$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: D/96DVmIM7Dew8OKvZPsVgJWqYyM0TgsIeHYDMuo9iM= Subject key identifier: 6E:C9:F0:63:A5:37:23:BE:10:06:39:02:27:DA:A6:89:20:43:71:64 Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 0714 Signing time: Sat 04 Apr 2026 21:41:35 +0000 Manifest this update: Sat 04 Apr 2026 21:41:35 +0000 Manifest next update: Sat 11 Apr 2026 21:41:35 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: g2NPQxEQaNboQTFUem8asAtvOWi0TGiN95KXVh44/C8=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Apr 4 21:41:35 2026 GMT Not After : Apr 11 21:41:35 2026 GMT Subject: CN=69d1858f-2ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:24:97:0f:b4:d5:38:0b:39:cc:af:2a:06: 99:7c:ed:48:b7:63:d9:7c:60:fe:48:46:72:9a:b7: ac:40:59:12:e6:ca:c2:3d:2a:20:06:cd:3d:f2:7f: 64:eb:76:74:e0:b9:c6:bb:92:8d:61:20:fd:08:fd: 85:f6:8a:6e:8d:4d:34:ac:73:37:d0:7a:9c:57:41: ae:b5:f9:06:54:91:bf:a1:fc:68:07:70:d6:5d:c2: bf:e2:f2:42:2e:76:a5:29:da:b5:82:13:5c:87:ba: 8b:c7:eb:c8:9e:ac:33:03:c8:02:cb:c4:dc:27:da: 12:cf:38:b5:00:94:60:c1:17:8d:da:6f:a9:a5:34: fe:fc:5a:19:86:e9:0c:e0:ef:3b:9e:87:d6:98:45: 7e:f0:f1:44:93:7e:63:5c:8b:6f:7e:e6:ac:55:80: 15:ac:3e:53:cb:fa:ba:24:9a:f1:d5:d3:11:70:b7: f3:13:7e:63:98:56:64:f7:4e:d4:7c:8b:70:7b:b4: 27:76:46:87:2c:db:85:cb:7c:6f:cd:a6:d5:73:b5: 87:35:1a:de:51:a5:92:0a:60:b4:3e:18:b8:20:36: 25:2a:11:a5:33:5c:c9:a8:8a:b0:c7:4a:e7:90:79: ec:c9:ef:a5:93:61:07:90:23:17:51:81:55:4b:6f: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:F0:63:A5:37:23:BE:10:06:39:02:27:DA:A6:89:20:43:71:64 X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:36:be:52:72:b9:d0:eb:c0:3c:c4:ac:47:a9:00:5f:2c:99: c5:e1:ae:2c:84:25:a2:51:6b:60:ee:bb:59:80:48:8c:94:57: e4:fc:95:65:ef:07:7a:7d:8a:2e:53:ad:f5:c5:87:19:97:42: 78:98:09:36:63:f9:19:73:7b:4a:37:90:cf:40:1c:31:62:44: 53:67:58:7a:c3:bf:78:56:b2:27:d3:a1:17:64:d8:39:02:4a: 49:81:05:9a:85:e5:65:d2:a7:04:21:3d:7a:5b:52:ba:9c:3d: 22:b4:9c:41:0a:44:b2:f2:2c:1f:2f:9c:a4:b1:b6:6f:77:0f: c6:95:d9:84:e0:4c:52:88:d2:b5:7e:00:73:bb:3e:bc:8b:89: 33:84:46:e2:34:30:e0:4c:2c:79:e8:c6:e7:ec:1a:f5:f1:c6: cf:db:99:fb:55:6d:15:4a:0d:80:4b:8e:fc:b8:9b:bd:c5:15: 4c:ad:91:9e:45:ff:33:49:7b:fd:66:32:f0:16:0d:32:91:39: 63:a5:8d:7b:c6:5c:8b:7e:ee:10:aa:d0:90:47:33:aa:85:df: a0:b9:91:b0:ac:87:6c:cc:c1:df:70:60:34:00:88:a7:36:0b: ea:c0:a0:86:00:9c:a0:3f:24:3e:77:08:f6:8c:1a:1f:49:dd: fe:cf:b3:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjYwNDA0MjE0MTM1WhcNMjYwNDExMjE0MTM1WjAYMRYwFAYD VQQDEw02OWQxODU4Zi0yZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZgklw+01TgLOcyvKgaZfO1It2PZfGD+SEZymresQFkS5srCPSogBs098n9k 63Z04LnGu5KNYSD9CP2F9opujU00rHM30HqcV0GutfkGVJG/ofxoB3DWXcK/4vJC LnalKdq1ghNch7qLx+vInqwzA8gCy8TcJ9oSzzi1AJRgwReN2m+ppTT+/FoZhukM 4O87nofWmEV+8PFEk35jXItvfuasVYAVrD5Ty/q6JJrx1dMRcLfzE35jmFZk907U fItwe7QndkaHLNuFy3xvzabVc7WHNRreUaWSCmC0Phi4IDYlKhGlM1zJqIqwx0rn kHnsye+lk2EHkCMXUYFVS2+S4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7J8GOl NyO+EAY5AifapokgQ3FkMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACDa+UnK50OvAPMSsR6kAXyyZxeGuLIQlolFrYO67WYBIjJRX5PyVZe8Hen2K LlOt9cWHGZdCeJgJNmP5GXN7SjeQz0AcMWJEU2dYesO/eFayJ9OhF2TYOQJKSYEF moXlZdKnBCE9eltSupw9IrScQQpEsvIsHy+cpLG2b3cPxpXZhOBMUojStX4Ac7s+ vIuJM4RG4jQw4EwseejG5+wa9fHGz9uZ+1VtFUoNgEuO/LibvcUVTK2RnkX/M0l7 /WYy8BYNMpE5Y6WNe8Zci37uEKrQkEczqoXfoLmRsKyHbMzB33BgNACIpzYL6sCg hgCcoD8kPncI9owaH0nd/s+zxA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:37 2026 by rpki-client