$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: H+j62oF9KaevMsh8PahTv05e9B83f9kjBU6FHfTn6vs= Subject key identifier: 81:3B:34:6B:70:99:02:1C:0E:25:CF:3E:D8:FF:75:84:23:4B:A0:2D Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 074D Signing time: Sun 26 Jul 2026 22:29:28 +0000 Manifest this update: Sun 26 Jul 2026 22:29:28 +0000 Manifest next update: Sun 02 Aug 2026 22:29:28 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: YL9pYk0/elMN1jnTWYdwxRgXQG84fxzwxQmyp8RwCvg=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Jul 26 22:29:28 2026 GMT Not After : Aug 2 22:29:28 2026 GMT Subject: CN=6a668a48-f911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:dd:dd:65:e2:51:05:1f:2f:fe:cb:69:7f: 5e:15:64:31:e1:2b:e3:ea:fd:07:dd:07:92:14:c8: 7e:ca:52:01:fe:af:d5:5a:7a:05:4a:50:96:c4:28: 85:a8:db:0e:72:9f:8d:a9:a0:f9:b0:b3:41:d9:35: 0f:5f:40:6b:62:1d:1b:96:1c:6f:e6:0f:af:02:da: 9e:11:99:e3:df:ee:7e:78:94:35:1d:61:9c:cd:2a: 34:0e:98:59:ea:62:8c:9a:6e:70:ab:d2:e4:2a:72: 11:81:2b:57:f7:ac:1a:55:5e:2a:56:6f:d6:75:d1: a6:0d:14:3f:d5:a3:27:f8:10:3e:37:8d:45:73:11: c9:c9:77:81:f3:a5:50:ad:d4:f6:08:ec:46:06:9a: bc:07:65:43:f9:66:16:a5:42:60:ed:49:5a:88:e1: 45:65:b1:84:60:3a:46:ac:fb:f5:86:74:66:77:c7: 97:f5:bb:a1:f2:aa:3c:5b:e2:b6:82:c2:f0:ac:e6: 1a:dc:36:66:c3:23:ae:99:2b:0a:5e:1d:5c:76:1f: e9:d6:7e:77:5d:82:c7:ee:47:4d:f9:b6:05:30:0e: 4b:f7:68:7a:f0:1b:92:f6:7c:5f:26:29:f9:c1:53: d3:e8:3e:cd:3c:11:85:fb:91:87:7b:a3:8e:17:c0: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:34:6B:70:99:02:1C:0E:25:CF:3E:D8:FF:75:84:23:4B:A0:2D X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ef:74:fb:41:61:83:9b:cd:87:82:c3:c7:35:1d:eb:a3:7a: b0:a9:53:03:a3:6d:a9:1a:3b:1e:89:71:4a:c6:65:ac:f3:ae: 5c:a0:08:18:2e:2f:58:b3:2d:e9:3e:77:4b:95:10:63:d6:d7: c1:0f:0a:d0:da:7d:98:a3:00:13:90:65:ba:bb:b9:00:09:5b: 85:d6:1d:9b:c5:f7:10:6a:ec:8f:42:94:df:ab:86:e0:48:71: 9f:86:bf:c5:fd:95:b6:4a:87:b0:70:80:df:dc:26:c6:11:0c: a3:ad:16:23:e4:10:45:0c:6d:b3:03:26:51:91:0d:af:b7:13: 1a:bc:39:d9:cc:92:cd:27:e3:31:08:f2:86:33:6b:1e:b0:06: 06:fa:3d:3c:00:f3:46:e8:63:24:46:78:59:20:47:b4:23:94: d8:aa:37:66:60:7f:a8:af:5e:c6:b7:ad:2c:8c:3c:e5:27:e1: 46:a9:38:4a:94:37:73:c0:eb:a3:91:16:72:bb:b6:61:c5:9f: 17:25:cb:32:73:0b:1e:09:b1:5f:5c:12:97:1d:dc:8a:fa:62: 6b:f4:9a:c9:9f:4e:31:79:eb:15:7f:35:16:c4:19:ed:e9:a8: d9:bb:20:55:af:8a:5e:9e:ef:6e:a3:2c:59:a5:59:96:14:b5: 2b:bc:22:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjYwNzI2MjIyOTI4WhcNMjYwODAyMjIyOTI4WjAYMRYwFAYD VQQDEw02YTY2OGE0OC1mOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzTd3WXiUQUfL/7LaX9eFWQx4Svj6v0H3QeSFMh+ylIB/q/VWnoFSlCWxCiF qNsOcp+NqaD5sLNB2TUPX0BrYh0blhxv5g+vAtqeEZnj3+5+eJQ1HWGczSo0DphZ 6mKMmm5wq9LkKnIRgStX96waVV4qVm/WddGmDRQ/1aMn+BA+N41FcxHJyXeB86VQ rdT2COxGBpq8B2VD+WYWpUJg7UlaiOFFZbGEYDpGrPv1hnRmd8eX9buh8qo8W+K2 gsLwrOYa3DZmwyOumSsKXh1cdh/p1n53XYLH7kdN+bYFMA5L92h68BuS9nxfJin5 wVPT6D7NPBGF+5GHe6OOF8DtAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE7NGtw mQIcDiXPPtj/dYQjS6AtMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr+90+0Fhg5vNh4LDxzUd66N6sKlTA6NtqRo7HolxSsZlrPOuXKAIGC4vWLMt 6T53S5UQY9bXwQ8K0Np9mKMAE5Bluru5AAlbhdYdm8X3EGrsj0KU36uG4Ehxn4a/ xf2VtkqHsHCA39wmxhEMo60WI+QQRQxtswMmUZENr7cTGrw52cySzSfjMQjyhjNr HrAGBvo9PADzRuhjJEZ4WSBHtCOU2Ko3ZmB/qK9exretLIw85SfhRqk4SpQ3c8Dr o5EWcru2YcWfFyXLMnMLHgmxX1wSlx3civpia/SayZ9OMXnrFX81FsQZ7emo2bsg Va+KXp7vbqMsWaVZlhS1K7wiOw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:18 2026 by rpki-client