
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: fu2FpciOv4VX05qxuMKDMyNorEDli67lq97iAA/FKA0=
Subject key identifier: 11:9C:59:78:0C:B4:AA:00:62:57:B0:CC:68:F9:62:80:7C:D4:13:51
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 2272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 2272
Signing time: Wed 22 Jul 2026 15:55:32 +0000
Manifest this update: Wed 22 Jul 2026 15:55:31 +0000
Manifest next update: Wed 29 Jul 2026 15:55:31 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: uQcm0ezm2Gjh1v41Vk7FEwHhdzNSU+SXlXA6nHa4RHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8818 (0x2272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: Jul 22 15:55:31 2026 GMT
Not After : Jul 29 15:55:31 2026 GMT
Subject: CN=6a60e7f3-343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:c1:3b:81:b6:ac:ef:ad:5b:62:d5:f1:88:
12:da:81:55:d8:32:99:dc:9a:bf:39:ea:e3:f1:7b:
2e:cc:e7:d8:1c:f0:7e:ca:b2:a4:0c:09:a9:d3:0d:
67:96:0c:24:ac:cc:f1:18:50:75:2d:3f:54:0f:01:
42:9d:2c:98:a8:3b:6b:70:ce:4a:6c:c2:a4:1c:8b:
68:35:d5:ea:8d:48:71:d0:f7:17:90:36:6c:a3:c0:
fe:bb:70:e9:77:1c:64:88:46:67:c6:a4:78:a5:2a:
cf:74:55:1b:f3:f5:86:c8:14:9a:95:d5:c6:c3:b0:
c2:a3:a0:31:34:33:3b:bf:db:52:23:d9:e0:ae:7b:
b2:b6:92:e3:7b:ab:93:e5:9a:5f:cf:eb:c0:0a:8e:
11:10:b8:07:11:55:98:aa:b4:65:33:1c:36:d7:b5:
a4:87:5a:62:a9:01:c7:02:6f:ae:25:47:77:27:1e:
e3:d2:3c:db:d4:18:f9:3c:18:92:3c:3f:92:c2:75:
07:dd:c8:d0:04:fc:79:7c:7b:9d:e6:e8:33:00:e8:
05:4f:88:8f:e6:7e:45:ce:e6:52:a3:bb:2c:20:74:
3e:73:b5:4e:0d:4e:cc:c2:58:98:d5:33:ee:3a:e1:
0f:ce:b5:e6:22:b3:24:e6:49:ef:64:22:0f:2b:3a:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:59:78:0C:B4:AA:00:62:57:B0:CC:68:F9:62:80:7C:D4:13:51
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:fe:8d:fa:af:e0:c3:60:55:74:56:44:06:53:02:ec:02:18:
f1:cf:65:1d:2e:31:7a:e6:44:e0:ca:da:9b:2b:b3:b8:48:43:
8c:d9:8a:84:a8:de:c0:ab:39:e1:3d:19:2b:ca:01:4d:5f:17:
98:38:33:2b:fd:c7:24:78:40:6a:58:f0:be:5f:06:a6:67:87:
69:b3:22:b1:d3:dc:c2:48:97:b0:c6:a2:81:25:c3:9a:17:7b:
c3:28:37:d5:f3:3b:ff:25:71:54:9a:db:5f:bd:56:14:23:7d:
50:22:f9:b2:f7:63:e9:22:e4:de:91:4e:09:d4:50:37:54:50:
c7:81:a7:39:86:ed:eb:c7:a0:9d:8b:f7:30:8d:a1:7f:2d:61:
aa:8a:17:d0:41:7e:a8:26:61:5d:2b:f4:a8:6a:88:d0:6a:a1:
4e:ee:9a:97:b5:a3:4c:c4:a9:9a:5f:7d:ca:6f:9b:23:c5:eb:
87:3e:21:cb:b3:16:e5:96:f0:4a:4e:5b:83:70:b8:9e:06:bc:
07:a5:4d:c5:99:57:ec:30:cf:84:1f:ec:48:79:3d:59:d1:08:
e7:bb:21:a8:ef:61:07:5c:39:d2:a9:f0:91:8e:f5:da:6c:57:
86:b2:9a:d1:37:57:bf:72:19:a0:43:ae:1b:e3:a8:ea:ee:6f:
0a:da:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:49 2026 by rpki-client