
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: GvJ2LGckAm7jqRxS34hjHMdPEme4yReBTh+Urh3Z8Ak=
Subject key identifier: 2C:B3:C1:63:65:C5:5C:50:9B:9D:C9:3A:DA:58:1B:07:CB:1A:70:7C
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 224E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 224E
Signing time: Tue 12 May 2026 15:51:47 +0000
Manifest this update: Tue 12 May 2026 15:51:47 +0000
Manifest next update: Tue 19 May 2026 15:51:47 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: s/4BFLJ7aPizbC0a/43LdTybAmLqrXgOqSdymX6I7+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8782 (0x224e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: May 12 15:51:47 2026 GMT
Not After : May 19 15:51:47 2026 GMT
Subject: CN=6a034c93-bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ae:d0:d4:8d:bb:07:8c:2a:dc:47:51:41:
2a:f7:29:a7:32:49:2c:73:1e:c3:d6:b7:98:ed:70:
90:6e:04:93:8a:20:c5:e6:5c:55:1e:f2:0e:5c:90:
92:ed:9e:42:ce:61:4c:7a:cf:ce:5a:4b:41:36:68:
2a:3d:fd:2d:1a:75:23:6e:be:54:a0:9f:5e:93:a5:
e8:44:1a:d3:be:a1:b3:92:b4:46:cc:98:2a:d9:f6:
d2:d2:7c:23:79:7e:b5:07:05:04:f7:53:00:95:14:
d0:43:ad:f5:5c:2f:be:4d:1e:0d:ea:9d:12:9d:b4:
f3:71:cf:20:d1:e6:05:d5:93:12:a7:81:b0:f0:cf:
7d:eb:41:f8:5e:8b:18:33:52:2f:94:08:52:45:10:
86:40:f0:48:d7:4a:fe:e0:b3:b3:93:04:3e:14:60:
55:5f:f1:95:6f:c8:c7:2f:f8:06:cd:4c:43:86:76:
13:13:53:e3:41:2a:1b:ff:fd:4c:64:e9:09:f5:d8:
4c:0c:49:63:4b:e0:8e:04:d8:5e:96:2e:73:68:16:
26:b3:c9:08:ff:70:ac:af:99:98:48:32:8e:35:b1:
00:4f:64:c9:b8:bf:e1:e0:cf:ec:25:81:70:3c:5e:
0b:1e:ce:03:b4:25:5c:c9:53:f5:2b:af:d8:4d:c5:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:C1:63:65:C5:5C:50:9B:9D:C9:3A:DA:58:1B:07:CB:1A:70:7C
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:02:e1:6a:97:6a:04:3d:6a:c3:6c:a2:87:68:c1:18:ca:11:
43:73:f6:af:fa:b1:87:ca:4a:c7:ff:58:17:d8:2c:5a:8e:b0:
74:4f:46:31:53:53:38:c9:7f:39:60:6c:ae:61:72:67:8d:a1:
12:f4:45:7a:60:4a:d1:0b:ed:de:21:21:ab:8a:6b:02:4b:3c:
30:c8:88:f2:bc:15:77:df:6a:64:97:59:00:93:99:58:17:98:
7d:e7:f1:5f:69:f9:4c:dd:ef:65:34:25:96:b3:1a:04:19:a8:
22:37:a3:ef:3e:93:f8:3f:fe:ab:e4:ba:88:7c:07:b1:b6:13:
9d:28:fa:8d:bd:16:4d:b7:af:0c:13:45:03:08:93:74:44:90:
26:51:b8:b5:09:61:4b:14:90:b9:6e:e0:20:28:c0:aa:19:fd:
9a:27:cf:57:15:31:32:ea:01:83:26:d7:c1:98:7d:9e:ba:2d:
4a:b4:7b:99:dd:55:84:42:64:20:39:f0:6f:18:c7:42:81:c6:
64:77:8d:ea:6f:15:fd:d3:05:8e:e9:d4:31:7e:c4:2f:18:15:
25:0f:d2:09:b0:3c:7e:32:57:d0:2a:45:ca:67:c1:e1:33:91:
7e:e1:69:62:d3:31:e4:6f:1c:3d:e6:75:d7:55:b5:87:ab:8e:
99:64:f3:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE
ODU4RTFDRDAwHhcNMjYwNTEyMTU1MTQ3WhcNMjYwNTE5MTU1MTQ3WjAYMRYwFAYD
VQQDEw02YTAzNGM5My1iYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJiu0NSNuweMKtxHUUEq9ymnMkkscx7D1reY7XCQbgSTiiDF5lxVHvIOXJCS
7Z5CzmFMes/OWktBNmgqPf0tGnUjbr5UoJ9ek6XoRBrTvqGzkrRGzJgq2fbS0nwj
eX61BwUE91MAlRTQQ631XC++TR4N6p0SnbTzcc8g0eYF1ZMSp4Gw8M9960H4XosY
M1IvlAhSRRCGQPBI10r+4LOzkwQ+FGBVX/GVb8jHL/gGzUxDhnYTE1PjQSob//1M
ZOkJ9dhMDEljS+COBNheli5zaBYms8kI/3Csr5mYSDKONbEAT2TJuL/h4M/sJYFw
PF4LHs4DtCVcyVP1K6/YTcWEnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyzwWNl
xVxQm53JOtpYGwfLGnB8MB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz
OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS
S3g1UW9ONHpEU3JZV09ITkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiwLhapdqBD1qw2yih2jBGMoRQ3P2r/qxh8pKx/9YF9gsWo6wdE9GMVNTOMl/
OWBsrmFyZ42hEvRFemBK0Qvt3iEhq4prAks8MMiI8rwVd99qZJdZAJOZWBeYfefx
X2n5TN3vZTQllrMaBBmoIjej7z6T+D/+q+S6iHwHsbYTnSj6jb0WTbevDBNFAwiT
dESQJlG4tQlhSxSQuW7gICjAqhn9mifPVxUxMuoBgybXwZh9nrotSrR7md1VhEJk
IDnwbxjHQoHGZHeN6m8V/dMFjunUMX7ELxgVJQ/SCbA8fjJX0CpFymfB4TORfuFp
YtMx5G8cPeZ111W1h6uOmWTz5Q==
-----END CERTIFICATE-----
Generated at Wed May 13 16:21:57 2026 by rpki-client