
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: z97ckca9c/o3yzWFYpOfBtXz3uJV0NtvjEZQtS7Jfw8=
Subject key identifier: 1D:7C:81:4C:2C:DA:0F:97:53:39:7E:8D:61:FD:79:53:1E:A9:DC:24
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 1088
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 1069
Signing time: Sat 28 Feb 2026 17:29:47 +0000
Manifest this update: Sat 28 Feb 2026 17:29:47 +0000
Manifest next update: Sat 07 Mar 2026 17:29:47 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: swQ8cRWc06YP4zTqdz1WnlSNihnuf+Grlhbzhdrah5Y=)
2: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4232 (0x1088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Feb 28 17:29:47 2026 GMT
Not After : Mar 7 17:29:47 2026 GMT
Subject: CN=69a3260b-51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:e3:b6:1d:a0:5a:8b:61:03:9b:d9:94:f1:
77:27:6e:e7:d0:0d:57:1c:ab:8d:e4:42:ac:8f:b7:
49:12:bd:fc:ba:0e:6b:ac:c8:5b:df:e5:c8:bf:d8:
13:51:75:03:be:fc:31:dd:8f:0f:53:c3:1e:47:e6:
c9:2d:bb:c7:a8:ae:fd:74:41:74:a3:1f:d7:72:e5:
49:d0:58:d7:f1:4f:f9:17:1b:28:6c:0b:91:af:0e:
16:cb:b8:fc:f5:6a:1b:46:ac:f3:25:0c:57:7b:cc:
c9:57:20:ad:9c:8c:73:4d:3f:53:14:01:b6:a5:0e:
fe:ad:3d:13:93:12:54:24:54:45:79:cf:45:7a:20:
93:2f:26:56:d6:4c:0b:ac:6d:8c:5f:c6:92:c3:13:
1e:48:e4:65:d3:3f:4d:fd:a2:cf:c0:bc:7f:4e:7d:
8c:b7:16:39:af:b3:60:14:12:e3:b7:60:91:f0:06:
17:2c:b4:89:a7:c4:5b:75:4e:c4:55:cd:88:8d:f7:
b8:2d:7d:ad:99:c9:c9:e6:ad:75:de:d0:b1:01:8a:
d6:c2:3c:c5:af:36:c4:09:da:95:b5:eb:57:a9:2e:
6b:f9:f2:ed:e7:1a:4d:f8:b6:08:d2:00:d8:93:a5:
ed:fa:da:1f:ed:49:d9:9d:e3:88:ea:00:5e:fa:0f:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:81:4C:2C:DA:0F:97:53:39:7E:8D:61:FD:79:53:1E:A9:DC:24
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:ac:2e:78:f7:43:51:3f:e0:a1:16:35:66:c7:4b:4d:ad:
64:4e:f1:f4:75:d4:99:3e:3a:85:27:82:97:8f:74:c6:03:0f:
72:46:c5:48:ff:c3:8a:6c:72:39:3a:5e:89:c3:b2:d1:27:d7:
d6:f0:51:81:0c:83:33:5b:36:00:a6:25:6e:45:60:16:66:ac:
15:ec:b2:a1:37:87:b1:26:b0:c7:db:ac:25:55:d5:eb:da:a8:
fa:38:68:55:e7:8b:22:ea:86:cc:8a:f9:c7:be:2e:b2:8f:02:
12:17:e4:5e:6f:40:af:29:79:82:a1:9e:61:f8:b7:b2:ff:a6:
b6:df:af:e8:60:08:07:13:a1:53:64:a4:3f:03:94:15:03:d8:
b5:0a:04:f4:4b:7b:7c:2c:9c:a1:26:b4:28:4b:78:df:d1:f2:
bd:72:26:71:d5:01:dc:72:b8:18:90:ee:a3:13:d0:e5:1f:68:
14:4e:f5:de:71:6e:68:2b:2c:32:18:78:ca:c0:6b:d9:65:a5:
9c:29:1d:d1:6d:4a:49:33:d4:f6:eb:0f:82:d6:ec:46:e4:c1:
67:bd:f4:64:f4:c4:42:fb:40:3d:d1:0d:ff:ca:92:6f:02:87:
72:aa:4d:a3:d7:51:64:6f:8c:40:2f:63:96:5e:1f:3f:95:98:
95:8d:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:06 2026 by rpki-client