
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json)
Hash identifier: Jmrd92okO8vpLmXl+cZKeSGKkl6Z33uDjb9uzbfoYHQ=
Subject key identifier: 47:3D:AC:CF:92:32:73:CA:9F:09:F6:EB:0A:5D:5A:1D:2C:BD:62:7E
Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
Manifest number: 01C7
Signing time: Thu 19 Feb 2026 02:22:16 +0000
Manifest this update: Thu 19 Feb 2026 02:22:15 +0000
Manifest next update: Thu 26 Feb 2026 02:22:15 +0000
Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: CVEtbDbE3vJIWbPleyqwT3Sr7fIQnE0iW6EI5qOsjAI=)
2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: E2MEy59tbIM1Maudg/5GMAqeAqrNk3TYYaN2opqqFDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67
Validity
Not Before: Feb 19 02:22:15 2026 GMT
Not After : Feb 26 02:22:15 2026 GMT
Subject: CN=699673d8-6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:d7:e9:00:76:2f:62:7d:ed:86:2d:2d:23:
26:58:b4:90:06:25:11:72:1c:ec:ce:04:a1:e7:aa:
34:bf:de:3e:ba:9d:eb:de:b8:23:6a:a7:a8:a4:8e:
77:12:c3:35:43:8b:54:6c:7c:05:9a:d2:fc:84:74:
f7:a6:60:68:bc:f1:8e:21:4c:ce:e9:05:af:0b:4a:
0c:6b:9c:b1:15:a4:a0:aa:49:f5:80:63:01:12:9c:
84:53:0d:c3:e7:ba:19:cd:a0:e0:a1:2d:00:3a:a9:
c0:fc:0a:9b:23:40:28:80:ec:68:1b:a0:88:89:0b:
20:36:64:78:44:11:e7:a5:3c:14:5e:db:5c:49:c2:
8d:cc:46:2a:fd:85:ce:67:84:30:d0:83:1c:72:f4:
b3:30:36:95:5b:f3:48:cc:5a:e3:05:2a:a0:4b:80:
93:73:43:89:b5:60:dc:82:0e:94:65:50:70:0c:f2:
95:6e:2e:63:a3:57:45:9b:8c:55:c2:d4:4f:60:a9:
d6:1a:fd:82:5c:d2:67:2e:65:05:b1:cc:40:c3:88:
3c:19:3f:42:2a:6f:06:01:3f:8f:08:4d:4e:6c:86:
bf:9c:bd:5c:7d:eb:c8:e9:ca:3e:45:ec:cc:fd:17:
e6:b1:d2:af:8b:07:d8:d1:56:b9:00:c8:67:22:36:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:AC:CF:92:32:73:CA:9F:09:F6:EB:0A:5D:5A:1D:2C:BD:62:7E
X509v3 Authority Key Identifier:
keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:db:28:e0:39:99:c8:98:e6:10:cd:7b:e4:bd:c5:d6:e2:cd:
f4:f2:28:f0:86:f4:13:68:d7:cb:79:c5:6f:a9:32:35:64:f6:
89:8b:1a:2d:b0:c6:28:c4:ab:b8:e7:4d:03:63:d1:1d:26:c7:
05:64:e2:14:34:8d:14:c5:3a:1b:25:84:a2:50:b7:27:8c:6c:
95:97:e0:ea:be:d4:8e:0c:b2:0c:b9:a3:ab:cf:2a:be:48:a9:
29:63:4a:39:d5:1a:4c:56:18:e8:58:03:0d:21:9a:6f:32:df:
ab:21:5e:94:00:1c:98:48:39:3a:e5:5a:2e:51:7e:c4:4b:c9:
0c:c0:11:10:b2:9a:95:f8:07:42:d9:fc:12:01:2f:52:a5:3a:
06:9c:e6:b5:b2:d6:b0:c6:ae:54:35:26:05:60:78:4f:88:ce:
cf:4c:a5:57:81:cb:76:3b:99:d8:ec:c8:0e:a7:2b:c2:ec:65:
e6:07:37:d4:4d:cd:e0:ce:f0:69:06:66:87:96:28:bf:91:4b:
80:a5:fa:ef:b7:bd:4c:ab:1e:c6:9e:39:86:09:21:c7:9f:f4:
fc:98:75:0b:12:a6:67:38:07:e9:32:9d:2d:ed:69:4d:d5:0c:
e5:a9:a1:27:f6:f9:45:f8:7c:31:5b:07:9a:b3:cf:ed:c8:d6:
c0:f0:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:25 2026 by rpki-client