
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier: ciXGe8udSio4KzH+R9k+NNSIlTfoNV55wFX4vN0EmL8=
Subject key identifier: 89:8F:E2:49:6E:8D:A6:63:4C:69:51:70:CF:FB:4B:B9:B7:32:AC:98
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 1045
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number: 1026
Signing time: Wed 22 Oct 2025 17:51:54 +0000
Manifest this update: Wed 22 Oct 2025 17:51:53 +0000
Manifest next update: Wed 29 Oct 2025 17:51:53 +0000
Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: yIZ1PcIZaJD1szkBuC9gpxY/9T7Ws6c1Ede/Xr1VK44=)
2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: b5DdIZNxNs7SwL8wjURZkRL1TSIObO5dLWDMjnjAx3A=)
3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: PaWzEjqV0/ZjDMICjXWt//TzGL+Dv5IFMyDSpR6aZdg=)
4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: fGi0j+kZLxX+sDKoi6qsiuh9Ro/0HWo7bGmH8+R6rpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 17:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4165 (0x1045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Oct 22 17:51:53 2025 GMT
Not After : Oct 29 17:51:53 2025 GMT
Subject: CN=68f919ba-be61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:52:4a:59:83:31:48:27:27:0e:fe:ea:47:
e1:76:82:6f:95:66:9a:22:f5:a8:4b:b6:80:c8:37:
a6:31:9c:5b:a4:97:70:5b:65:55:03:ec:c1:da:f9:
58:12:23:5c:3d:19:63:0f:4a:e8:dd:9b:4f:92:5b:
4a:c0:af:4b:79:d8:4d:b8:fb:5a:6e:08:ff:12:c1:
e5:8a:9c:e7:7e:55:b9:56:76:81:24:8e:68:a6:4f:
a4:a2:e4:7c:f5:85:7d:2a:16:b7:8e:8d:a2:d0:2b:
04:06:18:a4:00:f0:13:39:cb:a2:da:b1:84:94:96:
5f:40:09:26:20:13:81:10:8c:42:49:cc:9d:b5:49:
c2:ad:c7:03:3f:ee:a4:69:62:21:25:e9:a9:8c:18:
a4:a4:04:78:3a:6e:cf:13:8a:87:58:88:e6:26:74:
6d:2d:54:fc:23:ac:3e:54:65:32:89:c9:02:2b:17:
80:a4:1c:81:04:e8:85:cd:a6:88:81:21:93:b7:18:
07:aa:30:57:99:7a:48:82:9f:d8:bc:4a:d8:69:96:
ce:24:d8:9a:1b:0a:b4:61:4d:f5:29:b9:ae:94:b1:
2f:81:75:40:41:65:8b:25:80:1d:12:94:8e:21:12:
27:ee:65:b0:7a:be:55:70:34:1a:9d:aa:68:36:7a:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:E2:49:6E:8D:A6:63:4C:69:51:70:CF:FB:4B:B9:B7:32:AC:98
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:e9:e4:b8:8a:d3:25:11:b2:cb:44:59:57:97:2f:62:ee:
01:ff:70:ee:98:5a:e6:f1:66:d2:ef:37:c9:a8:5f:10:cb:52:
24:55:4d:79:75:67:34:ac:76:4b:b3:48:2e:99:c7:66:4d:36:
84:b1:75:32:ff:05:a1:c2:7e:60:f9:c4:81:02:0d:70:19:c1:
7b:6b:23:70:7e:60:4c:18:c1:77:3d:36:f7:b2:9c:40:ce:b7:
21:58:6f:61:17:08:dc:09:94:a1:aa:5b:71:d4:9d:e3:e4:5e:
c9:15:37:f7:dd:30:72:d3:82:f0:b9:4b:3d:69:26:82:cb:fd:
bb:c4:b4:cd:4f:67:67:65:92:48:99:fb:e1:f6:18:24:76:c0:
d2:0f:3a:d0:a8:c0:09:07:84:21:eb:51:d6:54:2c:f4:c6:b7:
34:96:56:2a:73:0b:5c:16:52:c6:d6:bf:84:1d:a3:8f:0e:d5:
8c:cb:ba:30:7c:ae:15:49:3a:c9:cd:d8:51:ea:83:47:b3:30:
e8:73:ac:4b:ef:6a:0f:e8:85:c7:3a:a8:4b:61:ed:f5:c6:af:
b0:58:76:4a:04:9e:91:e3:ab:00:3c:a7:c1:45:e6:4d:9d:b8:
f4:64:c1:4c:ef:e3:10:be:95:c8:07:5d:dd:96:54:a4:c3:94:
04:5d:25:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz
RTdGQUVCOUUwHhcNMjUxMDIyMTc1MTUzWhcNMjUxMDI5MTc1MTUzWjAYMRYwFAYD
VQQDEw02OGY5MTliYS1iZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGdSSlmDMUgnJw7+6kfhdoJvlWaaIvWoS7aAyDemMZxbpJdwW2VVA+zB2vlY
EiNcPRljD0ro3ZtPkltKwK9LedhNuPtabgj/EsHlipznflW5VnaBJI5opk+kouR8
9YV9Kha3jo2i0CsEBhikAPATOcui2rGElJZfQAkmIBOBEIxCScydtUnCrccDP+6k
aWIhJempjBikpAR4Om7PE4qHWIjmJnRtLVT8I6w+VGUyickCKxeApByBBOiFzaaI
gSGTtxgHqjBXmXpIgp/YvErYaZbOJNiaGwq0YU31KbmulLEvgXVAQWWLJYAdEpSO
IRIn7mWwer5VcDQanapoNnpgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImP4klu
jaZjTGlRcM/7S7m3MqyYMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx
RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx
Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDGenkuIrTJRGyy0RZV5cvYu4B/3DumFrm8WbS7zfJqF8Qy1IkVU15
dWc0rHZLs0gumcdmTTaEsXUy/wWhwn5g+cSBAg1wGcF7ayNwfmBMGMF3PTb3spxA
zrchWG9hFwjcCZShqltx1J3j5F7JFTf33TBy04LwuUs9aSaCy/27xLTNT2dnZZJI
mfvh9hgkdsDSDzrQqMAJB4Qh61HWVCz0xrc0llYqcwtcFlLG1r+EHaOPDtWMy7ow
fK4VSTrJzdhR6oNHszDoc6xL72oP6IXHOqhLYe31xq+wWHZKBJ6R46sAPKfBReZN
nbj0ZMFM7+MQvpXIB13dllSkw5QEXSU2
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:02:51 2025 by rpki-client