$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json) Hash identifier: mzcUmR00/B4yB08/FyHuYtHREfr5KpRMpIvm4MJDZCY= Subject key identifier: 4F:8D:60:CE:FE:8D:79:F7:2E:12:11:CE:8B:F3:1B:05:81:E8:C4:A5 Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft Manifest number: 0216 Signing time: Thu 23 Jul 2026 04:10:48 +0000 Manifest this update: Thu 23 Jul 2026 04:10:47 +0000 Manifest next update: Thu 30 Jul 2026 04:10:47 +0000 Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: 6/+9kcnGi+h6PCZJ76h/J2g/76C0LOSnaTn+sh6mulg=) 2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67 Validity Not Before: Jul 23 04:10:47 2026 GMT Not After : Jul 30 04:10:47 2026 GMT Subject: CN=6a619448-e536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:ea:6f:89:35:e9:f1:68:c0:ae:76:6a:d4: b9:42:59:81:aa:34:93:b1:90:2f:85:9c:c9:50:f6: 37:ee:e2:86:6b:1f:24:4b:6d:8e:5b:f4:9d:48:28: c2:f9:76:f7:da:b0:60:d8:f6:37:60:02:48:e6:85: 6a:bb:bd:b4:53:b3:bf:8d:57:86:78:ce:62:b8:a6: f0:0e:95:ea:89:7c:92:d7:da:00:cc:f9:af:85:48: d1:c8:8d:1a:d6:ae:25:93:09:df:85:48:ac:4b:c5: 73:e0:87:fa:49:4e:09:60:1c:10:63:78:7d:80:2a: 2b:e5:4c:f0:2e:0a:22:f1:25:53:2b:50:60:9b:4e: af:44:66:ef:94:2c:97:49:4c:bb:14:6e:4d:80:e2: 29:c6:f6:b8:c1:07:b8:2c:2c:e1:b9:d5:61:3a:1c: 2c:4d:f9:54:c1:34:b7:72:9f:0f:01:99:e4:c8:8d: aa:84:e1:7f:dd:fc:17:2f:83:53:e3:0a:0e:90:bf: 3e:d1:45:92:35:75:34:fb:be:0a:e3:05:22:cf:07: f2:a4:3e:5c:32:f9:e9:f6:5e:2f:9d:18:e5:9b:54: 9d:3d:64:5b:fa:31:88:fc:eb:72:b9:34:73:af:71: 0b:09:d2:89:09:5b:94:99:c9:93:8e:43:b4:1a:b9: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8D:60:CE:FE:8D:79:F7:2E:12:11:CE:8B:F3:1B:05:81:E8:C4:A5 X509v3 Authority Key Identifier: keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:97:81:17:47:bd:3e:ff:a7:40:db:c3:79:c7:6c:34:62:14: 63:e4:41:d2:ec:0c:18:f6:31:32:a1:d8:a0:b9:ec:0a:1c:30: fc:e2:69:b0:06:61:ad:9f:e5:37:cd:72:91:a5:1c:1b:ce:b4: 84:e3:6c:83:14:99:31:0a:fe:91:31:03:21:4d:7c:81:f3:41: 65:48:cc:26:e2:9a:a6:c1:a4:26:d3:e1:30:29:fb:1e:e7:c5: 3e:9b:7f:27:d7:0f:7b:86:b3:5d:6b:d8:e2:41:00:71:48:84: 40:ac:17:dd:ac:92:d7:dd:69:9d:73:12:27:07:fb:ae:4e:9a: 10:4d:98:94:fa:da:80:33:c5:5d:51:b2:d4:32:6f:d4:fa:97: dc:fa:d7:ee:4a:2c:3e:d2:fa:f5:80:9f:f2:a6:32:40:85:52: ac:e5:52:3b:5d:ec:ae:b9:2a:49:59:6e:13:9f:89:af:8c:12: 4b:73:eb:3a:a5:6a:20:02:8f:fc:b2:ab:7d:62:26:d1:e6:a5: 72:d0:8d:19:b4:d0:c2:5a:c6:51:bd:00:59:7f:db:81:95:cb: 0a:91:dd:94:fa:62:45:73:ac:7d:bd:3b:06:79:f7:9f:2c:d0: 37:9a:11:83:a9:a9:ae:c0:02:66:cb:0d:44:cf:a5:b5:de:93: 61:7a:9e:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2NzcxMTAvBgNVBAUTKDI4NzY4MjVGNzdDMjRBMTY3REM0MTIxNTM1MEY2ODg3 OTI5ODFBNjcwHhcNMjYwNzIzMDQxMDQ3WhcNMjYwNzMwMDQxMDQ3WjAYMRYwFAYD VQQDEw02YTYxOTQ0OC1lNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc/qb4k16fFowK52atS5QlmBqjSTsZAvhZzJUPY37uKGax8kS22OW/SdSCjC +Xb32rBg2PY3YAJI5oVqu720U7O/jVeGeM5iuKbwDpXqiXyS19oAzPmvhUjRyI0a 1q4lkwnfhUisS8Vz4If6SU4JYBwQY3h9gCor5UzwLgoi8SVTK1Bgm06vRGbvlCyX SUy7FG5NgOIpxva4wQe4LCzhudVhOhwsTflUwTS3cp8PAZnkyI2qhOF/3fwXL4NT 4woOkL8+0UWSNXU0+74K4wUizwfypD5cMvnp9l4vnRjlm1SdPWRb+jGI/OtyuTRz r3ELCdKJCVuUmcmTjkO0Grn6bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+NYM7+ jXn3LhIRzovzGwWB6MSlMB8GA1UdIwQYMBaAFCh2gl93wkoWfcQSFTUPaIeSmBpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY3Ny8wMjI3Rjc4NjU3 NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1NoWjl4QklWTlE5b2g1S1lH bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIYUNYM2ZDU2haOXhCSVZOUTlvaDVLWUdtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY3Ny8wMjI3Rjc4NjU3NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1No Wjl4QklWTlE5b2g1S1lHbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYpeBF0e9Pv+nQNvDecdsNGIUY+RB0uwMGPYxMqHYoLnsChww/OJpsAZhrZ/l N81ykaUcG860hONsgxSZMQr+kTEDIU18gfNBZUjMJuKapsGkJtPhMCn7HufFPpt/ J9cPe4azXWvY4kEAcUiEQKwX3ayS191pnXMSJwf7rk6aEE2YlPragDPFXVGy1DJv 1PqX3PrX7kosPtL69YCf8qYyQIVSrOVSO13srrkqSVluE5+Jr4wSS3PrOqVqIAKP /LKrfWIm0ealctCNGbTQwlrGUb0AWX/bgZXLCpHdlPpiRXOsfb07Bnn3nyzQN5oR g6mprsACZssNRM+ltd6TYXqetQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:46:45 2026 by rpki-client