
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: 2UA3h28ncNQreDDqsRrxrbmoEIxO/+M8cW90V4DwH0k=
Subject key identifier: 41:4E:69:32:00:FA:BC:7A:20:57:E9:DF:91:3B:25:31:57:BF:6A:A3
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 10B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 1090
Signing time: Tue 12 May 2026 17:23:32 +0000
Manifest this update: Tue 12 May 2026 17:23:32 +0000
Manifest next update: Tue 19 May 2026 17:23:32 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: Pz2U9r3xa9qNdqsUEj0wFeuNVGldAGSBIL7NnxCgb30=)
2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=)
3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=)
4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4277 (0x10b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: May 12 17:23:32 2026 GMT
Not After : May 19 17:23:32 2026 GMT
Subject: CN=6a036214-bf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:12:b8:e7:bd:80:1c:cb:1b:20:2f:6c:7d:
e5:c5:15:d8:49:44:5a:11:df:ad:39:b4:6f:fd:f8:
ea:ae:b8:d9:01:b5:d0:d6:2b:ae:dc:3c:2c:f1:22:
d4:54:8b:46:2c:b5:dc:94:a0:08:f6:79:69:25:f7:
f5:77:c2:4f:1e:ec:7e:6c:ca:f6:11:63:36:ec:a9:
a7:8e:57:ed:23:a9:70:16:dc:3f:b4:77:d9:7b:5a:
28:7f:69:c9:31:62:b8:56:13:6f:17:e0:da:4f:fb:
75:cb:32:3d:d4:47:a0:eb:20:b3:4b:15:9a:9b:1e:
ab:3e:b7:87:da:ad:60:1f:45:70:d1:90:1a:e1:bf:
9f:a9:6f:27:83:16:9b:3a:d7:5d:4f:17:10:c9:53:
73:8b:7a:b3:97:35:30:b4:4d:f2:ea:f9:17:e5:81:
98:23:c0:4d:7b:70:6b:43:65:ad:e8:36:2d:14:a0:
65:40:4d:e1:4a:63:72:a8:83:3f:82:68:87:61:23:
9f:2f:c2:3b:a0:f8:98:ed:e1:a3:e7:57:2a:59:3e:
eb:ea:e1:3a:c6:a1:c6:f4:53:24:f9:04:e8:17:8e:
fb:56:58:fd:90:32:69:c3:40:19:27:f3:4b:de:ee:
4a:35:da:a1:4e:74:d3:d0:3c:cd:6b:02:2a:2b:2f:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4E:69:32:00:FA:BC:7A:20:57:E9:DF:91:3B:25:31:57:BF:6A:A3
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:89:8e:b6:7a:76:48:c4:b3:52:ca:a5:0b:91:62:f2:77:60:
99:94:bf:8e:a6:e0:21:58:2d:b1:8b:ba:69:9f:49:05:cd:55:
8b:e7:04:38:3a:86:cc:e3:3e:7d:e8:d5:ef:d7:12:bd:48:db:
92:79:9f:7b:6c:33:dd:09:11:5e:e1:a8:60:8f:3a:5c:ae:1a:
27:63:c3:fe:dc:d8:b0:f7:f8:28:d7:c6:ab:b5:f0:a6:25:13:
2e:bc:c9:09:9b:0f:08:0c:b3:5b:74:84:f7:72:35:2c:12:23:
0d:37:ad:ba:c2:a5:a5:97:53:9d:dc:52:e3:db:8f:30:fe:6c:
62:d3:c3:4b:f6:37:47:37:2e:30:51:f2:9d:1a:68:94:f3:56:
3b:6e:6c:50:31:15:d7:96:d1:c7:d3:0e:e4:5e:71:f5:3f:24:
93:75:ac:c6:80:34:db:a3:2a:26:be:bc:a8:96:31:89:30:94:
dc:d9:30:2b:ba:00:92:7e:57:e2:9b:99:24:de:0a:d3:fc:79:
66:e4:c3:40:b4:48:c7:6d:d4:8d:84:94:e2:35:71:99:60:dd:
cc:24:c3:67:4c:6b:dc:ba:cd:2d:c6:d9:4d:e6:51:28:cd:fb:
45:64:1b:f1:ab:fc:07:f1:18:5b:14:3e:41:cb:d9:76:83:87:
83:e0:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:32 2026 by rpki-client