
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: 45KddVOFPtEOETFqilJBSU2FALW127/1qKCeNwJxARs=
Subject key identifier: 95:2A:34:05:95:74:37:C2:C6:EA:B6:B7:DC:D0:B8:FE:81:D3:F1:90
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 10D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 10B4
Signing time: Wed 22 Jul 2026 17:29:41 +0000
Manifest this update: Wed 22 Jul 2026 17:29:41 +0000
Manifest next update: Wed 29 Jul 2026 17:29:41 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: 7lAZRGwCDK9wI2OIU0xmiIwqOw27qKE3d0smDI/igGk=)
2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=)
3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=)
4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Jul 22 17:29:41 2026 GMT
Not After : Jul 29 17:29:41 2026 GMT
Subject: CN=6a60fe05-7969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:28:a3:d9:6d:f2:c4:39:88:2d:bd:3f:a9:
16:58:ba:c3:2c:1b:d7:38:15:8a:7e:d6:c4:8f:00:
43:78:a0:dd:0f:10:b4:83:72:08:d8:aa:48:58:4e:
2e:9f:9c:d0:59:70:12:26:34:e4:55:0e:99:44:6c:
a0:61:0f:f2:10:f0:00:cb:7e:e9:59:f1:8b:5e:25:
86:b6:0c:fe:88:8a:fa:78:ae:f7:24:f7:5c:c8:37:
17:b4:cc:e4:f2:82:13:4c:c4:83:cb:47:4d:75:f0:
b6:e9:56:78:24:4f:a8:a0:17:35:2f:15:b0:7e:6b:
47:86:fe:66:39:72:fa:26:b0:6f:6f:57:7b:d9:2d:
07:32:5d:2a:55:6f:4e:c4:62:a9:8b:8e:87:8b:21:
bb:64:9e:aa:b2:dd:c0:07:c5:e0:f9:0c:18:ba:d9:
e1:ac:3f:37:71:6d:2e:8f:6f:e6:01:cd:3f:8c:9e:
e9:b7:5e:de:22:7a:29:9f:2c:53:ea:e3:36:c7:01:
ca:3b:02:a1:80:78:8e:70:f9:c3:72:c5:39:31:91:
5f:4d:97:c1:3c:42:7c:42:46:f7:ba:ca:79:aa:3c:
4a:96:15:57:90:6c:a0:e5:8b:88:47:b3:bf:a6:33:
62:19:0f:94:47:60:35:1f:3e:25:c0:a9:2e:a4:75:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:34:05:95:74:37:C2:C6:EA:B6:B7:DC:D0:B8:FE:81:D3:F1:90
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:e0:3e:89:00:48:37:24:3f:34:5e:20:7d:b7:d7:3d:7c:
71:ae:c7:e5:dd:c2:1f:87:b0:4d:12:a1:e8:9a:b7:eb:c2:ea:
54:1d:02:20:74:ea:1a:af:d5:ce:14:7a:1d:f7:3e:fc:da:ce:
57:78:36:12:52:18:0b:6e:69:d9:08:0f:98:74:83:c4:99:23:
6d:b7:bd:75:f3:ff:ff:c9:66:08:8e:1d:28:b7:73:9b:68:f6:
27:ce:65:c9:39:0d:a7:bc:80:f7:64:d9:7f:ce:8d:85:b6:8f:
cc:55:0c:7e:a0:0c:8e:a7:81:c9:cf:94:da:59:4f:a8:23:d2:
2a:3e:c0:12:d8:02:ff:fa:0c:00:a9:82:47:ad:be:f4:56:dd:
7c:c8:d3:eb:7d:81:d0:57:8e:a5:15:58:34:93:08:54:ff:46:
8b:77:65:c9:4a:a4:fd:5c:17:14:2a:f1:d7:0c:4b:14:41:75:
ca:17:06:cc:ff:2b:6e:19:eb:80:d8:06:51:be:2e:d0:88:f9:
56:61:23:73:c4:2c:c9:48:8b:e3:cd:0c:24:c4:b4:70:ca:77:
bd:5e:6e:86:b8:75:cd:b0:98:00:03:4a:75:c4:50:96:0a:1c:
94:ff:d3:3e:87:40:4c:47:27:0e:89:2a:59:22:58:a5:3e:87:
96:27:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:44 2026 by rpki-client