
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: VTMn8AL4osM8LUUYACqIauNs85YVilGRbRplOe6VucQ=
Subject key identifier: 0D:C0:11:04:CD:65:E3:00:3D:4A:FA:F9:AB:DF:73:CE:FF:DD:B8:E1
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 2228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 2228
Signing time: Sat 28 Feb 2026 15:53:37 +0000
Manifest this update: Sat 28 Feb 2026 15:53:36 +0000
Manifest next update: Sat 07 Mar 2026 15:53:36 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: l3aY7nWc4Jx/rPthEkG09AnTUY7p2lrma0qs6E7+vbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8744 (0x2228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Validity
Not Before: Feb 28 15:53:36 2026 GMT
Not After : Mar 7 15:53:36 2026 GMT
Subject: CN=69a30f81-66b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:4f:3a:11:59:da:30:a3:8f:b6:c0:24:0b:
e6:4f:b0:68:74:e8:3b:b1:fd:0b:9e:a1:eb:5d:d8:
b0:fb:a8:dd:43:4a:1a:4f:ba:bf:6b:88:a1:bd:3c:
0a:ab:80:d6:71:d9:99:ae:aa:5c:ff:c0:bc:8c:d8:
42:e2:b7:86:42:fb:66:9f:b8:5d:a2:af:6f:12:f3:
7c:46:09:6c:0a:ca:e5:5c:07:9c:0c:bf:f9:d7:e8:
43:45:6c:65:87:25:b7:46:8b:b3:84:f1:7d:b9:0e:
a7:f0:ce:ad:82:03:7c:a6:73:2e:83:bb:b0:bb:34:
a1:86:86:e1:53:a6:53:76:fb:d5:13:19:d7:6f:e1:
50:47:17:f1:dc:90:01:a0:bf:e8:9f:93:36:9a:a4:
5b:35:50:1d:0d:24:2a:a8:0e:b3:cf:f0:81:b2:e1:
59:6c:2f:41:18:48:0f:4b:a4:38:7f:30:53:56:75:
c1:70:7c:4a:9d:2a:27:36:42:01:2e:05:97:20:36:
7e:80:b2:3f:37:e5:7a:ca:d4:bf:59:90:4b:7e:bd:
ca:99:2f:0d:8c:ea:97:f4:13:38:a5:c7:b6:b7:7f:
17:14:93:53:58:a5:66:90:f2:9f:cf:4e:ad:a4:14:
3e:a5:32:00:e9:c0:b1:38:ce:c8:f9:2f:0e:0a:2c:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:11:04:CD:65:E3:00:3D:4A:FA:F9:AB:DF:73:CE:FF:DD:B8:E1
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:51:b9:38:75:2d:f1:0e:93:c8:f3:24:c3:d1:d3:2a:ee:d5:
0e:49:a5:1b:6a:45:4c:ba:0b:8f:62:b7:ad:79:f5:3b:97:67:
a4:3b:c0:51:92:a1:40:6d:2b:ca:49:a0:68:e2:df:f3:5f:a4:
f3:aa:cb:0b:78:72:40:db:eb:84:c7:23:4c:58:d9:c4:e1:c3:
f4:66:c7:74:64:a0:df:7e:a4:77:60:2e:7c:b1:a2:0b:fc:a4:
64:5f:f2:66:b5:3e:bf:65:2b:64:44:78:5f:75:3d:25:9a:1f:
a0:32:0e:aa:c4:9d:3a:b7:85:17:10:96:61:ee:d7:5d:49:80:
a5:36:99:9b:04:3d:3a:1b:e1:a9:c4:35:5c:44:5a:cb:55:39:
4e:d9:25:95:c3:e2:a9:dc:fc:64:bb:e5:1f:c9:82:72:41:7c:
7b:81:3e:f1:82:bb:f9:cd:47:d0:28:7d:b6:48:8c:34:da:b7:
85:7a:da:d0:a1:f2:f9:30:b3:0a:02:00:dc:2c:d1:a9:9f:d1:
ab:be:2d:0a:c2:e9:64:f0:2f:7a:6f:4b:c5:fc:5b:12:aa:db:
b3:d4:91:70:8f:c3:e5:53:7e:4d:05:48:a3:c3:d0:de:7f:03:
86:7d:6f:f2:67:47:1e:5a:65:7b:ed:c1:0c:f9:65:39:6e:26:
8d:34:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:22 2026 by rpki-client