$ rpki-client -vvvf rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft File: khonVBY1-CS-1xp55-gYNGVi0DA.mft (raw, json) Hash identifier: zD63PpF2iE9pyZ/Ufrst2xZJRh3BHQa2udZcZWtHEtE= Subject key identifier: 33:07:AC:F6:98:7A:9D:6F:C4:F6:FF:DC:CC:78:A6:1A:F9:8F:BE:F2 Authority key identifier: 92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 Certificate issuer: /CN=A91341E0/serialNumber=921A27541635F824BED71A79E7E818346562D030 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft Manifest number: 1D Signing time: Fri 25 Sep 2026 09:05:00 +0000 Manifest this update: Fri 25 Sep 2026 09:05:00 +0000 Manifest next update: Fri 02 Oct 2026 09:05:00 +0000 Files and hashes: 1: khonVBY1-CS-1xp55-gYNGVi0DA.crl (hash: s8i3XKBN6Ey83I7HftyMvfLQXplg9cxKj0f7wy2hrdI=) 2: D4054B8A8F9611F1AF74EBB85B11F970.roa (hash: x8DWipUs4w9swCnDv8kVnSJ3LRGZsUJtbo3eh3gnAb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91341E0, serialNumber=921A27541635F824BED71A79E7E818346562D030 Validity Not Before: Sep 25 09:05:00 2026 GMT Not After : Oct 2 09:05:00 2026 GMT Subject: CN=6ab6393c-7119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:aa:53:8b:25:eb:e4:61:18:e7:6a:4a:e8: e8:26:ad:dc:5a:85:6f:e9:b0:46:94:5e:07:2e:61: b0:f6:d3:6f:cf:20:14:32:99:a0:16:22:51:44:d1: 5f:dd:a4:c4:a3:d4:0b:5e:3b:be:e3:f6:de:5d:f5: 04:f7:1f:e0:28:50:a4:4b:d3:87:e6:ec:be:29:01: 4e:ce:e1:1f:81:8e:ee:9d:38:9b:cc:e7:82:0d:b4: d2:05:8b:9d:82:92:67:6c:a6:70:95:6d:e6:54:ad: a2:d4:6f:08:b0:d3:65:a3:56:26:27:34:4f:d7:4f: ac:e8:53:9b:13:70:96:14:11:5e:32:f4:95:30:f5: 5f:41:4a:f3:29:7f:c6:e8:e8:d8:1f:98:60:85:77: c9:25:84:c6:dd:81:8b:26:ea:31:d0:f4:bd:84:e1: 8f:fb:03:f7:d4:73:e9:55:60:1d:c6:44:69:bc:a7: fb:74:d3:59:2a:78:ee:16:f9:c6:3f:a3:e0:5c:8e: 0e:e0:bb:b4:d3:34:53:44:52:17:f9:08:08:80:d2: cc:db:f6:1b:97:bd:49:d3:0f:ab:0e:f3:ba:c1:1f: b5:a2:bd:41:5e:da:a0:89:dc:9f:06:02:05:33:69: 5e:7a:16:c3:3b:c2:15:30:68:22:10:a1:38:9e:88: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:AC:F6:98:7A:9D:6F:C4:F6:FF:DC:CC:78:A6:1A:F9:8F:BE:F2 X509v3 Authority Key Identifier: keyid:92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:7a:e7:95:2d:71:45:de:50:80:1d:ef:94:8b:c3:1a:c4: fb:3e:54:f0:73:2a:e1:15:b7:a1:1b:9a:71:ce:c5:ed:05:26: 3f:f6:80:02:61:8d:a9:99:4e:2c:29:75:d6:37:f8:9d:67:d7: fd:04:3b:4c:be:0a:72:46:72:a0:28:e6:e1:7c:33:28:47:82: 3f:22:23:0d:2b:15:bf:40:6c:68:d5:0a:f4:91:e5:3e:ad:05: 40:2a:ae:a9:71:3d:8d:82:b8:60:93:b2:37:76:6e:05:0d:4b: 50:d1:d3:50:13:8c:66:5e:97:3d:70:4d:b3:03:05:e2:cc:4d: 27:b0:e8:a4:38:b7:39:4d:db:b5:fb:e1:fb:ff:0a:9d:4b:e1: 5f:57:20:85:bb:c6:97:28:26:7c:7d:ee:08:33:c5:e3:45:2e: e6:12:0f:a4:bb:fc:ae:47:b4:48:b3:33:0d:49:f8:b6:38:e4: e9:32:26:85:b4:c3:af:19:1b:b0:c8:6c:49:cc:50:ec:54:b0: 96:1d:5d:a0:14:a9:66:35:c6:66:91:fb:4a:12:5d:c3:7d:d3: 65:89:eb:3f:f2:85:1e:b1:cc:d7:fd:28:66:4a:28:8b:35:8a: 04:fd:90:40:67:b0:fc:d3:43:39:02:5e:12:b7:97:1e:a7:96: 2f:70:9d:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDFFMDExMC8GA1UEBRMoOTIxQTI3NTQxNjM1RjgyNEJFRDcxQTc5RTdFODE4MzQ2 NTYyRDAzMDAeFw0yNjA5MjUwOTA1MDBaFw0yNjEwMDIwOTA1MDBaMBgxFjAUBgNV BAMTDTZhYjYzOTNjLTcxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIeapTiyXr5GEY52pK6OgmrdxahW/psEaUXgcuYbD202/PIBQymaAWIlFE0V/d pMSj1AteO77j9t5d9QT3H+AoUKRL04fm7L4pAU7O4R+Bju6dOJvM54INtNIFi52C kmdspnCVbeZUraLUbwiw02WjViYnNE/XT6zoU5sTcJYUEV4y9JUw9V9BSvMpf8bo 6NgfmGCFd8klhMbdgYsm6jHQ9L2E4Y/7A/fUc+lVYB3GRGm8p/t001kqeO4W+cY/ o+Bcjg7gu7TTNFNEUhf5CAiA0szb9huXvUnTD6sO87rBH7WivUFe2qCJ3J8GAgUz aV56FsM7whUwaCIQoTieiPUtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMwes9ph6 nW/E9v/czHimGvmPvvIwHwYDVR0jBBgwFoAUkhonVBY1+CS+1xp55+gYNGVi0DAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MUUwLzY3OTc2RTc2OEY5 NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNTLTF4cDU1LWdZTkdWaTBE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2hvblZCWTEtQ1MtMXhwNTUtZ1lOR1ZpMERBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MUUwLzY3OTc2RTc2OEY5NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNT LTF4cDU1LWdZTkdWaTBEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSTnrnlS1xRd5QgB3vlIvDGsT7PlTwcyrhFbehG5pxzsXtBSY/9oACYY2pmU4s KXXWN/idZ9f9BDtMvgpyRnKgKObhfDMoR4I/IiMNKxW/QGxo1Qr0keU+rQVAKq6p cT2Ngrhgk7I3dm4FDUtQ0dNQE4xmXpc9cE2zAwXizE0nsOikOLc5Tdu1++H7/wqd S+FfVyCFu8aXKCZ8fe4IM8XjRS7mEg+ku/yuR7RIszMNSfi2OOTpMiaFtMOvGRuw yGxJzFDsVLCWHV2gFKlmNcZmkftKEl3DfdNlies/8oUesczX/ShmSiiLNYoE/ZBA Z7D800M5Al4St5cep5YvcJ0g -----END CERTIFICATE-----Generated at Sat Sep 26 12:29:17 2026 by rpki-client