
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier: qbB5nJ/75+Hgoytg9gowMSi9ritzbc5UpP6ycc3SmiQ=
Subject key identifier: 2D:8B:19:4E:3B:C8:83:E3:3B:CA:FB:11:EB:49:34:5F:B6:CD:E1:BA
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial: 0D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number: 0CF8
Signing time: Tue 02 Jun 2026 18:23:27 +0000
Manifest this update: Tue 02 Jun 2026 18:23:27 +0000
Manifest next update: Tue 09 Jun 2026 18:23:27 +0000
Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: HDVyqtJDxkgYVmKVhgI/qGdvR99fRHLyjrszY3xtmBE=)
2: 8DBBDE9C5DEF11F18C01C64FBD833773.roa (hash: 7b/Lfw2aHzuIkV4xitvizUnPInwhgKAGehvAixn2H/E=)
3: F208B4B05DEF11F187405161BD833773.roa (hash: ZWgiWF4CXCt37kranqZqOv/FlMQUzVgBnDh5EhOP1cI=)
4: 656EC012543511F1885A5D83A2833773.roa (hash: YJg5JVgAKS5b1sOp/0Se1nfEITh91JRbPpTZBCAp67I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Validity
Not Before: Jun 2 18:23:27 2026 GMT
Not After : Jun 9 18:23:27 2026 GMT
Subject: CN=6a1f1f9f-1b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:12:18:67:81:b6:82:28:85:26:10:69:8f:
49:db:1c:91:5c:24:33:9e:eb:9e:7e:05:f1:de:b0:
87:1f:b4:ac:99:7d:be:4a:43:e2:14:97:ba:c6:3d:
a8:2e:2a:47:68:85:d8:54:e2:e9:3a:32:67:8c:c4:
bf:af:3a:f6:0f:fc:b0:d4:31:64:3e:ac:62:8a:a5:
b4:42:12:2f:89:35:4a:26:51:fc:3e:f0:08:d1:d7:
81:b7:3f:2d:8d:8c:7d:6b:d5:d3:7c:21:ed:7c:c1:
4e:c5:77:a0:c6:46:d5:61:56:b0:2a:6a:d5:34:4b:
6f:0e:4e:46:e8:27:24:7a:4b:9f:5d:f1:49:47:47:
2e:1f:90:de:8c:1e:85:cb:3e:77:95:01:3d:64:13:
3e:8b:f0:63:5f:f3:e0:9d:f5:1f:99:7d:57:d0:76:
90:6c:01:c1:76:4a:a8:df:18:3b:69:74:a5:ad:8d:
49:f7:97:1d:22:48:63:e3:7b:ee:bf:d7:36:ac:48:
b7:23:a9:c9:55:47:9a:9c:6e:91:b2:7a:d6:39:c1:
da:cd:f2:2b:58:f5:4a:96:f3:1b:29:94:94:1e:b5:
26:5f:01:63:af:67:88:82:07:34:9a:17:97:27:6e:
40:08:a4:8e:b3:fb:83:11:9f:73:00:77:f5:c0:01:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:19:4E:3B:C8:83:E3:3B:CA:FB:11:EB:49:34:5F:B6:CD:E1:BA
X509v3 Authority Key Identifier:
keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:87:44:ae:a9:ce:08:cc:d8:e4:d2:d4:1d:c7:26:48:45:
00:9d:1c:93:35:62:18:a8:29:ba:61:de:36:47:e4:ce:af:53:
b3:f2:2e:a1:e7:f6:0d:dd:79:70:03:10:ce:5b:56:1e:02:b7:
88:4f:45:b1:c7:f6:d3:6e:a9:14:e8:f3:4f:a7:fe:9e:4b:a6:
a9:d2:fe:ac:3e:a1:82:bf:6e:58:1c:67:79:ba:5f:bf:b5:ac:
2f:00:20:22:bf:35:02:cb:98:2b:4b:5c:6f:f5:2b:a8:e0:ff:
46:dc:4c:25:1f:f2:b7:55:f9:4b:08:db:07:ef:2e:13:ba:be:
33:af:2e:2e:59:2b:1b:95:1f:fd:88:fd:fa:67:b5:13:87:53:
bc:f8:2f:a6:3f:8b:f4:26:9d:ea:1b:36:7e:00:5b:8c:38:95:
ca:d8:7b:c5:71:e3:ef:22:92:ff:78:1b:cd:9c:d4:7f:f6:1f:
d5:f7:a0:4b:b1:02:09:21:a6:0d:a7:f5:64:9d:dd:bb:e6:79:
55:1a:25:16:40:45:4d:6e:95:44:2a:4e:1a:c5:24:30:b3:42:
db:01:4f:6f:46:e0:87:cd:13:b9:4b:72:9b:4c:c5:3d:9a:10:
09:80:95:c4:00:4a:74:68:6a:ad:f9:fb:81:1c:a6:df:df:c0:
9a:e6:17:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy
NTZDM0M4NzYwHhcNMjYwNjAyMTgyMzI3WhcNMjYwNjA5MTgyMzI3WjAYMRYwFAYD
VQQDEw02YTFmMWY5Zi0xYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlQsSGGeBtoIohSYQaY9J2xyRXCQznuuefgXx3rCHH7SsmX2+SkPiFJe6xj2o
LipHaIXYVOLpOjJnjMS/rzr2D/yw1DFkPqxiiqW0QhIviTVKJlH8PvAI0deBtz8t
jYx9a9XTfCHtfMFOxXegxkbVYVawKmrVNEtvDk5G6CckekufXfFJR0cuH5DejB6F
yz53lQE9ZBM+i/BjX/PgnfUfmX1X0HaQbAHBdkqo3xg7aXSlrY1J95cdIkhj43vu
v9c2rEi3I6nJVUeanG6RsnrWOcHazfIrWPVKlvMbKZSUHrUmXwFjr2eIggc0mheX
J25ACKSOs/uDEZ9zAHf1wAHrxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2LGU47
yIPjO8r7EetJNF+2zeG6MB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC
ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND
eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm7GHRK6pzgjM2OTS1B3HJkhFAJ0ckzViGKgpumHeNkfkzq9Ts/Iuoef2Dd15
cAMQzltWHgK3iE9Fscf2026pFOjzT6f+nkumqdL+rD6hgr9uWBxnebpfv7WsLwAg
Ir81AsuYK0tcb/UrqOD/RtxMJR/yt1X5SwjbB+8uE7q+M68uLlkrG5Uf/Yj9+me1
E4dTvPgvpj+L9Cad6hs2fgBbjDiVyth7xXHj7yKS/3gbzZzUf/Yf1fegS7ECCSGm
Daf1ZJ3du+Z5VRolFkBFTW6VRCpOGsUkMLNC2wFPb0bgh80TuUtym0zFPZoQCYCV
xABKdGhqrfn7gRym39/AmuYXSw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:23 2026 by rpki-client