$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json) Hash identifier: Kwxb5pftfHnXOmOgVmaoeIG+UjQPt5eVtzg4m1Bl0a0= Subject key identifier: 1D:07:0D:A2:19:87:B7:F3:40:5D:06:8F:64:91:5E:40:A2:B6:FB:B7 Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft Manifest number: 0237 Signing time: Fri 25 Sep 2026 02:39:01 +0000 Manifest this update: Fri 25 Sep 2026 02:39:01 +0000 Manifest next update: Fri 02 Oct 2026 02:39:01 +0000 Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: VAQo8HvQ0on+pF7FUkXgeKLkwjjWf/xeO36MHOv2wsA=) 2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67 Validity Not Before: Sep 25 02:39:01 2026 GMT Not After : Oct 2 02:39:01 2026 GMT Subject: CN=6ab5dec5-3e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:68:fc:6a:ee:90:7e:f0:83:a0:66:54:c2: d9:80:a1:c1:c9:be:56:80:78:e2:66:0f:cf:5c:3a: 5e:f3:1a:04:45:16:10:8d:50:1b:51:39:70:38:db: 25:6d:54:69:35:64:ed:1f:ba:db:67:14:d4:d3:b5: c7:96:af:96:38:e9:2f:30:92:18:8f:dc:65:3e:3c: 1a:0e:fd:22:aa:ea:15:3e:7c:e2:cc:d5:8e:79:a2: 6f:ad:a9:e0:64:ce:e8:f4:7c:41:30:43:1b:6f:44: 4d:7e:6d:c2:32:ce:ff:d2:b7:fd:50:a6:ae:27:46: c2:ee:98:0e:67:31:0a:09:f2:08:dc:1a:a8:3e:7a: f1:07:3f:6b:4e:54:85:61:e5:2a:9d:3c:a6:a6:ad: e3:2e:0d:35:79:9c:95:3e:be:7d:84:53:ed:d6:9f: 44:c3:68:62:99:ec:52:d2:08:7a:47:19:e9:27:84: c9:60:b2:47:f1:af:2d:df:f0:bf:51:e6:87:f1:58: 38:a7:8e:89:77:39:ff:ff:d7:59:05:16:2b:fc:d5: 2a:4c:ea:23:aa:28:cd:a3:f7:b4:1d:66:3a:cd:49: 15:85:c2:ac:82:d2:4f:2c:dd:99:4c:ae:92:6a:fd: 72:c8:16:8d:ab:48:86:5f:50:06:4a:c5:51:88:3b: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:07:0D:A2:19:87:B7:F3:40:5D:06:8F:64:91:5E:40:A2:B6:FB:B7 X509v3 Authority Key Identifier: keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ac:3e:72:68:5e:72:d7:87:ce:b3:43:65:67:f1:5d:14:6e: 37:f6:27:74:37:3d:eb:1c:29:0e:37:95:6a:44:0d:37:19:b5: 9a:88:ce:31:a5:63:38:e4:c8:14:fb:d9:1a:8d:7b:92:54:b5: 0a:f7:2e:9c:c7:5d:c6:a7:9f:23:00:bb:67:af:d4:31:9c:bb: 94:43:0f:f1:d4:68:f8:14:12:40:e5:80:c1:04:7d:48:e9:10: aa:8f:6b:d1:c2:74:d8:e5:9d:ea:d4:da:6f:45:4a:d3:20:75: 19:b9:eb:48:f5:bf:47:62:ee:d5:9d:b5:79:05:ac:97:38:83: 19:67:ad:6f:9b:6e:eb:07:a9:39:aa:80:43:a6:e1:f4:95:46: 5b:ef:17:72:35:2f:0c:2e:0d:c4:85:0c:0e:ea:dd:09:6d:69: cc:53:17:4f:0c:13:9c:84:ab:dd:ce:bf:14:c8:cb:c8:29:15: 0d:a5:ed:7b:cb:89:e4:ab:61:ec:b2:d9:91:d2:26:83:d0:ff: 63:aa:6a:26:5e:05:7b:d9:93:88:a8:05:42:c0:cb:be:6f:72: e4:16:84:16:e3:a6:67:4d:c2:ad:cf:81:3d:23:bd:96:52:ad: fa:81:96:1a:16:8a:ac:6b:15:f4:38:6c:ee:f9:df:da:b9:ea: 0b:8a:74:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2NzcxMTAvBgNVBAUTKDI4NzY4MjVGNzdDMjRBMTY3REM0MTIxNTM1MEY2ODg3 OTI5ODFBNjcwHhcNMjYwOTI1MDIzOTAxWhcNMjYxMDAyMDIzOTAxWjAYMRYwFAYD VQQDEw02YWI1ZGVjNS0zZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcto/GrukH7wg6BmVMLZgKHByb5WgHjiZg/PXDpe8xoERRYQjVAbUTlwONsl bVRpNWTtH7rbZxTU07XHlq+WOOkvMJIYj9xlPjwaDv0iquoVPnzizNWOeaJvrang ZM7o9HxBMEMbb0RNfm3CMs7/0rf9UKauJ0bC7pgOZzEKCfII3BqoPnrxBz9rTlSF YeUqnTympq3jLg01eZyVPr59hFPt1p9Ew2himexS0gh6RxnpJ4TJYLJH8a8t3/C/ UeaH8Vg4p46Jdzn//9dZBRYr/NUqTOojqijNo/e0HWY6zUkVhcKsgtJPLN2ZTK6S av1yyBaNq0iGX1AGSsVRiDtHwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0HDaIZ h7fzQF0Gj2SRXkCitvu3MB8GA1UdIwQYMBaAFCh2gl93wkoWfcQSFTUPaIeSmBpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY3Ny8wMjI3Rjc4NjU3 NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1NoWjl4QklWTlE5b2g1S1lH bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIYUNYM2ZDU2haOXhCSVZOUTlvaDVLWUdtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY3Ny8wMjI3Rjc4NjU3NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1No Wjl4QklWTlE5b2g1S1lHbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqw+cmhecteHzrNDZWfxXRRuN/YndDc96xwpDjeVakQNNxm1mojOMaVjOOTI FPvZGo17klS1CvcunMddxqefIwC7Z6/UMZy7lEMP8dRo+BQSQOWAwQR9SOkQqo9r 0cJ02OWd6tTab0VK0yB1GbnrSPW/R2Lu1Z21eQWslziDGWetb5tu6wepOaqAQ6bh 9JVGW+8XcjUvDC4NxIUMDurdCW1pzFMXTwwTnISr3c6/FMjLyCkVDaXte8uJ5Kth 7LLZkdImg9D/Y6pqJl4Fe9mTiKgFQsDLvm9y5BaEFuOmZ03Crc+BPSO9llKt+oGW GhaKrGsV9Dhs7vnf2rnqC4p0cg== -----END CERTIFICATE-----Generated at Fri Sep 25 22:09:21 2026 by rpki-client