
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier: uZN5qoxwVyA++T2GOw6jchpzUe7HbkvZmg7Anq4o+iY=
Subject key identifier: 45:49:AC:A8:3F:53:44:C9:F1:D8:3B:30:41:20:D2:8D:1F:91:E9:EC
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial: 0727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number: 5441
Signing time: Mon 02 Mar 2026 15:08:37 +0000
Manifest this update: Mon 02 Mar 2026 15:08:37 +0000
Manifest next update: Mon 09 Mar 2026 15:08:37 +0000
Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 12YG9yQf21YOC1Fc0dtnbTu1UKh0QlcF5VX+85FboSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Validity
Not Before: Mar 2 15:08:37 2026 GMT
Not After : Mar 9 15:08:37 2026 GMT
Subject: CN=69a5a7f5-c66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:cc:cc:f9:15:42:25:85:3b:c6:12:b2:76:
8f:9e:40:5e:c4:56:46:de:2f:97:11:c5:b1:44:36:
d6:68:d3:87:4a:1c:cd:99:d8:98:61:46:38:81:e0:
36:f0:55:28:f6:99:40:5f:ec:85:d7:88:69:bb:43:
b5:c4:a9:9f:ff:3f:d6:be:a1:2d:70:e0:fb:22:00:
cf:f9:a2:b1:af:5c:91:97:ae:79:3f:a3:64:5a:07:
e0:25:db:96:27:12:a4:9d:06:1c:b3:0f:78:5c:bc:
a1:f6:f4:a9:92:a3:d0:08:12:10:06:45:13:f0:35:
3c:56:e7:04:fe:80:fb:f2:95:be:bc:c3:fe:6d:9b:
77:7c:af:7e:3d:24:35:be:8d:66:28:65:d3:7f:c4:
4f:4f:04:e9:31:8a:b9:74:46:e9:fa:98:75:8e:8e:
8a:23:8f:ab:0b:f1:b6:cb:d9:c2:62:7a:13:a2:26:
b2:99:04:2b:fa:29:b6:12:b5:a7:9b:6c:8e:b8:c8:
72:4f:b7:db:43:11:18:9f:f0:21:e3:c1:e3:7c:be:
5d:06:37:22:e8:26:bf:d1:15:23:71:a2:5e:12:ce:
35:26:da:40:2b:f3:5c:9f:b5:28:43:0c:78:8f:2e:
54:94:b8:39:91:7e:f7:23:65:d7:05:c2:2a:60:53:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:AC:A8:3F:53:44:C9:F1:D8:3B:30:41:20:D2:8D:1F:91:E9:EC
X509v3 Authority Key Identifier:
keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:2b:62:87:3a:9e:d7:d7:eb:c3:94:8a:31:c0:ad:ba:18:2f:
19:94:d5:6e:ad:50:44:b2:1d:79:e4:bf:09:1d:d5:7e:89:83:
08:ab:23:a3:5a:99:51:e2:5d:9f:d3:6f:61:9f:f1:f8:3e:0c:
94:fa:d1:d8:89:ad:74:dc:0d:6f:9b:4e:2f:7c:50:16:45:e8:
06:e5:d3:75:ff:fe:e9:a7:b7:21:5f:af:b7:a1:62:17:2f:06:
28:a7:0d:1a:51:e2:91:f5:5c:1e:0a:b1:e9:ac:0e:64:1e:60:
09:67:ec:b4:d4:0a:d2:af:76:a3:39:f0:fe:4f:80:40:be:51:
52:b9:84:7e:0d:e6:da:5f:8b:26:19:8d:8b:22:48:21:85:bd:
54:e0:90:e6:12:5c:a9:a7:a6:78:4e:c7:bb:d3:89:b8:12:ea:
44:8b:98:2d:b0:23:2c:d1:36:39:17:d5:71:fa:94:2f:26:63:
8e:fe:66:56:02:45:03:1d:8a:d1:15:6b:dc:d7:a0:c0:86:d1:
7e:60:38:76:8e:c8:6e:0e:81:f6:a6:32:48:93:58:80:cd:9e:
38:b0:24:7f:74:79:01:ff:f9:ce:90:03:64:81:ff:e6:6b:6f:
e9:0c:b9:bb:7a:ec:af:ac:f7:65:74:bd:5a:b4:ba:e2:77:7d:
25:83:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:33 2026 by rpki-client