$ rpki-client -vvvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: Q9XjpxK00cXMCTpbUfdb4wTKeR5KzD5rHbPR0NpW5Vg= Subject key identifier: D2:19:14:91:9B:73:CB:1F:1C:BC:25:13:F9:7D:4B:D6:20:BD:DB:E4 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 076B Signing time: Tue 22 Sep 2026 21:24:28 +0000 Manifest this update: Tue 22 Sep 2026 21:24:27 +0000 Manifest next update: Tue 29 Sep 2026 21:24:27 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: L1b9bClUZDtSVWgWN3omuVpF5c7jnX8v/ICpfXudYz4=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Sep 22 21:24:27 2026 GMT Not After : Sep 29 21:24:27 2026 GMT Subject: CN=6ab2f20c-ed1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:c7:c3:63:8d:a8:07:8e:da:f3:fe:d9:48: dc:4a:8c:f1:42:c6:fc:e3:ac:25:93:72:b0:d3:df: c6:7f:23:6d:c6:1d:1a:88:32:9c:42:33:a8:23:cc: ae:b8:ef:99:28:5a:0e:e6:49:65:dc:f2:b8:d2:bd: 02:dd:fb:7c:2c:fb:c7:c0:96:ad:c0:21:d6:f3:41: 04:72:45:10:29:3c:bf:33:83:1c:86:b3:3a:1f:6e: f1:a9:85:53:7c:64:3f:c8:7e:67:45:d5:f1:fd:27: d4:47:f8:87:af:7c:45:47:8a:9b:05:98:97:5a:f5: 3c:01:c1:81:16:dc:75:a4:83:6c:0d:62:07:a4:42: 40:8f:0d:1b:41:ac:22:16:2e:ea:6e:59:4d:a9:3b: 55:15:dc:a5:da:e2:0d:88:d7:8f:c2:20:19:be:49: 7d:18:92:97:e3:6e:df:5c:e8:c8:72:bf:f6:c9:33: 1a:85:aa:fb:21:1d:3b:df:df:23:0e:6f:10:99:04: 68:b0:63:9f:63:91:a9:44:e0:ad:72:b2:ba:d2:0b: af:85:07:7d:5d:89:03:28:a2:48:cf:06:09:18:33: ac:30:1c:5f:90:5b:21:71:72:76:65:f3:84:5a:9d: 9c:c3:60:0a:27:9b:26:2b:8c:39:c4:69:1c:b8:44: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:19:14:91:9B:73:CB:1F:1C:BC:25:13:F9:7D:4B:D6:20:BD:DB:E4 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bf:ef:4c:38:5c:48:41:05:ea:12:93:8e:b1:26:4b:31:04: 00:b6:10:ed:bb:32:38:71:71:a1:40:88:3e:2f:d0:44:9b:94: a6:4d:3b:f4:c5:86:04:02:b1:51:17:06:a6:20:21:50:2f:9d: 36:99:fc:77:14:56:04:d9:52:e2:75:88:9c:e3:e0:22:82:06: 91:01:27:4f:52:65:d5:fb:bf:b6:d9:59:39:0a:af:53:8a:c1: 53:f1:fa:0a:56:67:5e:5d:e5:b4:12:3e:b2:a7:81:48:32:82: 23:d9:83:e9:de:01:95:30:1c:22:64:a7:58:6b:69:37:9b:9d: 98:01:8b:5b:21:74:6c:48:89:4e:f7:a6:9e:d3:7f:32:4f:3e: 54:99:cf:02:75:18:d8:34:80:02:c8:bb:22:1b:5b:5c:5f:c9: c6:93:58:bd:a5:8b:83:7b:a3:27:22:31:62:d8:09:72:4a:14: ef:74:e0:07:55:25:64:2f:b7:f8:52:ef:2c:7e:5a:e2:4a:56: 06:47:93:20:59:9c:17:e3:39:42:2a:39:f1:1e:5d:76:d3:27: 99:af:bc:26:4b:10:5f:27:96:8d:d6:48:49:f9:bf:db:be:5f: cf:bc:98:9c:c4:5d:6f:0c:d1:7d:41:7c:46:9f:af:11:3a:c0: 49:44:32:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjYwOTIyMjEyNDI3WhcNMjYwOTI5MjEyNDI3WjAYMRYwFAYD VQQDEw02YWIyZjIwYy1lZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvLHw2ONqAeO2vP+2UjcSozxQsb846wlk3Kw09/GfyNtxh0aiDKcQjOoI8yu uO+ZKFoO5kll3PK40r0C3ft8LPvHwJatwCHW80EEckUQKTy/M4MchrM6H27xqYVT fGQ/yH5nRdXx/SfUR/iHr3xFR4qbBZiXWvU8AcGBFtx1pINsDWIHpEJAjw0bQawi Fi7qbllNqTtVFdyl2uINiNePwiAZvkl9GJKX427fXOjIcr/2yTMahar7IR07398j Dm8QmQRosGOfY5GpROCtcrK60guvhQd9XYkDKKJIzwYJGDOsMBxfkFshcXJ2ZfOE Wp2cw2AKJ5smK4w5xGkcuERQLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIZFJGb c8sfHLwlE/l9S9YgvdvkMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlr/vTDhcSEEF6hKTjrEmSzEEALYQ7bsyOHFxoUCIPi/QRJuUpk079MWGBAKx URcGpiAhUC+dNpn8dxRWBNlS4nWInOPgIoIGkQEnT1Jl1fu/ttlZOQqvU4rBU/H6 ClZnXl3ltBI+sqeBSDKCI9mD6d4BlTAcImSnWGtpN5udmAGLWyF0bEiJTvemntN/ Mk8+VJnPAnUY2DSAAsi7IhtbXF/JxpNYvaWLg3ujJyIxYtgJckoU73TgB1UlZC+3 +FLvLH5a4kpWBkeTIFmcF+M5Qio58R5ddtMnma+8JksQXyeWjdZISfm/275fz7yY nMRdbwzRfUF8Rp+vETrASUQyvA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:39:47 2026 by rpki-client