$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft File: KHuwzWb71-W3qIumZ4kSTAsExXg.mft (raw, json) Hash identifier: A56GozcGz1EFKvgpcxm8M8YV/DDUDai6oLV3K1FKLgo= Subject key identifier: A2:AE:1A:57:4F:48:9C:86:C2:AD:21:C3:21:BC:95:65:79:96:2F:2B Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78 Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft Manifest number: 0C5A Signing time: Tue 18 Aug 2026 18:58:54 +0000 Manifest this update: Tue 18 Aug 2026 18:58:53 +0000 Manifest next update: Tue 25 Aug 2026 18:58:53 +0000 Files and hashes: 1: KHuwzWb71-W3qIumZ4kSTAsExXg.crl (hash: pPtU8qz9Vp7QAdkislS4leCKnpcZg+CsHkCKkRPB3RQ=) 2: 2BA212DC306D11EA81D19B38C4F9AE02.roa (hash: sXLJ43OFaVCL1SbiTyWS+wdz+d0djH0QqeNKRGNj+Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE25, serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578 Validity Not Before: Aug 18 18:58:53 2026 GMT Not After : Aug 25 18:58:53 2026 GMT Subject: CN=6a84ab6d-ed15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:d5:38:ec:d8:a2:f9:35:98:e0:25:a0:dc: ad:f6:8e:d1:fa:cf:1b:be:25:0a:25:2d:28:85:10: 77:1d:69:8b:71:4a:71:f5:e0:b3:bb:0c:8e:2d:5d: 01:32:25:03:b1:38:6f:3b:43:d4:ac:8a:bc:29:ae: c6:33:6c:fc:1c:fd:eb:9f:82:44:19:06:d1:77:69: 6c:89:e1:06:01:43:b1:4a:ba:a3:13:8e:d3:14:31: 11:92:e0:c3:63:c7:49:dc:51:19:3b:78:9d:8c:4f: d9:44:f8:07:9a:18:b4:93:2d:67:db:0a:58:c4:65: 25:e3:10:c9:3e:ae:60:b6:f5:79:a9:1c:d0:0d:52: df:c2:53:42:c1:53:10:06:6f:32:fc:81:14:91:c9: 70:11:d4:94:ec:cd:ef:06:f6:f6:80:79:a1:9a:58: 16:31:ce:87:04:90:92:02:79:9a:29:5c:f5:fb:cf: 53:46:a1:f3:9b:4e:41:13:8e:8f:43:9a:77:85:ad: 0f:3d:da:26:ef:01:58:de:59:66:41:b4:7f:19:7e: 9a:52:ed:bb:09:c7:7a:34:2c:67:c9:ff:49:14:45: 05:77:4a:24:26:d3:e1:9a:f0:55:f7:e6:b9:6a:d5: 14:1b:7e:a0:23:34:7b:73:12:f2:b7:67:ef:fd:87: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:1A:57:4F:48:9C:86:C2:AD:21:C3:21:BC:95:65:79:96:2F:2B X509v3 Authority Key Identifier: keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:87:ff:c0:73:0f:97:4d:be:09:80:41:08:d3:fc:c1:61:b0: 75:55:a3:af:0c:be:09:42:a4:de:60:c7:6e:73:25:ef:c0:c2: 28:35:e9:3c:6b:4b:af:01:91:25:1f:f3:b0:87:3b:1b:3b:e9: f1:b8:21:90:6f:8b:31:6a:0f:d3:57:ba:4e:98:66:db:f0:d9: 56:c1:3c:d5:3c:32:1f:d0:5a:b2:67:20:52:e5:e2:96:84:c9: 87:58:bc:6d:f0:1f:fd:bb:c2:18:f5:2f:1b:24:1a:dc:61:6b: e3:60:bd:70:d7:c2:3a:85:74:25:57:35:5f:26:69:70:67:02: 53:3b:41:67:66:a9:e2:cc:59:62:80:be:98:97:a3:e2:d4:af: db:de:a5:60:cf:ab:98:e4:8d:3d:87:91:0c:2f:6c:f8:12:2f: 6a:8d:9d:e2:aa:ea:b1:b2:17:51:1d:d3:fa:97:dc:d1:18:35: f0:1e:ef:52:b3:06:70:fd:60:77:78:5f:68:ec:92:ad:2e:ac: 9a:4e:d5:92:03:ad:22:01:7a:42:30:fe:e6:05:b3:ee:d0:af: e5:00:b5:87:bb:a1:1a:1a:ea:21:5f:9c:48:cb:33:90:6d:8d: f7:50:63:81:fd:9f:57:bd:04:f9:9f:d3:2f:07:0e:e2:f7:4d: e2:ac:eb:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMjUxMTAvBgNVBAUTKDI4N0JCMENENjZGQkQ3RTVCN0E4OEJBNjY3ODkxMjRD MEIwNEM1NzgwHhcNMjYwODE4MTg1ODUzWhcNMjYwODI1MTg1ODUzWjAYMRYwFAYD VQQDEw02YTg0YWI2ZC1lZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGbVOOzYovk1mOAloNyt9o7R+s8bviUKJS0ohRB3HWmLcUpx9eCzuwyOLV0B MiUDsThvO0PUrIq8Ka7GM2z8HP3rn4JEGQbRd2lsieEGAUOxSrqjE47TFDERkuDD Y8dJ3FEZO3idjE/ZRPgHmhi0ky1n2wpYxGUl4xDJPq5gtvV5qRzQDVLfwlNCwVMQ Bm8y/IEUkclwEdSU7M3vBvb2gHmhmlgWMc6HBJCSAnmaKVz1+89TRqHzm05BE46P Q5p3ha0PPdom7wFY3llmQbR/GX6aUu27Ccd6NCxnyf9JFEUFd0okJtPhmvBV9+a5 atUUG36gIzR7cxLyt2fv/Yec+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKuGldP SJyGwq0hwyG8lWV5li8rMB8GA1UdIwQYMBaAFCh7sM1m+9flt6iLpmeJEkwLBMV4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyNS82OEU1N0FFRTMw NjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEtVzNxSXVtWjRrU1RBc0V4 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIdXd6V2I3MS1XM3FJdW1aNGtTVEFzRXhYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUyNS82OEU1N0FFRTMwNjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEt VzNxSXVtWjRrU1RBc0V4WGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZof/wHMPl02+CYBBCNP8wWGwdVWjrwy+CUKk3mDHbnMl78DCKDXpPGtLrwGR JR/zsIc7Gzvp8bghkG+LMWoP01e6Tphm2/DZVsE81TwyH9BasmcgUuXiloTJh1i8 bfAf/bvCGPUvGyQa3GFr42C9cNfCOoV0JVc1XyZpcGcCUztBZ2ap4sxZYoC+mJej 4tSv296lYM+rmOSNPYeRDC9s+BIvao2d4qrqsbIXUR3T+pfc0Rg18B7vUrMGcP1g d3hfaOySrS6smk7VkgOtIgF6QjD+5gWz7tCv5QC1h7uhGhrqIV+cSMszkG2N91Bj gf2fV70E+Z/TLwcO4vdN4qzrfg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:41 2026 by rpki-client