$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: okIrlvzSBZElW/Mu8DrD9x/I7EEwk+I2Y4DmWLLIzjI= Subject key identifier: EC:B4:9B:78:25:EC:9C:31:67:CF:67:78:4A:6F:1F:74:A3:AC:7D:C6 Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0E3F Signing time: Fri 02 Oct 2026 20:27:34 +0000 Manifest this update: Fri 02 Oct 2026 20:27:33 +0000 Manifest next update: Fri 09 Oct 2026 20:27:33 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: ylef7C8WS6p+PpkXvsNWPnHxRu+6jjAhNsSO3G85PLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Oct 2 20:27:33 2026 GMT Not After : Oct 9 20:27:33 2026 GMT Subject: CN=6ac013b5-5ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:49:05:c2:0a:2c:f0:d8:ea:a4:5c:46:a6: b7:95:30:64:a4:4d:ca:f7:54:28:7b:de:c4:83:21: 0d:05:bd:78:7f:ad:ca:4f:0c:0a:33:51:7d:e5:f1: cd:14:8c:81:81:59:53:78:d8:dd:80:ef:7e:20:7a: 66:e8:b3:5d:b8:f0:c8:99:a5:8e:74:a0:07:7e:fc: 27:3f:45:38:3b:75:ff:11:f0:84:62:6e:4c:2e:53: 69:82:69:38:98:fa:6c:a9:56:3a:d4:5a:52:02:d3: ae:14:19:d5:d8:80:5a:e9:be:30:16:9f:d9:9b:b2: 67:23:45:fb:8d:41:18:92:2d:25:7e:73:dc:1a:07: 43:88:16:b0:b6:67:1b:b3:28:00:8c:15:4e:94:00: 0e:78:99:f4:3d:3b:45:df:92:6c:06:4d:8f:2a:78: bf:89:aa:4b:06:6c:5f:e2:23:e0:08:91:f7:12:eb: d1:de:cf:e9:ba:f7:8f:8a:7b:89:44:93:c0:6b:fe: 37:9e:5a:8c:71:08:ff:c8:10:5f:c4:a7:ce:35:69: 1f:a4:e9:c8:f9:f1:07:43:a2:7d:96:83:46:65:ba: 02:61:53:c3:65:e9:7a:0a:4d:1e:1a:09:5b:6f:89: b9:56:7e:2b:99:0b:a9:54:d0:36:44:89:6a:81:d9: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B4:9B:78:25:EC:9C:31:67:CF:67:78:4A:6F:1F:74:A3:AC:7D:C6 X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:60:17:8e:53:52:5f:fa:55:af:a0:80:40:20:cd:a5:89: f0:36:40:99:48:e5:f8:2d:8d:77:fd:24:8d:18:ea:1e:b0:78: 02:7c:74:30:05:49:3f:d3:cd:19:bd:f6:a5:fc:3e:06:93:2a: 18:ec:c8:a2:2c:c1:4f:99:ae:68:b8:9d:0a:5f:3f:d5:6c:b8: 8c:09:84:91:75:f8:b5:28:59:39:63:60:e1:7a:54:8a:92:61: a5:95:2c:e3:05:d6:d9:ff:bb:ce:55:2d:92:ef:e6:48:73:b2: 97:0f:60:4b:d3:6c:59:82:c8:89:0a:a5:e0:3d:be:99:06:d6: 2b:6e:9b:c9:88:63:6a:32:3b:24:30:29:f0:3f:c8:30:a8:34: 43:3b:e8:93:5d:d4:d6:db:87:c3:ea:26:67:00:cf:c2:aa:0f: 00:c0:72:bc:e4:0c:61:d9:5b:9a:78:99:58:dd:c8:fa:43:a6: fd:ab:bf:9d:44:4c:77:31:c8:c9:a3:ed:7a:cf:58:4d:3f:5a: 9f:7e:67:d0:63:d8:99:21:00:f7:b2:e5:53:06:02:66:91:1c: 38:2f:2f:d0:2a:3f:41:6b:f7:0e:0c:56:07:55:8f:17:92:46: 86:63:42:58:d9:d6:43:d9:96:e6:15:12:9b:bd:47:f5:32:e8: 93:8a:57:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjYxMDAyMjAyNzMzWhcNMjYxMDA5MjAyNzMzWjAYMRYwFAYD VQQDEw02YWMwMTNiNS01Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryVJBcIKLPDY6qRcRqa3lTBkpE3K91Qoe97EgyENBb14f63KTwwKM1F95fHN FIyBgVlTeNjdgO9+IHpm6LNduPDImaWOdKAHfvwnP0U4O3X/EfCEYm5MLlNpgmk4 mPpsqVY61FpSAtOuFBnV2IBa6b4wFp/Zm7JnI0X7jUEYki0lfnPcGgdDiBawtmcb sygAjBVOlAAOeJn0PTtF35JsBk2PKni/iapLBmxf4iPgCJH3EuvR3s/puvePinuJ RJPAa/43nlqMcQj/yBBfxKfONWkfpOnI+fEHQ6J9loNGZboCYVPDZel6Ck0eGglb b4m5Vn4rmQupVNA2RIlqgdkx+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy0m3gl 7JwxZ89neEpvH3SjrH3GMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAKJgF45TUl/6Va+ggEAgzaWJ8DZAmUjl+C2Nd/0kjRjqHrB4Anx0MAVJP9PN Gb32pfw+BpMqGOzIoizBT5muaLidCl8/1Wy4jAmEkXX4tShZOWNg4XpUipJhpZUs 4wXW2f+7zlUtku/mSHOylw9gS9NsWYLIiQql4D2+mQbWK26byYhjajI7JDAp8D/I MKg0Qzvok13U1tuHw+omZwDPwqoPAMByvOQMYdlbmniZWN3I+kOm/au/nURMdzHI yaPtes9YTT9an35n0GPYmSEA97LlUwYCZpEcOC8v0Co/QWv3DgxWB1WPF5JGhmNC WNnWQ9mW5hUSm71H9TLok4pXVA== -----END CERTIFICATE-----Generated at Sun Oct 4 20:02:15 2026 by rpki-client