$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json) Hash identifier: 0i1cshiLYG3B5yJ+xJxx5PMKnM/nruOcby1IIgQNr6o= Subject key identifier: 1D:20:96:96:AC:B9:F2:DE:40:15:BD:F9:C3:4B:85:06:71:13:66:FE Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft Manifest number: 0472 Signing time: Thu 23 Jul 2026 01:00:55 +0000 Manifest this update: Thu 23 Jul 2026 01:00:55 +0000 Manifest next update: Thu 30 Jul 2026 01:00:55 +0000 Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: pmKxokqmpxhM/4AL1Ne61r7GK0LD78hdKff/4pQmgwk=) 2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: I3945a68aAj4Bezh1bF6xRl/WpfQZcBM/2Xudp6szlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Validity Not Before: Jul 23 01:00:55 2026 GMT Not After : Jul 30 01:00:55 2026 GMT Subject: CN=6a6167c7-cde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:da:34:3a:2b:9b:0e:3d:a2:35:de:41:9a: c0:a9:07:b7:12:a9:4f:49:b5:67:70:bc:5d:c8:78: 90:14:c8:4a:44:6b:a5:28:ee:96:af:ef:f3:8f:19: 77:31:86:8c:c8:33:ef:d0:74:28:4b:8f:26:3b:a2: d5:bf:8f:5d:f9:0b:51:f4:91:ea:61:83:48:45:b8: 0b:39:9a:64:70:b9:13:a1:f5:b5:2b:3f:4e:03:75: e1:1d:cd:8d:cb:b5:cc:fc:93:db:7e:ee:09:af:82: 55:2c:55:23:c7:dc:c6:46:33:33:7a:ea:fa:1a:79: 28:6c:f9:ff:e1:3d:3d:70:aa:79:35:c1:6b:f6:f6: 2d:c3:59:9a:a4:c4:90:83:09:88:00:01:c7:80:45: 22:09:bc:aa:54:e3:89:4e:7d:02:21:9c:b9:5c:6f: db:da:24:d6:dd:60:cf:54:6d:3f:2b:3c:7c:db:e4: e3:77:8f:90:60:34:89:0d:e7:ce:c5:7e:1b:87:0d: d3:f7:c5:17:3a:65:fe:94:03:3c:9a:26:2f:4b:86: e8:7d:b3:6c:3a:cd:4e:18:c9:1a:34:2e:fd:0e:67: 27:9f:f3:ed:1e:9c:8d:b4:d9:72:a0:ed:1c:de:02: 2f:3d:67:d7:61:81:a4:a8:1e:fc:7f:63:a2:87:6e: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:20:96:96:AC:B9:F2:DE:40:15:BD:F9:C3:4B:85:06:71:13:66:FE X509v3 Authority Key Identifier: keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ef:bb:21:6c:6e:e3:d7:21:64:59:df:41:50:a0:71:f5:02: 12:e6:59:b0:66:85:91:50:78:36:1f:01:df:61:cf:d5:4a:e8: 85:ca:a6:66:8e:c1:f3:85:12:5c:02:19:c9:de:43:d4:2b:38: 00:42:c2:15:0b:d9:3f:19:bd:79:c6:59:c5:ae:43:58:a7:45: 44:67:bb:7e:e6:54:ea:7c:8a:25:e3:c2:b1:2c:b2:12:71:8d: 58:5d:98:18:d7:8e:34:1c:f1:0d:85:79:c3:89:6f:01:ec:0e: d7:d6:ce:06:7a:e8:d3:94:23:98:55:a6:6a:a6:fa:55:f8:42: 8f:b5:76:77:7c:44:73:e6:b4:dc:63:e6:32:24:04:8a:99:d4: ce:8a:a6:5f:9a:7f:d2:74:c9:94:3b:ea:0f:9e:53:8e:a5:30: a8:8a:12:62:60:ce:20:6e:01:bf:67:17:74:f3:ae:1d:af:3e: 67:4b:48:d1:17:42:10:dc:54:69:f2:78:99:af:ce:99:35:f7: dd:26:d7:df:68:36:08:5a:98:36:18:26:97:2b:b8:18:08:04: 0d:6b:4b:4c:51:15:a4:7a:03:11:93:30:ef:cd:a4:b9:ab:a8: 31:22:b1:76:06:86:6e:e0:c1:d8:e7:c4:dd:37:6f:0d:41:b4: 2b:1a:b3:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3 MjBDQjQ4OTAwHhcNMjYwNzIzMDEwMDU1WhcNMjYwNzMwMDEwMDU1WjAYMRYwFAYD VQQDEw02YTYxNjdjNy1jZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kzaNDormw49ojXeQZrAqQe3EqlPSbVncLxdyHiQFMhKRGulKO6Wr+/zjxl3 MYaMyDPv0HQoS48mO6LVv49d+QtR9JHqYYNIRbgLOZpkcLkTofW1Kz9OA3XhHc2N y7XM/JPbfu4Jr4JVLFUjx9zGRjMzeur6GnkobPn/4T09cKp5NcFr9vYtw1mapMSQ gwmIAAHHgEUiCbyqVOOJTn0CIZy5XG/b2iTW3WDPVG0/Kzx82+Tjd4+QYDSJDefO xX4bhw3T98UXOmX+lAM8miYvS4bofbNsOs1OGMkaNC79Dmcnn/PtHpyNtNlyoO0c 3gIvPWfXYYGkqB78f2Oih26ATwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0glpas ufLeQBW9+cNLhQZxE2b+MB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw SXVEV2FqeTZwQVp5RExTSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeu+7IWxu49chZFnfQVCgcfUCEuZZsGaFkVB4Nh8B32HP1UrohcqmZo7B84US XAIZyd5D1Cs4AELCFQvZPxm9ecZZxa5DWKdFRGe7fuZU6nyKJePCsSyyEnGNWF2Y GNeONBzxDYV5w4lvAewO19bOBnro05QjmFWmaqb6VfhCj7V2d3xEc+a03GPmMiQE ipnUzoqmX5p/0nTJlDvqD55TjqUwqIoSYmDOIG4Bv2cXdPOuHa8+Z0tI0RdCENxU afJ4ma/OmTX33SbX32g2CFqYNhgmlyu4GAgEDWtLTFEVpHoDEZMw782kuauoMSKx dgaGbuDB2OfE3TdvDUG0KxqzQw== -----END CERTIFICATE-----Generated at Fri Jul 24 20:34:06 2026 by rpki-client