$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json) Hash identifier: Bl2mJP2jmOiPlqxCaw7uFO72N8jHY4CmIVSNj8Iaz2Y= Subject key identifier: C9:19:77:B4:83:4A:D2:AB:6C:22:54:5B:BE:AC:E2:45:2A:58:82:F4 Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft Manifest number: 023B Signing time: Sat 03 Oct 2026 03:11:24 +0000 Manifest this update: Sat 03 Oct 2026 03:11:23 +0000 Manifest next update: Sat 10 Oct 2026 03:11:23 +0000 Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: /DB/4dpWilSUnGXxN1qncXfaau9C+OuRcqpwawttMmU=) 2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67 Validity Not Before: Oct 3 03:11:23 2026 GMT Not After : Oct 10 03:11:23 2026 GMT Subject: CN=6ac0725c-90be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:c4:b8:66:6e:5f:a6:90:82:13:68:0e:55: 48:77:25:95:b4:0b:d1:f2:24:b6:7d:1b:62:d6:b2: 81:6f:28:f1:c5:36:5a:51:f8:57:69:16:d7:39:21: 69:62:08:4b:22:b9:d2:86:bf:c6:75:21:29:c4:df: fb:b7:8a:a7:06:f5:31:79:23:76:c5:52:ae:16:8e: 4d:0e:af:fd:98:a9:d8:ae:e2:cc:d2:70:1c:61:90: 2d:16:de:99:92:fc:cf:ab:b2:5e:9c:93:62:fb:b1: ce:d8:58:66:b5:40:79:8e:09:ab:de:c3:01:6b:77: ff:40:3c:65:82:b6:b4:e8:67:2c:a0:47:45:8c:22: 81:11:73:c8:b1:e8:75:47:91:6b:f4:4a:3f:1b:cf: 57:a9:71:1a:4d:ef:db:60:54:96:d1:f3:46:54:a3: 4c:5a:03:cc:6a:04:76:66:c3:de:55:e8:c0:b3:4c: 84:57:9e:8d:06:8d:a8:73:95:bc:35:da:0a:f0:42: 26:23:25:c9:a2:26:18:76:2a:d8:b8:6d:1c:51:4a: 41:a7:45:27:23:95:cc:0d:3e:45:55:68:1d:4e:30: b4:b7:da:cf:98:05:b4:97:91:08:7c:21:12:35:74: cb:46:79:c1:6c:5e:e7:08:5c:fb:18:e8:0a:58:be: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:19:77:B4:83:4A:D2:AB:6C:22:54:5B:BE:AC:E2:45:2A:58:82:F4 X509v3 Authority Key Identifier: keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:8f:f9:98:e1:85:39:04:d6:4a:ce:98:f1:04:f8:be:4d:68: 4d:cd:77:fd:c9:a6:b3:a1:5e:23:5a:16:80:1f:5f:a9:fd:2b: 1e:54:5c:b8:f7:50:70:e7:2e:63:51:dc:ec:51:2b:0c:39:20: dd:f0:a0:d4:8e:94:ae:d2:8e:8c:b3:39:65:1f:fc:6e:66:0b: 5d:64:72:3a:b2:fa:5e:4f:14:8d:28:8e:1c:09:26:9b:13:85: 2a:d0:fb:1b:2a:3a:11:4e:b4:79:49:fc:30:57:d3:aa:5a:c0: 99:07:11:7a:08:bb:45:96:17:64:70:26:cb:2f:3c:61:3d:b5: c9:a4:35:38:36:63:e5:66:53:c8:4f:ad:15:38:dd:83:47:73: 0b:58:cf:78:c0:c2:77:ae:d7:5f:5d:60:d8:ba:39:06:67:1d: 01:65:bb:95:ef:dc:98:f5:26:ab:17:a6:d2:89:7c:68:98:20: 30:c5:60:6c:fb:1d:c5:64:75:49:d6:39:e8:cf:f7:52:51:95: e8:53:f7:74:de:a2:03:2b:ea:6c:b6:78:b3:c8:33:fe:47:37: 2c:0e:7b:75:a3:1d:e1:24:89:0c:8b:f9:42:cd:b5:50:06:be: 94:6e:d4:cf:da:18:06:99:df:88:fc:b5:93:8d:22:13:60:74: b9:0c:00:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2NzcxMTAvBgNVBAUTKDI4NzY4MjVGNzdDMjRBMTY3REM0MTIxNTM1MEY2ODg3 OTI5ODFBNjcwHhcNMjYxMDAzMDMxMTIzWhcNMjYxMDEwMDMxMTIzWjAYMRYwFAYD VQQDEw02YWMwNzI1Yy05MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSTEuGZuX6aQghNoDlVIdyWVtAvR8iS2fRti1rKBbyjxxTZaUfhXaRbXOSFp YghLIrnShr/GdSEpxN/7t4qnBvUxeSN2xVKuFo5NDq/9mKnYruLM0nAcYZAtFt6Z kvzPq7JenJNi+7HO2FhmtUB5jgmr3sMBa3f/QDxlgra06GcsoEdFjCKBEXPIseh1 R5Fr9Eo/G89XqXEaTe/bYFSW0fNGVKNMWgPMagR2ZsPeVejAs0yEV56NBo2oc5W8 NdoK8EImIyXJoiYYdirYuG0cUUpBp0UnI5XMDT5FVWgdTjC0t9rPmAW0l5EIfCES NXTLRnnBbF7nCFz7GOgKWL5BHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkZd7SD StKrbCJUW76s4kUqWIL0MB8GA1UdIwQYMBaAFCh2gl93wkoWfcQSFTUPaIeSmBpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY3Ny8wMjI3Rjc4NjU3 NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1NoWjl4QklWTlE5b2g1S1lH bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIYUNYM2ZDU2haOXhCSVZOUTlvaDVLWUdtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY3Ny8wMjI3Rjc4NjU3NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1No Wjl4QklWTlE5b2g1S1lHbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkI/5mOGFOQTWSs6Y8QT4vk1oTc13/cmms6FeI1oWgB9fqf0rHlRcuPdQcOcu Y1Hc7FErDDkg3fCg1I6UrtKOjLM5ZR/8bmYLXWRyOrL6Xk8UjSiOHAkmmxOFKtD7 Gyo6EU60eUn8MFfTqlrAmQcRegi7RZYXZHAmyy88YT21yaQ1ODZj5WZTyE+tFTjd g0dzC1jPeMDCd67XX11g2Lo5BmcdAWW7le/cmPUmqxem0ol8aJggMMVgbPsdxWR1 SdY56M/3UlGV6FP3dN6iAyvqbLZ4s8gz/kc3LA57daMd4SSJDIv5Qs21UAa+lG7U z9oYBpnfiPy1k40iE2B0uQwADg== -----END CERTIFICATE-----Generated at Sun Oct 4 13:38:44 2026 by rpki-client