$ rpki-client -vvvf rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft File: khonVBY1-CS-1xp55-gYNGVi0DA.mft (raw, json) Hash identifier: 2+mZ8vfPBwMP0iSARMHs3T0XPF0ZBxKmqFHQeNtHEu4= Subject key identifier: C1:D1:C5:BA:88:E9:29:FC:C0:A1:63:70:DC:93:46:94:3A:15:90:52 Authority key identifier: 92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 Certificate issuer: /CN=A91341E0/serialNumber=921A27541635F824BED71A79E7E818346562D030 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft Manifest number: 22 Signing time: Mon 05 Oct 2026 09:20:30 +0000 Manifest this update: Mon 05 Oct 2026 09:20:29 +0000 Manifest next update: Mon 12 Oct 2026 09:20:29 +0000 Files and hashes: 1: khonVBY1-CS-1xp55-gYNGVi0DA.crl (hash: qQb/5JL4Fcf/HoTtq3nkPqnfN+1vMT6QVs3ulODp8sg=) 2: D4054B8A8F9611F1AF74EBB85B11F970.roa (hash: x8DWipUs4w9swCnDv8kVnSJ3LRGZsUJtbo3eh3gnAb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91341E0, serialNumber=921A27541635F824BED71A79E7E818346562D030 Validity Not Before: Oct 5 09:20:29 2026 GMT Not After : Oct 12 09:20:29 2026 GMT Subject: CN=6ac36bde-6013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:56:f4:2b:2d:d1:09:76:95:76:4a:32:53: e4:fb:95:52:b1:ce:72:5e:ae:f0:9a:91:58:f7:a7: c4:e9:c5:98:03:f9:7a:9e:79:73:20:7b:d2:91:53: 0a:97:a9:34:ef:96:d7:5a:c9:99:d7:70:de:da:65: 83:5d:eb:ac:3d:a4:a6:9a:b2:b5:32:fa:dc:15:80: 26:10:25:76:f4:be:3c:4b:6f:46:5e:eb:39:f3:1e: 02:f1:bf:29:de:da:01:a4:0a:f3:5d:17:8f:26:b6: 0b:bf:75:ac:6c:44:3f:74:aa:f2:63:7d:8d:7e:25: 5d:b6:43:13:5d:c5:23:e4:3d:1e:55:6e:91:8e:52: da:15:3c:75:87:e5:3e:00:99:46:4f:ef:4b:21:81: 22:24:72:66:74:fe:12:6b:c3:61:17:fb:04:ca:31: 04:91:d5:bd:8c:ec:f4:b0:24:1b:8f:c1:38:cd:1a: b9:75:26:2e:10:db:ee:fc:b6:c8:41:77:7f:e0:dc: 7a:9e:e1:6f:9b:ff:c2:09:9c:f6:47:5d:52:bc:a5: d6:5c:0b:f2:47:60:82:79:86:aa:2e:dc:70:2a:74: f9:a2:49:bd:78:3c:db:ac:cb:f8:49:e2:25:c3:82: 83:2c:c9:c2:4d:19:8b:73:f4:d7:d7:71:db:ec:fb: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:C5:BA:88:E9:29:FC:C0:A1:63:70:DC:93:46:94:3A:15:90:52 X509v3 Authority Key Identifier: keyid:92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:ff:1d:3c:e4:c4:1e:33:97:a1:65:fa:07:23:7d:e8:5d: 2f:4b:f1:54:e7:94:45:18:8a:67:7e:36:38:f6:b2:c3:ea:9c: e6:bf:0e:c4:95:ea:52:be:bc:b4:59:6f:58:22:ee:43:ef:46: 2a:7c:63:e7:f7:b1:6d:aa:58:64:6f:78:bb:a9:c8:2e:4e:6a: 3a:16:be:0b:70:70:70:4e:2d:65:28:57:1a:a0:c0:95:11:93: c3:be:7c:a7:19:e4:a8:ff:5c:7f:af:c8:af:bf:06:21:f2:c9: 1a:0a:74:81:f5:13:b9:04:24:dd:0f:ee:3d:e7:87:cc:47:a3: 88:12:36:76:25:7b:31:37:79:ac:f7:66:88:fb:89:b2:13:30: 73:41:76:cc:39:40:29:9d:25:9e:4f:07:ff:81:0d:3f:78:d5: 4d:93:46:22:76:80:78:4a:3e:1b:f0:ff:60:6d:ec:b2:74:2c: 56:a6:48:0a:02:1a:2c:8c:fe:9a:28:e0:75:71:1a:bd:69:86: 1b:7f:0b:b8:06:ae:32:38:f4:f9:be:48:18:d5:a7:c5:4d:4f: e2:34:fa:9b:8b:40:0c:fb:9b:c3:75:77:05:2c:c9:d1:bb:d8: 12:83:90:59:9e:98:b6:75:81:f7:1c:84:00:c2:c3:dd:d0:cf: a6:32:e0:09 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDFFMDExMC8GA1UEBRMoOTIxQTI3NTQxNjM1RjgyNEJFRDcxQTc5RTdFODE4MzQ2 NTYyRDAzMDAeFw0yNjEwMDUwOTIwMjlaFw0yNjEwMTIwOTIwMjlaMBgxFjAUBgNV BAMTDTZhYzM2YmRlLTYwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpr1b0Ky3RCXaVdkoyU+T7lVKxznJervCakVj3p8TpxZgD+XqeeXMge9KRUwqX qTTvltdayZnXcN7aZYNd66w9pKaasrUy+twVgCYQJXb0vjxLb0Ze6znzHgLxvyne 2gGkCvNdF48mtgu/daxsRD90qvJjfY1+JV22QxNdxSPkPR5VbpGOUtoVPHWH5T4A mUZP70shgSIkcmZ0/hJrw2EX+wTKMQSR1b2M7PSwJBuPwTjNGrl1Ji4Q2+78tshB d3/g3Hqe4W+b/8IJnPZHXVK8pdZcC/JHYIJ5hqou3HAqdPmiSb14PNusy/hJ4iXD goMsycJNGYtz9NfXcdvs+1RhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwdHFuojp KfzAoWNw3JNGlDoVkFIwHwYDVR0jBBgwFoAUkhonVBY1+CS+1xp55+gYNGVi0DAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MUUwLzY3OTc2RTc2OEY5 NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNTLTF4cDU1LWdZTkdWaTBE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2hvblZCWTEtQ1MtMXhwNTUtZ1lOR1ZpMERBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MUUwLzY3OTc2RTc2OEY5NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNT LTF4cDU1LWdZTkdWaTBEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA82P8dPOTEHjOXoWX6ByN96F0vS/FU55RFGIpnfjY49rLD6pzmvw7ElepSvry0 WW9YIu5D70YqfGPn97Ftqlhkb3i7qcguTmo6Fr4LcHBwTi1lKFcaoMCVEZPDvnyn GeSo/1x/r8ivvwYh8skaCnSB9RO5BCTdD+4954fMR6OIEjZ2JXsxN3ms92aI+4my EzBzQXbMOUApnSWeTwf/gQ0/eNVNk0YidoB4Sj4b8P9gbeyydCxWpkgKAhosjP6a KOB1cRq9aYYbfwu4Bq4yOPT5vkgY1afFTU/iNPqbi0AM+5vDdXcFLMnRu9gSg5BZ npi2dYH3HIQAwsPd0M+mMuAJ -----END CERTIFICATE-----Generated at Tue Oct 6 03:15:17 2026 by rpki-client