
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json)
Hash identifier: HGHF4G28qL9DsgLppqfxWpXZ4u4fUornjJzGZofnWDQ=
Subject key identifier: AC:10:EC:42:B9:FA:80:1F:0A:83:4A:0F:84:F1:00:B9:9C:C5:CB:2A
Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
Manifest number: 01F2
Signing time: Mon 11 May 2026 03:18:02 +0000
Manifest this update: Mon 11 May 2026 03:18:02 +0000
Manifest next update: Mon 18 May 2026 03:18:02 +0000
Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: ko65R22npsuyVe+/ePY1qHelAekfZV9DZCnKj7Pm9ho=)
2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67
Validity
Not Before: May 11 03:18:02 2026 GMT
Not After : May 18 03:18:02 2026 GMT
Subject: CN=6a014a6a-1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:c1:c8:d1:cb:23:90:71:b5:3d:4e:ac:8e:
f3:11:d1:95:69:4a:b4:95:b9:d8:92:73:8b:21:41:
e4:aa:f4:a4:a9:d8:64:23:87:05:d4:8a:c4:29:4d:
ad:cc:6e:2b:21:5c:f0:38:fa:c7:84:f8:e7:15:5f:
03:04:35:52:b3:51:4e:79:8b:f3:80:00:bb:4c:bf:
45:18:94:1b:fd:3d:fb:8b:09:79:f4:c4:3a:db:da:
a3:ec:1c:8d:d5:bf:8f:8c:56:13:ac:e1:f3:19:a5:
43:6d:57:c9:4b:4b:da:a5:bd:fa:da:0e:dd:7f:10:
d1:bd:59:06:dd:04:80:16:1b:a5:29:93:da:9a:b9:
5d:ff:7c:d7:e0:b9:ec:0f:31:17:42:7e:76:e3:e2:
28:eb:a9:76:11:72:c1:14:39:e9:aa:37:a7:e4:59:
f7:90:8a:ef:7e:6f:eb:59:1e:88:8b:cf:a7:af:28:
3f:14:85:7e:90:e6:f7:ac:9a:a6:6c:49:42:3a:19:
22:5b:08:80:a5:08:f8:13:f9:11:72:56:ed:bd:eb:
73:c8:b4:ab:dc:52:38:26:e4:e6:ee:6f:b9:9f:3e:
f0:72:25:3d:2b:bc:55:46:55:5a:62:fd:ce:92:23:
b9:8c:9b:2e:04:66:29:2a:63:2a:29:a6:e7:87:a3:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:EC:42:B9:FA:80:1F:0A:83:4A:0F:84:F1:00:B9:9C:C5:CB:2A
X509v3 Authority Key Identifier:
keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ce:b7:4d:71:09:36:b6:96:eb:b6:d9:f3:db:83:c3:16:6d:
7b:ed:33:79:f9:27:a0:09:54:50:04:bd:68:6f:ba:d2:70:40:
28:eb:8e:57:1c:19:96:53:00:58:e6:8a:32:14:c4:df:44:d1:
ee:8b:8f:0d:ee:96:6b:84:51:73:06:46:86:d7:db:86:75:1c:
e7:11:35:ec:25:a0:d2:50:c2:7e:0e:6e:29:63:bb:7c:40:80:
39:bb:ef:31:e8:bc:90:0f:06:ad:8e:d9:bc:26:e1:1d:d0:a3:
f8:c8:40:72:6d:2a:fa:6c:ec:5f:52:f3:05:82:fe:8f:4a:b5:
d4:0c:fc:33:8f:b4:fd:50:d1:2c:68:9d:0b:50:d0:98:d4:4e:
44:be:3b:16:db:be:16:31:73:13:a0:03:fe:25:2c:a8:2d:08:
36:4a:ea:e8:fa:11:55:4c:10:e3:b2:34:d0:a0:de:32:26:72:
70:cc:b7:32:02:94:f1:8f:b0:55:0e:90:50:d0:ff:63:3d:c2:
a3:18:00:6e:9a:ac:9b:f2:d9:87:89:67:b5:90:c6:a9:93:23:
f1:e9:a6:50:74:4d:51:7e:0a:4e:ba:da:f2:83:f7:67:5f:09:
21:f2:20:84:01:ff:72:ef:d4:e1:cc:11:86:0a:c4:9d:52:4a:
b5:79:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:19 2026 by rpki-client