
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
File: neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json)
Hash identifier: noLuyDIzViOxWtxqscEduyDA1MmA7WI22VwIvKHHHOA=
Subject key identifier: 21:11:46:90:BE:6A:23:C2:C8:FD:1F:20:EC:7E:FA:5F:BB:67:10:3E
Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
Certificate issuer: /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
Manifest number: 024A
Signing time: Wed 25 Mar 2026 01:48:42 +0000
Manifest this update: Wed 25 Mar 2026 01:48:41 +0000
Manifest next update: Wed 01 Apr 2026 01:48:41 +0000
Files and hashes: 1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: 92sWpTvENPqftRzG+CpYgD2qtcHTwsUPDcCtqP9RLfQ=)
2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: 4ZFfuUPJdJ+8vV9n86bWe8AXYvC6+wgFDvcfvfmYa3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E81, serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Validity
Not Before: Mar 25 01:48:41 2026 GMT
Not After : Apr 1 01:48:41 2026 GMT
Subject: CN=69c33efa-6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:d5:67:10:73:60:c9:10:94:12:c2:36:bc:
01:01:e8:0c:45:28:3c:0b:05:fb:3f:5a:42:81:53:
c4:2c:f8:a0:9f:1a:65:62:9f:4d:12:c5:3d:a3:0d:
73:6c:3f:c3:02:9c:6a:21:d5:ba:f2:50:42:23:71:
83:8b:43:af:c5:35:25:8e:25:96:62:62:4d:49:48:
a1:6a:bc:90:d4:9e:cb:d8:0f:94:cc:4f:2e:fe:5f:
f0:c5:60:e2:7c:cc:5b:73:ba:7d:c0:be:57:b6:4d:
6b:f4:44:6a:fa:bc:9a:f4:0b:ef:c3:f0:0d:fb:c1:
51:27:c8:1f:75:b2:a5:01:f6:f1:0a:47:d6:9f:82:
6c:41:a3:7f:e5:4c:1f:f7:a0:b7:4a:70:69:7e:96:
c7:62:28:31:d9:f3:87:db:50:38:48:e1:e1:81:78:
d0:29:e2:b2:7b:44:74:6d:ca:f8:19:5f:89:5b:ab:
ea:6c:03:14:b6:a8:20:d6:b4:ea:d5:9b:20:e4:7d:
3c:dd:12:3c:b7:de:de:fe:93:d0:fd:ec:1a:59:f6:
49:77:b2:e0:4f:19:e4:55:87:93:e5:4c:8b:cf:49:
7d:5d:e7:58:eb:4a:c4:56:a0:ba:f7:55:71:0d:ee:
c7:16:9d:d5:67:dd:3e:60:ea:31:11:10:b6:5d:eb:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:46:90:BE:6A:23:C2:C8:FD:1F:20:EC:7E:FA:5F:BB:67:10:3E
X509v3 Authority Key Identifier:
keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:91:c3:7f:19:8a:54:aa:ab:ba:c5:d9:60:35:3e:ad:12:
32:b2:a5:15:0a:a3:a9:4d:5f:63:82:35:0d:e1:fe:c2:cf:cc:
12:fa:ce:01:bf:1b:a7:b1:47:0f:55:d7:21:db:a5:7d:75:01:
73:a7:2e:2f:a7:2e:4a:d4:20:43:dd:f6:2a:37:83:54:f9:61:
73:aa:15:41:c0:1a:83:a3:cd:fd:c6:a0:2d:52:eb:5b:0a:81:
5d:e1:0b:1b:36:59:d9:0c:84:68:21:6e:fc:d3:0f:e2:b4:04:
fe:6d:c2:e8:c8:4e:a1:2f:5e:05:59:e8:da:18:c5:6b:8d:c1:
4d:0c:d3:a0:0c:1e:70:af:7a:e6:6d:e8:3d:50:a2:51:98:1a:
83:40:8a:97:45:59:76:ba:1f:b4:64:76:6a:7f:7a:ee:07:a3:
df:d4:cf:30:7b:5d:15:33:d6:56:d6:e2:a8:04:c4:40:6d:e1:
33:39:a8:4b:32:d9:82:3a:52:99:b8:b8:42:ec:28:c9:3d:bf:
82:4b:ed:96:82:17:b4:0c:ad:b5:79:1f:4c:b9:cf:9e:1d:31:
4e:97:af:bf:de:f6:4b:fb:ea:00:cb:46:d5:1e:a0:8a:8d:d5:
14:43:35:37:fb:13:c9:54:81:9e:19:06:e5:75:3d:8e:13:23:
cb:a6:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:15 2026 by rpki-client