
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier: pjzU0jzTu4rFFn6i37NCIx0eTYXl3gC9XL+h5Yhv0QQ=
Subject key identifier: 85:3C:59:EB:1A:33:53:BC:21:2B:0E:BA:08:76:7E:86:3A:5E:67:A8
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial: 0D2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number: 0D14
Signing time: Tue 28 Jul 2026 18:30:40 +0000
Manifest this update: Tue 28 Jul 2026 18:30:39 +0000
Manifest next update: Tue 04 Aug 2026 18:30:39 +0000
Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: 5MA8ulQojK1rVmfhmu6UwEtplhFwctrWHMWpRaaCjDY=)
2: F208B4B05DEF11F187405161BD833773.roa (hash: ZWgiWF4CXCt37kranqZqOv/FlMQUzVgBnDh5EhOP1cI=)
3: 8DBBDE9C5DEF11F18C01C64FBD833773.roa (hash: 7b/Lfw2aHzuIkV4xitvizUnPInwhgKAGehvAixn2H/E=)
4: 656EC012543511F1885A5D83A2833773.roa (hash: YJg5JVgAKS5b1sOp/0Se1nfEITh91JRbPpTZBCAp67I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Validity
Not Before: Jul 28 18:30:39 2026 GMT
Not After : Aug 4 18:30:39 2026 GMT
Subject: CN=6a68f550-9b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:96:2f:ad:30:66:b6:e6:22:aa:62:4e:32:
fd:37:41:b9:91:c6:f6:97:92:07:ca:f1:d2:20:62:
b7:e4:28:a6:35:8c:42:8f:a1:d8:da:ae:ce:70:42:
ac:3f:2e:af:68:8f:b1:35:10:88:89:85:a8:32:d4:
e9:d1:6f:94:0a:db:a2:47:76:a2:dd:50:52:1a:0c:
09:3b:5b:59:8d:2b:37:51:49:a8:70:bf:35:45:b5:
ee:d8:61:be:af:f6:f4:4c:fb:a8:c1:cb:6a:7d:18:
ff:a9:69:0c:d2:af:b2:00:20:c2:e6:ca:a8:e8:3d:
a1:6e:67:38:90:03:18:64:96:55:8f:28:96:27:3e:
f3:af:46:4e:af:4d:af:bc:8a:20:95:9c:49:dd:b1:
97:3c:65:08:85:35:ed:ec:63:68:64:56:91:55:aa:
fb:19:30:f5:cb:97:fa:23:7a:86:08:8e:2a:ba:9d:
67:6b:79:78:d9:32:d0:d4:6e:6d:aa:2e:15:d8:c1:
08:44:3d:9e:ec:6e:89:f9:47:9f:aa:f7:bc:23:89:
4d:1a:94:86:5c:99:1e:c2:b7:d7:4a:85:f8:c3:d4:
06:6c:b9:98:4d:bf:20:1d:63:ba:f3:ab:0d:a3:33:
70:60:2a:00:71:d6:01:ca:ea:eb:6c:d7:2f:eb:87:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:59:EB:1A:33:53:BC:21:2B:0E:BA:08:76:7E:86:3A:5E:67:A8
X509v3 Authority Key Identifier:
keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:78:7e:da:b2:07:5d:2a:bc:57:9c:24:a5:89:14:dc:76:
3e:ac:69:bf:5a:5f:cf:6f:94:dd:1b:64:cd:76:05:50:7b:39:
1d:35:b0:9f:4e:8b:ea:bf:95:94:3f:f8:ca:4a:f1:a5:24:9d:
62:20:90:6e:98:69:a4:95:49:ff:a5:b7:af:d7:8d:c2:b5:5f:
9b:bc:8d:16:08:12:43:a3:12:03:a0:3b:28:02:7c:3e:90:f9:
84:a7:ba:1e:2e:7a:3c:2c:46:d9:aa:c3:b8:7e:5e:8a:f4:ad:
1e:0a:22:22:3e:7f:49:9c:05:50:f9:de:4c:43:8f:f6:a2:06:
0e:8e:69:29:b0:86:63:2b:04:67:e2:dd:ec:b6:14:a0:69:a4:
24:52:4a:0e:01:28:6b:50:fa:a0:fd:cc:3c:be:8c:dc:42:59:
76:23:b9:68:80:45:91:86:b9:b4:75:f4:71:fc:85:89:7f:02:
52:28:1a:3c:8f:68:05:94:2a:7e:15:c7:da:03:56:40:57:74:
21:c5:96:e5:3a:68:47:fe:d1:ba:c7:65:c9:56:b7:4d:5e:f1:
73:a1:4c:e7:72:35:1c:f8:a8:2c:8a:a4:d5:54:33:77:ab:70:
f3:f5:c4:5c:e9:bf:b7:23:83:fe:4d:1b:44:21:6f:a2:a5:77:
86:02:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:27 2026 by rpki-client