$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json) Hash identifier: WnEMQR4g6ADGPU+UrY7q1csteSJpOLAzpj/nZMLGiTY= Subject key identifier: 65:40:DB:C5:58:3A:E4:AF:37:B3:9A:33:93:E3:9D:F7:86:BC:2C:33 Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft Manifest number: 0218 Signing time: Mon 27 Jul 2026 04:27:05 +0000 Manifest this update: Mon 27 Jul 2026 04:27:04 +0000 Manifest next update: Mon 03 Aug 2026 04:27:04 +0000 Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: eHNwCycKw1dQB4giw3+cMtc6Y6tdsfrz6AzFPOg+1C8=) 2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67 Validity Not Before: Jul 27 04:27:04 2026 GMT Not After : Aug 3 04:27:04 2026 GMT Subject: CN=6a66de19-7863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:a3:7f:1f:7b:d7:19:d7:2b:a6:84:71:b9: 7d:c9:01:28:01:03:4c:5f:1b:b7:fc:28:da:75:bf: b1:a5:9e:bb:c0:17:b7:d3:3d:7a:16:71:d2:3f:c0: fc:8a:46:5f:e9:50:77:4c:59:13:4e:21:2b:48:9b: 1a:b8:ea:c1:0f:b8:45:fa:5f:4b:59:1c:d6:65:45: 6a:10:80:d4:3e:41:09:29:83:c9:d6:6b:9d:5d:1f: c3:a8:b2:0f:58:f0:64:57:d1:5e:27:46:b0:20:50: 1d:9e:6a:ce:4e:ee:38:60:0c:03:00:fd:cb:14:cb: 13:14:65:6a:f8:e6:c2:25:c7:fd:b1:01:1f:dd:96: fa:0f:e5:ae:8a:3c:8c:6b:1f:5c:4f:87:da:c6:b8: 39:da:6c:4f:63:fa:0f:91:bf:dc:3b:f1:48:b0:57: d8:27:f2:fc:63:ee:ab:fb:8a:f3:03:bf:c4:2f:85: fe:39:e1:26:d9:72:88:8f:e5:24:c8:31:c6:f1:5b: a6:8f:4a:b3:48:3d:36:c0:ca:89:5a:a1:19:ae:32: d5:86:0f:81:00:16:29:ed:54:4e:c6:4d:0b:16:97: bd:73:ad:b0:44:5b:ad:20:cd:42:6e:91:e6:dd:fd: 6e:fe:bd:67:df:d9:e7:2b:b3:88:fd:f8:c6:55:af: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:40:DB:C5:58:3A:E4:AF:37:B3:9A:33:93:E3:9D:F7:86:BC:2C:33 X509v3 Authority Key Identifier: keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ab:0b:1e:ed:8d:6d:8c:c3:6e:73:11:c1:51:35:86:50:c2: 3e:68:a6:0c:52:09:71:8d:cc:16:a5:71:41:ec:c5:bb:48:ae: c3:76:9f:93:49:7f:cf:75:28:1b:ad:7f:53:c1:b4:06:b0:fe: ee:e4:b6:0f:49:98:54:7f:9d:5f:5e:28:be:9f:b1:25:ba:ad: 10:58:26:74:f4:ba:4c:b0:61:6f:52:bb:54:ec:e3:6f:7b:6f: 0f:83:79:49:59:3a:4e:03:e6:76:f7:03:ab:4d:a5:11:fc:cb: cc:46:32:d8:b8:69:83:5b:88:a5:39:aa:ab:df:18:34:d3:29: 86:d5:df:3e:f6:2b:08:d0:ef:ae:39:30:bc:c0:96:f8:35:8e: d2:8d:e5:51:92:cc:f5:12:e3:04:d2:19:fb:e7:c9:f3:59:23: 3d:25:c8:d6:d2:e3:a4:c4:86:6d:39:4b:9d:36:dd:12:53:6d: 90:80:1b:90:ee:4f:0a:6d:67:57:6e:b6:20:2f:d0:90:9a:88: 71:17:f4:51:f3:24:d1:cc:e4:8b:41:be:e3:8f:42:11:34:bc: fc:35:04:a9:6d:bd:be:59:22:88:a8:03:15:82:f7:b2:71:0f: 18:da:56:e8:2b:b2:a7:4a:0d:0d:ee:ee:32:12:4c:9f:9a:9f: e4:dd:9a:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2NzcxMTAvBgNVBAUTKDI4NzY4MjVGNzdDMjRBMTY3REM0MTIxNTM1MEY2ODg3 OTI5ODFBNjcwHhcNMjYwNzI3MDQyNzA0WhcNMjYwODAzMDQyNzA0WjAYMRYwFAYD VQQDEw02YTY2ZGUxOS03ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39qjfx971xnXK6aEcbl9yQEoAQNMXxu3/Cjadb+xpZ67wBe30z16FnHSP8D8 ikZf6VB3TFkTTiErSJsauOrBD7hF+l9LWRzWZUVqEIDUPkEJKYPJ1mudXR/DqLIP WPBkV9FeJ0awIFAdnmrOTu44YAwDAP3LFMsTFGVq+ObCJcf9sQEf3Zb6D+WuijyM ax9cT4faxrg52mxPY/oPkb/cO/FIsFfYJ/L8Y+6r+4rzA7/EL4X+OeEm2XKIj+Uk yDHG8Vumj0qzSD02wMqJWqEZrjLVhg+BABYp7VROxk0LFpe9c62wRFutIM1CbpHm 3f1u/r1n39nnK7OI/fjGVa9JUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVA28VY OuSvN7OaM5PjnfeGvCwzMB8GA1UdIwQYMBaAFCh2gl93wkoWfcQSFTUPaIeSmBpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY3Ny8wMjI3Rjc4NjU3 NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1NoWjl4QklWTlE5b2g1S1lH bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIYUNYM2ZDU2haOXhCSVZOUTlvaDVLWUdtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY3Ny8wMjI3Rjc4NjU3NzUxMUVFOTJBQ0E3NTlDNEY5QUUwMi9LSGFDWDNmQ1No Wjl4QklWTlE5b2g1S1lHbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcasLHu2NbYzDbnMRwVE1hlDCPmimDFIJcY3MFqVxQezFu0iuw3afk0l/z3Uo G61/U8G0BrD+7uS2D0mYVH+dX14ovp+xJbqtEFgmdPS6TLBhb1K7VOzjb3tvD4N5 SVk6TgPmdvcDq02lEfzLzEYy2Lhpg1uIpTmqq98YNNMphtXfPvYrCNDvrjkwvMCW +DWO0o3lUZLM9RLjBNIZ++fJ81kjPSXI1tLjpMSGbTlLnTbdElNtkIAbkO5PCm1n V262IC/QkJqIcRf0UfMk0czki0G+449CETS8/DUEqW29vlkiiKgDFYL3snEPGNpW 6Cuyp0oNDe7uMhJMn5qf5N2a5w== -----END CERTIFICATE-----Generated at Wed Jul 29 03:34:41 2026 by rpki-client