
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: 2fFox8X11iBeONalxLxtr8lArX7dQSKsYITmGrPm43A=
Subject key identifier: B8:67:BA:14:09:00:D0:57:03:3A:94:BB:16:A3:FC:3B:5F:C5:CE:0C
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 2235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 2235
Signing time: Tue 24 Mar 2026 15:48:01 +0000
Manifest this update: Tue 24 Mar 2026 15:48:00 +0000
Manifest next update: Tue 31 Mar 2026 15:48:00 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: LlMpESZG1dgC3SS+sTnBCLcdew8E5xhSWgnbSQzSFq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8757 (0x2235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: Mar 24 15:48:00 2026 GMT
Not After : Mar 31 15:48:00 2026 GMT
Subject: CN=69c2b231-d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:c3:fe:22:6d:31:dd:ee:17:13:9b:29:1c:
5f:53:9a:78:5b:bb:a4:dd:cf:59:d0:1b:4c:22:b0:
ae:1a:77:ab:98:76:6c:a9:be:fc:c0:7f:9e:f7:41:
59:c4:27:5b:e7:dc:06:6c:f2:fc:2c:ff:bc:e7:22:
89:6a:49:ac:42:5e:d4:0a:6f:1b:79:3c:fe:45:39:
53:b0:71:24:b4:4f:f2:35:a4:ab:c7:58:c0:35:14:
21:7a:31:ae:7f:3e:cb:43:55:02:e4:53:98:69:07:
09:dc:13:bb:cb:ba:27:27:96:a3:0b:5d:81:69:41:
7b:c8:e6:7e:df:5f:59:ae:f4:e6:3b:27:67:66:84:
bc:1a:98:d1:e4:ad:46:c6:9a:eb:a9:34:df:88:35:
db:92:e5:e5:73:f1:02:91:f7:a4:c3:c6:59:e7:37:
63:7e:23:f6:cb:ba:fd:5d:44:8d:bf:a2:a5:01:7a:
d3:4f:2d:19:2d:37:dc:19:d7:c5:02:6b:b9:ab:7b:
cf:0e:4b:8c:03:68:d3:87:98:4e:77:b3:17:03:8d:
34:0f:46:b8:a9:df:37:48:ad:d0:06:80:a1:0f:d6:
84:a3:ce:ed:48:a1:25:3f:02:4c:4b:56:f0:f2:ad:
f8:80:43:ca:26:aa:94:8b:12:b4:89:15:6c:74:28:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:BA:14:09:00:D0:57:03:3A:94:BB:16:A3:FC:3B:5F:C5:CE:0C
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:7d:12:0d:92:15:80:67:62:64:62:41:01:20:d6:c5:58:4f:
cd:80:7e:55:1b:ce:f9:99:84:cd:67:d6:d6:2c:48:0e:6c:d9:
9c:5a:b7:45:ab:5e:e7:f3:e0:7c:cc:70:54:22:f8:91:ee:3d:
d2:b1:94:7f:f3:42:ed:cc:8b:5f:41:82:0e:4f:36:1b:53:2a:
4b:dc:f5:21:36:86:2f:22:85:64:1a:9a:23:80:c6:9b:04:96:
dc:a0:26:65:19:09:77:95:46:9d:e8:af:58:9a:b3:90:1e:60:
d0:ae:ee:d3:c3:80:8c:26:61:9a:c9:6c:6e:e0:2d:1e:4b:3f:
28:f6:9b:06:f9:e7:a1:a9:51:aa:b9:d2:b8:ad:e9:d7:94:aa:
47:61:2f:96:a7:fd:dc:a9:9d:14:2e:f6:af:27:9a:9c:25:5c:
57:b5:00:df:4a:e0:a8:b7:14:11:43:7c:b0:aa:6c:96:32:6f:
c9:44:fb:96:f2:b8:24:e7:f3:f3:f9:2e:cb:7f:d6:08:b5:c4:
20:41:06:78:dc:ba:56:99:78:4c:b5:e6:e6:c4:a8:31:eb:af:
1d:32:11:28:2f:99:9f:c6:e8:8e:7e:d2:7e:e1:d4:2e:6f:93:
21:9c:a1:36:d5:98:30:56:46:da:ca:4e:76:ed:95:6a:ab:27:
24:1b:f6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:06 2026 by rpki-client