
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier: Z1DucZsSC+FjQ7qD1O+iAZzyW6Q/vyZXjQ67L9E3gOc=
Subject key identifier: C1:F2:0F:41:CF:07:B6:88:81:A4:18:23:6F:6F:2A:A9:75:F0:92:22
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial: 0732
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number: 5462
Signing time: Tue 24 Mar 2026 15:02:18 +0000
Manifest this update: Tue 24 Mar 2026 15:02:17 +0000
Manifest next update: Tue 31 Mar 2026 15:02:17 +0000
Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 8ir0mbhc0titBG+WaScBvB8BQVDV6Zvp+3DayUKBdhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Validity
Not Before: Mar 24 15:02:17 2026 GMT
Not After : Mar 31 15:02:17 2026 GMT
Subject: CN=69c2a779-f3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:1d:c1:d3:62:20:6d:54:37:78:7e:61:49:
42:66:ac:95:4c:df:63:3e:db:7d:8f:05:45:b7:6b:
72:b7:b4:3c:90:e6:9c:5c:d7:e1:ee:9a:f4:68:ca:
54:4f:2b:e8:64:69:4c:b2:a1:43:1c:a9:0f:85:69:
30:20:02:7f:20:a7:21:c4:6a:4f:8e:30:8a:24:92:
dd:de:3c:80:48:48:e3:d5:0c:aa:7c:c5:2b:e7:2e:
c8:f4:57:5b:b3:6a:ac:93:59:31:0a:18:a6:b6:ad:
27:5a:fb:69:a0:3b:08:c4:83:30:ba:35:36:52:6f:
88:43:7b:26:42:7a:a3:6e:e3:7a:c4:7b:93:cd:39:
eb:6f:ba:0c:b6:5c:7f:ba:63:55:8d:76:40:1e:43:
a1:42:fc:24:6e:6e:64:d1:2c:39:f8:72:4d:90:4b:
6d:80:d7:0e:19:a9:c1:03:7d:d0:ba:e1:ae:c6:3a:
24:d9:2e:71:26:95:d3:59:2b:db:d1:1e:1b:79:a3:
e3:9f:57:f0:16:18:83:c1:71:81:1a:59:bc:55:e9:
87:2c:5c:58:4d:a2:ab:61:50:ef:05:cd:f7:03:da:
7e:15:a8:e3:4b:fd:e9:63:4f:2a:b8:83:d7:16:72:
4e:e0:57:c1:35:1f:fa:37:e6:79:57:07:78:d6:9e:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:0F:41:CF:07:B6:88:81:A4:18:23:6F:6F:2A:A9:75:F0:92:22
X509v3 Authority Key Identifier:
keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c1:d7:41:e9:99:fe:28:79:93:8c:68:82:39:ff:a4:cc:c5:
3b:50:28:6a:85:69:86:8a:a5:de:1b:c0:f5:f9:73:bb:40:0f:
11:8c:b5:69:3f:32:e4:bf:59:35:5e:f5:1c:d5:02:f8:12:87:
7f:4b:92:c5:40:5e:3b:3c:c0:b2:0b:08:29:03:6d:b9:4c:ba:
52:e0:cb:6d:3c:97:ed:42:e1:cb:a2:34:8e:39:c5:63:20:92:
0f:97:f5:7f:01:75:01:37:9a:66:90:5c:c5:3c:47:f5:d2:35:
9b:77:2f:fe:e7:91:7c:29:75:6e:8e:72:e0:13:ca:1a:fc:79:
21:c0:d1:fe:ed:b8:cd:07:1e:b6:cf:39:72:c5:03:d2:8f:fb:
4f:e1:84:26:5f:22:ab:81:dc:3a:fc:a5:ad:c4:a5:36:5a:d3:
4e:f0:a9:d5:8b:21:28:8d:f4:07:ee:78:e1:91:a2:e1:e3:c3:
be:85:d4:8d:04:7f:71:5a:a0:bb:b4:c2:51:bb:1e:e1:ff:d2:
41:2e:5d:df:43:b4:02:b3:be:ff:9f:e4:9d:aa:42:6c:6f:de:
5b:08:40:69:41:eb:29:65:69:33:b3:60:c5:eb:53:54:3e:b5:
8e:9a:69:3d:15:b7:9f:cc:5a:5c:34:90:03:18:9b:41:0c:56:
85:ec:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:52 2026 by rpki-client