$ rpki-client -vvvf rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft File: khonVBY1-CS-1xp55-gYNGVi0DA.mft (raw, json) Hash identifier: kS7rNemXd1iZYxg1pgPsjps53sIUS2qeJ1rC3RxeXy0= Subject key identifier: 16:95:DB:A6:7C:AD:2D:4A:E0:2F:53:5B:0F:3A:5E:09:A1:ED:61:F7 Authority key identifier: 92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 Certificate issuer: /CN=A91341E0/serialNumber=921A27541635F824BED71A79E7E818346562D030 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft Manifest number: 1B Signing time: Mon 21 Sep 2026 08:54:57 +0000 Manifest this update: Mon 21 Sep 2026 08:54:56 +0000 Manifest next update: Mon 28 Sep 2026 08:54:56 +0000 Files and hashes: 1: khonVBY1-CS-1xp55-gYNGVi0DA.crl (hash: DnESQBiXDUsA8UhYJj9Q6AbU64EFUyDA51SZ/iDv4CA=) 2: D4054B8A8F9611F1AF74EBB85B11F970.roa (hash: x8DWipUs4w9swCnDv8kVnSJ3LRGZsUJtbo3eh3gnAb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91341E0, serialNumber=921A27541635F824BED71A79E7E818346562D030 Validity Not Before: Sep 21 08:54:56 2026 GMT Not After : Sep 28 08:54:56 2026 GMT Subject: CN=6ab0f0e1-5f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:5b:6b:1f:6f:1c:79:dd:f6:30:d3:79:58: f5:4f:ed:4c:9a:1c:ac:4c:15:13:1f:e7:7d:c3:35: 86:1e:ea:7d:78:9e:4e:c3:a6:8f:ce:16:30:64:be: e9:ac:a5:c4:c5:8a:fb:7c:42:a7:65:19:44:42:1c: a2:49:52:ba:43:d4:93:82:a9:9a:aa:1a:71:6e:fa: 78:42:82:da:76:6e:3b:dd:b3:47:21:43:6a:de:a0: c9:77:bc:4c:79:48:3c:ba:14:42:9a:e4:76:58:4c: d9:fb:a7:12:d8:3a:df:4a:e4:38:5b:c0:0f:c9:83: bc:13:80:44:ef:50:bf:91:4c:26:f7:1c:d1:e4:93: 51:42:9f:73:e5:61:59:2e:40:9c:45:29:3d:ab:dd: e6:4e:a0:61:49:ee:d7:9d:2e:be:7d:45:f0:eb:64: 6b:29:7c:7a:ed:18:3f:ff:9d:f0:c8:6c:cb:d9:dd: da:92:af:29:5d:0d:d9:f9:aa:7a:e2:85:3d:3d:f8: 4a:91:71:1f:7f:de:5e:69:3c:71:79:49:9b:76:86: a6:ac:65:a8:b7:e8:bc:6b:a0:94:0d:3d:3d:ec:86: 80:26:74:7e:b0:82:a6:b9:e3:4f:ac:b6:b5:34:ae: dd:67:32:15:19:90:2f:57:e2:d6:e4:20:d4:bd:7b: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:DB:A6:7C:AD:2D:4A:E0:2F:53:5B:0F:3A:5E:09:A1:ED:61:F7 X509v3 Authority Key Identifier: keyid:92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b5:f5:d1:59:37:6c:5d:bc:22:11:6f:a2:83:81:29:c4:c7: 59:5d:a2:89:34:ce:a3:65:0e:4d:fa:0a:a5:d0:bc:9d:31:41: 83:d5:c6:8d:9b:54:11:01:a3:b5:b7:1a:c3:47:a6:93:9c:af: 5d:c4:49:d0:94:77:2a:79:aa:4a:d3:e2:f0:92:40:0a:ce:ce: 1f:59:c9:7c:87:3c:5b:d7:51:5f:49:54:fe:e5:8f:61:e3:88: fc:62:85:59:8c:c0:dd:3a:0a:46:85:1a:70:eb:62:c0:bd:5a: 56:08:72:7a:cc:1d:50:96:23:63:5a:c4:e7:28:1f:01:63:55: 27:74:1f:9a:82:3a:e6:ca:f9:df:95:1b:e3:74:98:66:81:6d: 56:df:76:d8:2e:de:63:62:92:9d:ad:c4:cc:9a:e1:6f:d7:c5: d2:db:c6:de:ae:61:07:ff:d0:c9:40:e5:07:49:81:be:b2:13: 39:72:a6:d7:f5:7e:65:ef:eb:0f:f2:23:14:65:6f:f8:16:29: dd:88:39:59:ea:dc:12:01:50:ad:f4:6b:95:8e:d2:16:99:e4: 65:81:56:55:3b:6d:92:00:a6:d1:7a:3f:39:83:c5:d5:0f:ac: 45:cc:7e:40:e3:65:2a:c3:7e:80:46:4d:4d:db:b3:9f:c6:10: 4b:53:bf:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDFFMDExMC8GA1UEBRMoOTIxQTI3NTQxNjM1RjgyNEJFRDcxQTc5RTdFODE4MzQ2 NTYyRDAzMDAeFw0yNjA5MjEwODU0NTZaFw0yNjA5MjgwODU0NTZaMBgxFjAUBgNV BAMTDTZhYjBmMGUxLTVmMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsAFtrH28ced32MNN5WPVP7UyaHKxMFRMf533DNYYe6n14nk7Dpo/OFjBkvums pcTFivt8QqdlGURCHKJJUrpD1JOCqZqqGnFu+nhCgtp2bjvds0chQ2reoMl3vEx5 SDy6FEKa5HZYTNn7pxLYOt9K5DhbwA/Jg7wTgETvUL+RTCb3HNHkk1FCn3PlYVku QJxFKT2r3eZOoGFJ7tedLr59RfDrZGspfHrtGD//nfDIbMvZ3dqSryldDdn5qnri hT09+EqRcR9/3l5pPHF5SZt2hqasZai36LxroJQNPT3shoAmdH6wgqa540+strU0 rt1nMhUZkC9X4tbkINS9e2A5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFpXbpnyt LUrgL1NbDzpeCaHtYfcwHwYDVR0jBBgwFoAUkhonVBY1+CS+1xp55+gYNGVi0DAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MUUwLzY3OTc2RTc2OEY5 NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNTLTF4cDU1LWdZTkdWaTBE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2hvblZCWTEtQ1MtMXhwNTUtZ1lOR1ZpMERBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MUUwLzY3OTc2RTc2OEY5NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNT LTF4cDU1LWdZTkdWaTBEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGtfXRWTdsXbwiEW+ig4EpxMdZXaKJNM6jZQ5N+gql0LydMUGD1caNm1QRAaO1 txrDR6aTnK9dxEnQlHcqeapK0+LwkkAKzs4fWcl8hzxb11FfSVT+5Y9h44j8YoVZ jMDdOgpGhRpw62LAvVpWCHJ6zB1QliNjWsTnKB8BY1UndB+agjrmyvnflRvjdJhm gW1W33bYLt5jYpKdrcTMmuFv18XS28bermEH/9DJQOUHSYG+shM5cqbX9X5l7+sP 8iMUZW/4FindiDlZ6twSAVCt9GuVjtIWmeRlgVZVO22SAKbRej85g8XVD6xFzH5A 42Uqw36ARk1N27OfxhBLU7/o -----END CERTIFICATE-----Generated at Mon Sep 21 17:53:38 2026 by rpki-client