$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: KljpOi40IdTa9naQ5Qj000bwDMEgFW7S67rvOKUwWdo= Subject key identifier: A6:D4:3C:1C:BA:6D:03:83:3E:81:EC:37:F1:69:3F:4E:FB:DB:26:4B Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0DF2 Signing time: Wed 22 Jul 2026 20:44:09 +0000 Manifest this update: Wed 22 Jul 2026 20:44:08 +0000 Manifest next update: Wed 29 Jul 2026 20:44:08 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: HthfDzuRXk4YdIwWzzk/l+mwSxzbSxTXk3sWImf+g94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Jul 22 20:44:08 2026 GMT Not After : Jul 29 20:44:08 2026 GMT Subject: CN=6a612b99-a731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:70:34:7f:34:ca:7a:1d:20:21:83:10:ef: f5:b2:37:c1:5d:b8:9c:39:b7:b0:4f:fc:d0:d6:cb: d4:9c:a6:33:f6:10:08:99:c2:7e:2f:b5:59:1b:66: 0b:9b:b8:0e:e7:19:4a:db:35:0f:d4:2e:30:05:e9: 49:e1:ec:3b:93:7a:25:f4:07:b4:87:10:b2:c0:0d: e6:56:16:4d:b6:ed:3e:59:1f:8d:af:0e:97:b7:d2: 79:ac:58:ed:9f:4c:20:f4:bd:7f:0e:55:9e:9c:d1: 19:21:ce:ac:82:be:ec:19:40:00:53:85:6f:5c:ac: cc:9a:40:31:f8:4c:8d:c0:32:45:04:1a:27:ab:54: 9b:68:54:2d:e8:0a:3c:2a:16:1f:6f:8a:5e:3c:b5: 97:a1:cf:15:1b:85:f9:b0:70:8a:9e:2d:cf:e3:fc: f9:91:fc:d6:05:81:51:3b:39:cf:11:fb:64:80:b3: 14:e8:ba:61:62:ad:3c:50:30:2d:99:1b:8a:9c:79: 25:4e:35:83:c5:11:6b:e9:26:cc:82:ef:a1:c1:90: 9b:e7:dd:69:19:b9:e6:1f:71:cb:d2:23:21:30:ff: 41:92:ce:c1:a1:48:de:9f:83:79:51:90:21:20:50: 91:3b:a2:25:03:87:f9:e2:ab:4b:35:ee:22:48:cd: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:3C:1C:BA:6D:03:83:3E:81:EC:37:F1:69:3F:4E:FB:DB:26:4B X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:96:ce:f2:6d:70:90:97:96:aa:04:6d:2a:fe:2f:eb:e7:db: 16:0e:4f:32:a1:86:eb:c3:21:d7:6f:de:c1:48:26:a8:dc:91: d8:80:0e:14:11:4b:ce:21:31:ce:36:ac:07:ad:9c:be:81:0b: d2:31:52:14:f4:a5:84:54:f2:e4:67:0b:88:c0:cf:e1:6d:5d: 7d:aa:f7:3f:39:5f:c3:c0:cd:a8:1a:20:b6:cd:dc:b3:67:54: ab:a7:ab:dc:fa:37:3c:42:03:28:b4:6f:02:87:5c:b5:97:cb: 75:ba:8f:8c:0f:0a:c4:5b:aa:6a:d5:39:04:42:55:13:a9:e7: 0e:a5:fa:f2:74:55:7b:58:36:44:a9:3e:f2:7e:fa:e9:94:c6: 50:a6:4b:db:65:31:b0:d6:b5:e2:dc:e4:bf:ca:3b:b8:5c:1b: 2e:05:22:85:8c:26:c0:1f:61:7f:e2:29:d1:c4:94:c4:ed:15: d2:32:29:8a:ab:4f:ce:be:64:25:a6:5c:a4:d9:54:ad:30:f7: 89:56:e9:83:a9:27:48:c8:c7:d7:c8:ef:12:39:48:67:0b:d8: bd:5d:75:3a:bc:6b:19:b0:22:85:0f:05:e1:41:06:3e:70:22: 07:10:a6:1b:90:32:0d:2c:ff:cc:21:3c:b4:0c:8c:a0:db:be: c8:63:d2:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjYwNzIyMjA0NDA4WhcNMjYwNzI5MjA0NDA4WjAYMRYwFAYD VQQDEw02YTYxMmI5OS1hNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAizVwNH80ynodICGDEO/1sjfBXbicObewT/zQ1svUnKYz9hAImcJ+L7VZG2YL m7gO5xlK2zUP1C4wBelJ4ew7k3ol9Ae0hxCywA3mVhZNtu0+WR+Nrw6Xt9J5rFjt n0wg9L1/DlWenNEZIc6sgr7sGUAAU4VvXKzMmkAx+EyNwDJFBBonq1SbaFQt6Ao8 KhYfb4pePLWXoc8VG4X5sHCKni3P4/z5kfzWBYFROznPEftkgLMU6LphYq08UDAt mRuKnHklTjWDxRFr6SbMgu+hwZCb591pGbnmH3HL0iMhMP9Bks7BoUjen4N5UZAh IFCRO6IlA4f54qtLNe4iSM3NjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbUPBy6 bQODPoHsN/FpP0772yZLMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWZbO8m1wkJeWqgRtKv4v6+fbFg5PMqGG68Mh12/ewUgmqNyR2IAOFBFLziEx zjasB62cvoEL0jFSFPSlhFTy5GcLiMDP4W1dfar3Pzlfw8DNqBogts3cs2dUq6er 3Po3PEIDKLRvAodctZfLdbqPjA8KxFuqatU5BEJVE6nnDqX68nRVe1g2RKk+8n76 6ZTGUKZL22UxsNa14tzkv8o7uFwbLgUihYwmwB9hf+Ip0cSUxO0V0jIpiqtPzr5k JaZcpNlUrTD3iVbpg6knSMjH18jvEjlIZwvYvV11OrxrGbAihQ8F4UEGPnAiBxCm G5AyDSz/zCE8tAyMoNu+yGPSIg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:12:02 2026 by rpki-client