
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier: tIlr4muQbH7LuKpjzyGB2osMrdbnXYCY8qU4SHTo7TE=
Subject key identifier: 63:CD:72:47:E2:93:71:C9:6A:6C:95:37:7E:6E:74:3E:EE:4D:13:D1
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial: 0D13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number: 0CFD
Signing time: Fri 12 Jun 2026 18:22:22 +0000
Manifest this update: Fri 12 Jun 2026 18:22:21 +0000
Manifest next update: Fri 19 Jun 2026 18:22:21 +0000
Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: ryXTHw3FwjEIP70Z7kAYdulFUvkfvkuJsZcDdKntRnM=)
2: 656EC012543511F1885A5D83A2833773.roa (hash: YJg5JVgAKS5b1sOp/0Se1nfEITh91JRbPpTZBCAp67I=)
3: F208B4B05DEF11F187405161BD833773.roa (hash: ZWgiWF4CXCt37kranqZqOv/FlMQUzVgBnDh5EhOP1cI=)
4: 8DBBDE9C5DEF11F18C01C64FBD833773.roa (hash: 7b/Lfw2aHzuIkV4xitvizUnPInwhgKAGehvAixn2H/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Validity
Not Before: Jun 12 18:22:21 2026 GMT
Not After : Jun 19 18:22:21 2026 GMT
Subject: CN=6a2c4e5d-15c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:ec:93:62:89:a5:0a:81:97:4c:a4:91:69:
9a:b5:a3:f0:f9:89:9b:52:f7:03:8f:95:1e:d3:06:
f8:e2:c5:13:26:72:fd:95:f0:f2:fe:30:1a:12:04:
9a:d3:3d:bb:f0:84:bf:38:27:91:4c:d9:af:f5:c5:
8f:5b:d4:51:cd:a8:55:1f:5c:42:91:a8:5b:e2:d1:
60:d2:7e:a7:cd:26:a2:a1:cf:aa:b1:4e:88:23:71:
dd:af:52:94:23:ab:7a:1f:90:ae:a4:5c:d9:c4:d1:
89:89:9b:64:c9:11:be:40:d4:17:20:aa:25:67:fe:
4d:ec:ea:94:32:eb:61:d0:55:22:5b:c3:7d:33:09:
04:90:4b:8b:19:02:74:a9:4a:e4:ce:e3:f4:4b:18:
e3:c9:cc:50:d3:a8:a8:01:c1:89:e4:17:30:1c:ea:
74:82:8c:fe:b3:96:43:81:ec:95:6d:8e:89:ba:90:
01:bb:1c:d3:07:42:a3:01:96:aa:9e:b2:f6:42:e5:
ba:da:87:4f:90:3d:3e:98:8d:f6:47:12:16:6c:e8:
f3:5f:30:10:10:06:84:b7:7d:60:e5:c1:14:19:dc:
99:45:e7:b4:82:73:e9:d4:66:27:66:fa:5e:7d:ec:
e0:74:91:ef:1a:4f:57:38:08:f9:59:0a:0c:fd:c8:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:72:47:E2:93:71:C9:6A:6C:95:37:7E:6E:74:3E:EE:4D:13:D1
X509v3 Authority Key Identifier:
keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:6e:a3:82:4e:c1:6f:40:fc:14:75:72:10:77:d5:7d:c0:11:
af:15:6b:49:4c:66:fa:07:db:72:48:81:09:07:01:f6:03:3e:
e2:01:eb:1b:0b:e0:e3:8c:a4:71:47:0b:4f:b4:bc:6f:dd:39:
bc:36:b5:22:7a:38:bc:70:fc:01:8d:d0:59:77:c7:7a:62:75:
47:74:df:ef:13:e4:49:17:65:7c:65:97:93:c4:4e:36:f0:4a:
3f:b5:2c:39:8a:6f:66:23:0d:95:b6:5d:8a:08:b5:27:ab:53:
e3:c4:29:1e:56:3b:f1:33:e8:6b:7d:fa:ea:b0:2c:ae:2b:00:
81:54:a5:7a:7f:e9:7a:7b:d6:b9:3f:c6:d6:3f:0e:a5:bb:af:
f0:ba:38:47:96:ba:17:ac:7d:05:e3:30:89:85:a3:af:a6:6d:
11:3c:72:86:fe:5f:78:ec:8a:2d:e8:67:9b:bb:0f:da:e3:27:
35:a3:b8:b8:48:c4:e4:ea:d4:fc:66:57:a3:6e:7d:08:5b:f2:
2a:50:10:46:10:ca:65:25:50:5d:9a:22:55:ad:78:29:c2:28:
dd:a0:68:90:a7:03:cd:46:60:23:11:22:ce:52:07:cb:96:c7:
e3:77:9f:f9:38:d7:9d:a8:dd:db:56:2c:ae:3a:27:d8:49:71:
5a:01:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:31 2026 by rpki-client