Nov 2025 02:32:46 +0000
Files and hashes: 1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: d3uqZfFmVP3Wo9Mzc4/2EMpaOsYlUSxWbGxCvcYUOS8=)
2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: z1DiM+Sb1v9sxtvB7lwEWlS9RqjVAOPpk9d0UUYugp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Validity
Not Before: Nov 5 02:32:46 2025 GMT
Not After : Nov 12 02:32:46 2025 GMT
Subject: CN=690ab74e-0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:0b:a5:12:d0:ee:31:05:d8:e5:62:b1:67:
b4:6b:49:cb:52:42:54:64:eb:e3:40:5f:25:68:54:
7e:e6:ba:a6:26:58:61:33:da:27:9f:89:68:b5:39:
60:43:20:ae:6a:77:88:90:db:a8:3a:a2:3c:e5:1b:
25:7f:c3:d0:af:73:e5:a5:86:96:a7:09:f0:4f:82:
98:26:0d:37:ad:59:28:b3:2b:d9:5f:f3:f6:f8:a9:
05:05:7a:84:ee:95:6c:fb:57:3f:bf:3e:87:0f:4e:
ab:54:57:d8:8e:2a:5b:47:fd:f5:65:75:2a:93:b3:
d5:cf:36:9b:66:0a:e5:ee:4c:d9:32:8b:40:44:9c:
32:7d:8f:ef:8e:f9:72:0b:bf:37:b2:b8:bd:db:34:
98:df:cd:24:02:bd:24:3f:db:b0:47:dc:0d:70:82:
5b:28:7b:ad:7d:de:5c:86:75:6e:63:b4:e4:e3:8d:
51:2e:3f:c8:67:53:eb:90:ab:01:f1:5c:03:0b:54:
13:b4:de:4d:27:56:65:f8:84:fb:5f:5f:e3:bf:cf:
5c:d0:fc:90:bb:7c:5e:cc:0e:6c:79:13:29:b2:40:
ac:be:e7:cd:a5:d0:2b:39:4b:92:75:4f:ca:c7:f5:
a9:88:88:b7:34:44:f5:a8:e5:1f:af:55:7f:6c:60:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:7D:5C:97:0A:1E:36:6A:13:04:50:9B:CE:73:26:CB:3D:B8:35
X509v3 Authority Key Identifier:
keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:f8:78:25:a7:5d:87:17:6f:c5:8a:49:1f:91:b3:8f:5e:
59:a8:68:b0:43:7c:2a:8c:29:e2:36:84:ed:db:4b:a0:c5:ea:
d5:eb:42:d1:e2:fb:f2:02:15:91:71:26:1d:3e:3d:10:a6:89:
6d:69:2c:23:d4:84:3a:c5:db:4b:0f:ff:37:5e:53:7a:70:fb:
9e:8e:d1:2e:72:f5:aa:20:dd:90:ed:47:c1:53:17:ab:3d:99:
03:0a:ab:50:35:80:20:ee:c5:ca:f7:17:75:93:8d:51:9c:bf:
c0:ba:92:97:23:fa:58:c8:45:fa:2d:15:69:fe:62:98:13:d8:
6a:01:e2:90:41:72:ed:5a:5d:bc:9c:6f:93:7d:79:7f:5c:bf:
87:b5:f3:c8:3e:90:d7:4f:60:37:90:ec:6c:8c:b1:1d:0f:80:
c4:1e:25:38:b8:23:e2:24:d2:1a:5a:ed:46:3b:e5:7c:e1:31:
2a:66:1d:a7:94:47:de:4f:f6:98:8b:f2:1a:89:bb:53:7f:1c:
8b:ed:21:77:4f:7c:15:49:58:6c:13:91:ca:e7:82:4d:9e:fd:
e2:f3:b9:97:3b:da:c2:6e:39:80:cc:eb:35:65:ef:c0:65:48:
94:67:fa:3e:cd:a9:91:4e:62:cb:2c:ff:f2:6f:d6:dc:a3:06:
66:0e:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:00 2025 by rpki-client