$ rpki-client -vvf rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft File: khonVBY1-CS-1xp55-gYNGVi0DA.mft (raw, json) Hash identifier: oMf6FygOQLiih1eENz9w3ApPdD2TZbtCE/opZvQy0Yg= Subject key identifier: 11:DE:1E:2D:63:6E:D5:EA:2E:5D:28:04:1B:8E:9C:49:C1:E6:F1:88 Authority key identifier: 92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 Certificate issuer: /CN=A91341E0/serialNumber=921A27541635F824BED71A79E7E818346562D030 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft Manifest number: 0A Signing time: Wed 19 Aug 2026 09:54:03 +0000 Manifest this update: Wed 19 Aug 2026 09:54:02 +0000 Manifest next update: Wed 26 Aug 2026 09:54:02 +0000 Files and hashes: 1: khonVBY1-CS-1xp55-gYNGVi0DA.crl (hash: TwAXRJTdfkc7Uq2j108cPr+XFx64IcpaRaDHr2PbKJU=) 2: D4054B8A8F9611F1AF74EBB85B11F970.roa (hash: x8DWipUs4w9swCnDv8kVnSJ3LRGZsUJtbo3eh3gnAb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91341E0, serialNumber=921A27541635F824BED71A79E7E818346562D030 Validity Not Before: Aug 19 09:54:02 2026 GMT Not After : Aug 26 09:54:02 2026 GMT Subject: CN=6a857d3b-15e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:16:2d:96:82:0b:14:87:cb:98:6f:49:46: 97:23:c2:96:2d:60:8e:5b:d9:d3:d1:31:52:17:c5: 5e:01:f8:9b:96:62:65:f1:f7:18:c8:6a:4c:e1:82: a5:ef:34:1d:83:eb:ba:ea:97:07:cc:4a:f7:13:88: df:72:1d:a5:14:2d:a2:34:cf:e7:2f:ed:b0:40:c5: 3a:bc:80:77:a3:cb:78:33:1c:1e:8d:a8:42:18:92: c3:ff:8e:28:91:7e:b3:a9:75:17:17:91:80:31:60: ec:4a:58:0e:05:0e:11:7c:6c:3e:38:be:16:e4:18: 06:11:03:8c:76:c3:70:02:9f:0c:44:26:f3:8a:4a: a5:5e:4f:db:1c:16:bc:59:c3:f9:a0:d6:f9:c3:42: 3e:c8:c8:eb:93:7c:99:1c:85:84:60:e9:83:ae:64: ad:9b:93:da:1c:5f:df:75:c6:4a:35:6e:40:80:b2: 26:3b:b0:2b:b8:d2:85:59:f8:fe:b0:9d:a0:6a:3c: 8e:87:31:1d:73:ac:be:ae:8e:33:0c:b0:e1:61:57: c8:1e:95:0b:6b:e3:c0:ce:ba:4b:cf:90:74:e8:50: c5:35:06:ca:77:1e:2b:1e:92:cc:24:ec:43:25:e6: c7:6d:da:c4:13:12:5e:c8:bd:05:fb:db:fa:5d:fd: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DE:1E:2D:63:6E:D5:EA:2E:5D:28:04:1B:8E:9C:49:C1:E6:F1:88 X509v3 Authority Key Identifier: keyid:92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:c6:0c:dd:6b:2b:16:15:3a:fa:01:7a:b9:f6:91:cb:de: 3a:ab:10:18:4b:e0:de:90:3c:45:69:bb:69:b2:b5:ff:d2:d4: a5:08:0e:3f:a8:19:01:bd:a5:d6:53:7f:c1:14:40:4d:99:de: 89:4e:4b:43:8b:b1:73:a0:52:b2:52:d1:5e:5a:49:b4:e6:ac: 74:c1:8d:10:c0:a0:b9:94:96:64:03:53:e8:28:5b:d6:b5:f0: 46:d3:61:4d:be:00:86:b5:70:6f:d6:2c:13:37:a2:d9:ec:a7: c0:06:8d:47:25:f6:0e:ca:d0:4c:7f:dd:59:6b:f7:d6:6f:ec: 7a:11:e9:79:82:34:9b:d2:62:a4:e3:85:07:c7:67:00:49:f7: 8f:2a:70:cf:ca:5b:29:01:17:32:be:bb:6b:a2:49:cf:92:9c: 55:bc:4f:6c:ff:b4:45:f6:e1:c0:65:8e:20:2a:92:42:26:60: f8:3c:b3:36:60:4c:83:54:45:13:4d:47:3f:47:25:9f:f8:14: d0:1e:00:ca:88:bc:26:cc:ae:71:a8:53:1e:20:9b:d7:df:ee: 9b:68:dc:75:02:05:05:fe:4f:b9:6f:5e:76:52:47:8f:6a:3d: 46:84:55:40:1b:c9:b9:30:c1:c9:46:84:1e:ce:c0:ea:86:fe: e1:b3:1a:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDFFMDExMC8GA1UEBRMoOTIxQTI3NTQxNjM1RjgyNEJFRDcxQTc5RTdFODE4MzQ2 NTYyRDAzMDAeFw0yNjA4MTkwOTU0MDJaFw0yNjA4MjYwOTU0MDJaMBgxFjAUBgNV BAMTDTZhODU3ZDNiLTE1ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWUhYtloILFIfLmG9JRpcjwpYtYI5b2dPRMVIXxV4B+JuWYmXx9xjIakzhgqXv NB2D67rqlwfMSvcTiN9yHaUULaI0z+cv7bBAxTq8gHejy3gzHB6NqEIYksP/jiiR frOpdRcXkYAxYOxKWA4FDhF8bD44vhbkGAYRA4x2w3ACnwxEJvOKSqVeT9scFrxZ w/mg1vnDQj7IyOuTfJkchYRg6YOuZK2bk9ocX991xko1bkCAsiY7sCu40oVZ+P6w naBqPI6HMR1zrL6ujjMMsOFhV8gelQtr48DOukvPkHToUMU1Bsp3Hisekswk7EMl 5sdt2sQTEl7IvQX72/pd/SLfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEd4eLWNu 1eouXSgEG46cScHm8YgwHwYDVR0jBBgwFoAUkhonVBY1+CS+1xp55+gYNGVi0DAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MUUwLzY3OTc2RTc2OEY5 NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNTLTF4cDU1LWdZTkdWaTBE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2hvblZCWTEtQ1MtMXhwNTUtZ1lOR1ZpMERBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MUUwLzY3OTc2RTc2OEY5NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNT LTF4cDU1LWdZTkdWaTBEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+PMYM3WsrFhU6+gF6ufaRy946qxAYS+DekDxFabtpsrX/0tSlCA4/qBkBvaXW U3/BFEBNmd6JTktDi7FzoFKyUtFeWkm05qx0wY0QwKC5lJZkA1PoKFvWtfBG02FN vgCGtXBv1iwTN6LZ7KfABo1HJfYOytBMf91Za/fWb+x6Eel5gjSb0mKk44UHx2cA SfePKnDPylspARcyvrtroknPkpxVvE9s/7RF9uHAZY4gKpJCJmD4PLM2YEyDVEUT TUc/RyWf+BTQHgDKiLwmzK5xqFMeIJvX3+6baNx1AgUF/k+5b152UkePaj1GhFVA G8m5MMHJRoQezsDqhv7hsxpi -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:51 2026 by rpki-client