
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: gxYzwwCbXRPe/AyEcftNLvHs7NaYLhkCE/H55lArQ9I=
Subject key identifier: 1E:8F:6F:E1:B1:C2:9B:96:D6:E7:34:8F:ED:6C:62:21:86:B5:35:86
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 104C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 102D
Signing time: Tue 04 Nov 2025 17:31:28 +0000
Manifest this update: Tue 04 Nov 2025 17:31:27 +0000
Manifest next update: Tue 11 Nov 2025 17:31:27 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: aEinjhVrDuzpI3Cruh4B4czQ2hnAvI1cnAZokllIRMY=)
2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Nov 4 17:31:27 2025 GMT
Not After : Nov 11 17:31:27 2025 GMT
Subject: CN=690a3870-f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:01:70:12:aa:94:26:98:3c:37:c3:24:c6:
aa:03:5f:c8:a8:f4:28:e3:81:f4:67:14:25:33:0b:
70:73:9e:6b:55:b5:7d:82:7d:99:d1:57:d7:65:80:
17:e1:8a:b4:64:de:45:a1:7c:4b:c2:b2:c5:de:01:
dd:39:8d:b1:e1:88:18:ea:50:b9:94:57:dd:f7:04:
1f:65:95:28:65:ad:60:63:b4:33:7d:2f:65:16:66:
58:d7:f2:4e:88:46:68:76:14:08:58:80:97:80:df:
7b:7f:1e:af:41:23:0d:71:b1:59:49:7d:8f:ec:75:
d1:e4:3d:1d:12:84:29:28:41:62:d1:e1:41:ed:5f:
67:74:3b:9f:e9:97:69:23:c5:d7:b7:9c:4b:aa:3a:
b4:5f:f0:44:fa:f9:19:77:96:f1:07:2d:46:f4:aa:
6d:a9:7c:02:fd:44:7b:dd:2b:5c:cd:07:49:de:c6:
a3:ac:0b:b0:3b:d5:40:63:c1:9c:59:4d:e3:ea:9c:
8e:9e:5c:d7:f1:42:7d:c6:21:12:48:fe:aa:3a:9b:
e6:4e:5f:74:81:49:f9:47:8c:bc:52:55:d5:4d:29:
6d:23:72:ae:4f:42:5b:dc:92:5f:57:1b:92:79:23:
8f:77:4f:f6:a5:e5:fe:fb:2e:3d:7d:38:4d:c0:0d:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:6F:E1:B1:C2:9B:96:D6:E7:34:8F:ED:6C:62:21:86:B5:35:86
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:1e:61:fc:28:27:6b:05:58:e7:4f:17:5f:a6:9d:a1:2c:e8:
16:87:65:23:58:71:09:26:fe:83:57:62:1f:82:2a:dc:5a:13:
19:e8:03:c3:a5:1d:7c:5d:5e:6c:36:ea:fb:b6:f6:08:b5:7a:
5d:a7:99:95:ee:c1:ee:58:3b:8e:35:3d:50:36:44:b4:80:04:
65:54:28:40:ab:56:f4:29:84:51:fe:9d:74:29:bd:15:89:e4:
4f:02:0b:91:e9:a9:a3:8e:8a:a0:9f:dd:ef:70:da:17:e1:f5:
21:8b:80:37:82:58:78:e3:7c:0c:1d:1e:a4:af:e5:df:cb:38:
bb:48:ef:de:2e:1b:e0:7f:96:30:f6:1b:0b:00:85:dd:9d:c2:
bd:27:7d:fd:c2:f1:90:18:55:4a:67:06:24:a1:28:f8:ae:cc:
ac:a0:8c:6c:0b:0f:b2:01:ac:37:bb:34:75:3f:7f:5b:96:c2:
b0:7d:74:15:3a:e3:d0:7c:1e:f0:be:86:ac:27:c2:8f:9c:84:
bd:11:a0:39:06:38:a6:9c:de:40:d0:02:62:4c:da:3d:ad:34:
36:3a:03:35:9f:31:63:79:46:a2:70:21:a6:76:2c:54:1b:c1:
e9:f8:73:85:cc:99:5e:90:c0:84:71:31:ca:70:c5:e3:62:89:
41:24:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:04:08 2025 by rpki-client