$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json) Hash identifier: mLhE1eAScNnYNdaA7K9+xNvMXDFT56JdV2u6xXtt/M8= Subject key identifier: 42:89:41:94:90:89:34:FA:D1:90:34:24:7F:2B:B9:94:A4:34:68:91 Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft Manifest number: 0236 Signing time: Wed 23 Sep 2026 02:27:44 +0000 Manifest this update: Wed 23 Sep 2026 02:27:44 +0000 Manifest next update: Wed 30 Sep 2026 02:27:44 +0000 Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: MAwj9IYRH553y/Uhsjsuq8AukJpgXL5UlqjNggmGyXw=) 2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67 Validity Not Before: Sep 23 02:27:44 2026 GMT Not After : Sep 30 02:27:44 2026 GMT Subject: CN=6ab33920-d1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:63:de:04:1c:a9:21:6d:74:eb:0f:7c:55: 09:ef:45:c8:31:4e:9d:43:1a:29:da:d2:dd:b2:0c: 10:e2:4f:7e:9d:6b:e1:3d:95:57:5b:09:63:89:2d: 50:6f:bd:b7:fa:a5:16:0b:3a:54:a2:da:27:09:bc: 30:ac:d9:bf:8d:5f:c7:f2:f9:ed:ed:e9:32:cc:28: 23:2a:43:5f:f8:0e:07:65:2a:bb:8a:2e:76:c2:71: e8:a7:fb:80:e0:6a:52:4d:59:a7:08:ef:cb:13:55: 87:5e:f0:0d:50:f7:db:4c:b4:1b:28:3c:57:96:1f: fa:fc:8c:f9:ad:bc:ca:a0:8f:80:ae:13:41:1e:f4: 30:ce:c9:e3:73:d6:66:16:0a:93:16:0f:3a:73:ec: 40:02:f4:81:30:d1:9f:c6:e5:16:e0:35:b2:bc:7d: 41:b8:21:63:7c:d5:d1:a5:97:6c:11:29:d1:b7:5f: 06:5b:2d:85:33:85:b0:b8:03:e9:77:e1:2e:28:4a: be:bd:e4:de:37:23:36:85:cb:01:7d:73:54:59:c8: 29:35:42:02:08:d3:37:31:cc:98:30:39:0c:b6:0c: b2:78:2a:b9:6d:ee:40:68:97:e8:7c:47:2c:7e:0c: 0e:7f:de:81:9a:1f:13:81:c1:b2:8f:0e:2e:35:07: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:41:94:90:89:34:FA:D1:90:34:24:7F:2B:B9:94:A4:34:68:91 X509v3 Authority Key Identifier: keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8f:25:fb:16:01:0c:39:60:0a:40:cd:83:b0:bf:14:d3:36: 87:fe:97:f4:5c:f3:e1:a9:a9:56:6a:1e:c2:df:bd:39:82:5e: 20:f9:cb:3c:38:3c:f3:6a:6e:83:ef:ef:cf:9b:00:5e:f6:be: cc:bd:56:f2:ec:1a:f2:96:4b:c3:b7:92:05:1c:b6:80:23:67: 3b:c1:6a:08:a3:dc:db:e8:98:10:b0:e8:77:ba:3b:ec:8b:aa: 93:1d:f8:9f:98:c1:31:89:b3:0e:e1:1e:88:0a:9a:33:99:86: 08:c4:59:15:6c:d4:a9:55:ac:17:d0:88:b2:c3:9f:fd:fa:73: b5:91:8d:00:60:14:97:a0:f0:1d:de:c6:09:9c:06:79:ae:23: 41:a6:d6:8b:7e:83:3e:e7:5b:07:a7:b6:c2:22:26:58:a9:9a: 59:9c:f9:65:22:f9:05:b8:ab:a5:0d:77:55:03:10:69:7e:37: 2e:78:94:24:8e:63:29:17:c0:51:c4:e4:14:3f:3d:08:cc:9d: a9:35:df:58:94:1c:eb:b8:32:25:49:48:5c:55:3c:69:f0:72: 37:dc:68:f3:62:83:a6:4e:3b:75:e7:9c:82:77:cb:de:e9:df: 66:68:ac:1e:0d:e0:ca:e0:93:6f:d7:8b:38:53:9b:18:1a:8f: 5c:73:e5:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2NzcxMTAvBgNVBAUTKDI4NzY4MjVGNzdDMjRBMTY3REM0MTIxNTM1MEY2ODg3 OTI5ODFBNjcwHhcNMjYwOTIzMDIyNzQ0WhcNMjYwOTMwMDIyNzQ0WjAYMRYwFAYD VQQDEw02YWIzMzkyMC1kMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5lj3gQcqSFtdOsPfFUJ70XIMU6dQxop2tLdsgwQ4k9+nWvhPZVXWwljiS1Q b723+qUWCzpUotonCbwwrNm/jV/H8vnt7ekyzCgjKkNf+A4HZSq7ii52wnHop/uA 4GpSTVmnCO/LE1WHXvANUPfbTLQbKDxXlh/6/Iz5rbzKoI+ArhNBHvQwzsnjc9Zm FgqTFg86c+xAAvSBMNGfxuUW4DWyvH1BuCFjfNXRpZdsESnRt18GWy2FM4WwuAPp d+EuKEq+veTeNyM2hcsBfXNUWcgpNUICCNM3McyYMDkMtgyyeCq5be5AaJfofEcs fgwOf96Bmh8TgcGyjw4uNQfm8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKJQZSQ iTT60ZA0JH8ruZSkNGiRMB8GA1UdIwQYMBaAFCh2gl93wkoWfcQSFTUPaIeSmBpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY3Ny8wMjI3Rjc4NjU3 NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1NoWjl4QklWTlE5b2g1S1lH bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIYUNYM2ZDU2haOXhCSVZOUTlvaDVLWUdtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY3Ny8wMjI3Rjc4NjU3NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1No Wjl4QklWTlE5b2g1S1lHbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR48l+xYBDDlgCkDNg7C/FNM2h/6X9Fzz4ampVmoewt+9OYJeIPnLPDg882pu g+/vz5sAXva+zL1W8uwa8pZLw7eSBRy2gCNnO8FqCKPc2+iYELDod7o77Iuqkx34 n5jBMYmzDuEeiAqaM5mGCMRZFWzUqVWsF9CIssOf/fpztZGNAGAUl6DwHd7GCZwG ea4jQabWi36DPudbB6e2wiImWKmaWZz5ZSL5BbirpQ13VQMQaX43LniUJI5jKRfA UcTkFD89CMydqTXfWJQc67gyJUlIXFU8afByN9xo82KDpk47deecgnfL3unfZmis Hg3gyuCTb9eLOFObGBqPXHPl3Q== -----END CERTIFICATE-----Generated at Wed Sep 23 06:42:59 2026 by rpki-client