
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: bMxI87JQqyC6QiBL5JWiGDSl/+vJ1jf0a7JpwXL1jvs=
Subject key identifier: C4:D2:BD:2E:25:49:80:92:F0:FF:58:9C:97:25:9D:98:24:EA:E0:E3
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 223B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 223B
Signing time: Sat 04 Apr 2026 15:47:55 +0000
Manifest this update: Sat 04 Apr 2026 15:47:54 +0000
Manifest next update: Sat 11 Apr 2026 15:47:54 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: HAehjQW6jWqyVjY5cHw1W/RRSM4xnm4KoA8QBpygyCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8763 (0x223b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: Apr 4 15:47:54 2026 GMT
Not After : Apr 11 15:47:54 2026 GMT
Subject: CN=69d132aa-3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:ef:41:88:e1:c1:b4:af:77:4e:c7:b4:0e:
b6:71:1a:cf:f8:a3:fd:0f:7f:62:bf:d3:f4:70:18:
f5:8e:cd:4d:97:73:69:71:36:be:70:5e:1a:7c:f6:
17:2e:98:b1:7c:e4:8a:b8:27:66:37:ec:1a:33:bd:
17:ef:d8:d9:e8:35:ee:e8:78:37:07:51:28:76:36:
4a:04:48:49:71:8c:f5:45:30:8c:e0:d2:a1:86:c5:
3c:99:db:a4:be:10:86:cd:4f:41:26:f4:ae:67:7e:
c7:da:f9:c0:5c:18:64:c6:1a:6b:a1:9e:39:ea:6a:
9a:af:17:8a:b6:d9:c5:b9:c8:87:c9:e0:83:14:11:
03:2b:e2:f3:50:75:a8:58:13:8f:ea:2f:35:03:6f:
77:7e:cb:c1:2c:78:d1:cf:77:18:bb:da:25:7e:47:
ed:c4:0a:1b:40:6a:52:c9:51:b1:35:1a:2d:59:b5:
9f:a7:9f:28:30:24:da:2b:39:54:44:f4:9b:70:08:
1a:5d:19:1f:1a:e8:99:49:81:eb:e3:18:62:3c:e1:
fa:0d:82:67:18:3c:1b:42:33:3f:cd:08:e7:06:5f:
aa:26:63:e9:99:b2:2f:cd:4f:d8:5b:92:be:82:9b:
e3:82:1a:8b:77:bd:d0:93:e5:23:b2:5b:cc:bf:24:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D2:BD:2E:25:49:80:92:F0:FF:58:9C:97:25:9D:98:24:EA:E0:E3
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:74:4d:c2:48:bb:2e:a2:f5:12:19:02:eb:18:e6:56:e7:e6:
60:94:2a:89:5e:70:44:ba:d9:34:a3:eb:32:13:03:23:2c:e5:
87:5f:02:dc:51:a5:07:cf:9d:a4:e6:c9:37:0b:14:d1:06:56:
19:86:94:fe:19:13:05:b3:68:08:51:47:a5:54:bb:52:96:4b:
5d:2b:f6:2e:4d:bb:b6:bc:00:07:fc:83:d8:5d:ce:cc:c7:f9:
63:c3:3e:97:6e:7a:57:84:4f:8a:60:76:c9:9c:78:f9:c3:57:
a4:11:74:7e:0c:1c:4a:39:a4:2b:6c:80:06:ed:a9:26:aa:41:
b1:f4:3e:b8:98:e9:cc:b7:88:99:67:d0:1e:36:5d:4f:75:9a:
e2:a0:6f:30:e4:51:2c:ba:85:4c:52:d0:9a:f7:ef:1e:ff:f1:
0b:87:6b:45:f8:94:42:ce:2a:1c:c6:7a:b6:2a:c8:2b:3b:e4:
ef:39:38:0a:f3:75:9f:27:f0:7e:c0:90:95:e1:bc:44:64:39:
d8:a8:db:14:b8:31:5e:9d:51:d8:0b:b2:28:ea:91:93:db:40:
70:dd:26:a0:d0:7c:f5:1c:ef:39:cd:40:4a:f0:c1:df:e5:f6:
a5:c1:88:bf:f0:4c:9b:89:c7:b4:aa:d9:b2:43:4c:ee:5c:e4:
c0:fe:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:43 2026 by rpki-client