$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: owAfb+2azRJuFB5OheHgnt1E5/UIPbYlJX9GpysKbU8= Subject key identifier: 00:AC:00:C0:88:85:83:29:94:40:F1:62:6B:09:4E:A4:8C:BB:DE:7F Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0D90 Signing time: Thu 16 Apr 2026 20:17:01 +0000 Manifest this update: Thu 16 Apr 2026 20:17:01 +0000 Manifest next update: Thu 23 Apr 2026 20:17:01 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: oE/FArBW75yZ2o1X50RZsl4uOlcy3P/4U3V0aOIhCZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Apr 16 20:17:01 2026 GMT Not After : Apr 23 20:17:01 2026 GMT Subject: CN=69e143bd-cdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:00:ae:00:c8:35:f5:df:c7:3b:29:ca:f8: 9a:5e:de:ed:fc:09:b1:79:3d:e7:d5:f7:27:c3:92: b5:9a:1b:cd:1a:b8:fb:f1:43:4d:ac:82:c0:48:35: c3:b5:2f:5d:91:7e:ff:6d:3a:fd:6d:62:8d:ae:75: 7a:0d:56:02:db:ec:ec:2d:8d:1b:dd:9e:75:f1:a7: 81:17:b8:19:e5:4e:6e:1a:b6:13:19:a9:bf:83:02: 34:1a:5c:0c:4b:34:6f:d7:53:e5:1a:f1:d1:8b:26: d4:57:67:41:96:e4:a6:d0:8a:83:4b:a2:b1:1f:d9: c3:19:6b:8e:46:9c:13:78:0a:9a:04:20:6a:09:ef: b2:82:c0:a5:bd:b7:06:9d:12:5c:c5:8c:44:f7:5f: 28:a3:fa:c3:d3:a4:d3:cc:0f:ae:76:65:6b:2f:cf: 3f:db:b5:a1:4b:de:3d:31:ca:1a:85:cb:d8:9e:81: 06:62:8b:08:3c:76:49:fa:79:3d:01:bf:01:b5:ec: a4:cf:fb:ce:94:76:3c:21:5e:e7:9b:5a:5f:02:41: ff:75:2d:7e:93:75:a0:b0:3c:35:ab:5f:ad:a3:eb: 80:d6:0d:06:c6:e5:70:d1:04:de:8b:01:db:8a:28: 99:dd:b8:3a:79:ca:9a:de:81:31:5f:75:f7:14:e9: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AC:00:C0:88:85:83:29:94:40:F1:62:6B:09:4E:A4:8C:BB:DE:7F X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6d:e9:54:b6:c9:18:65:7a:47:de:5d:56:9d:23:16:8f:99: 50:ec:a7:d0:a2:41:0d:02:0a:5b:34:6e:0e:8e:e2:86:0c:3e: 72:06:86:f9:8d:01:cd:6c:c3:7f:0d:84:12:8c:8a:c0:91:1c: 0e:a2:47:a0:32:c3:ff:ee:f4:7d:36:a0:91:f6:91:09:57:f1: d9:a7:6d:94:01:3d:47:fc:bc:0a:1a:ff:fe:04:d9:54:88:8d: 5c:3a:a4:19:b0:2e:16:3f:e0:7b:18:63:9c:3c:6f:ec:8a:69: 64:0c:79:ee:5b:17:c0:d4:d7:1b:bc:10:cb:be:59:70:c3:1f: 5c:01:d1:7e:0e:0f:c4:e8:5b:86:9c:01:5a:cf:e6:bb:d1:ac: 48:8b:3b:d0:1d:3d:b3:44:02:6b:fc:1a:7f:b2:ba:bc:12:af: 19:ee:43:e7:ce:6b:93:da:3e:f3:c0:40:b1:5d:0e:b5:9e:f8: 29:d0:9e:56:ff:67:8b:1a:c4:1e:13:f9:10:3c:1e:31:88:5c: 87:55:5e:63:be:bf:c6:4c:f9:cf:36:9d:e0:74:f2:25:b3:17: a2:0e:c5:6e:c5:91:50:b4:4c:d5:6a:3b:8b:0b:b5:b3:80:6b: ec:64:15:76:bd:68:07:03:99:33:a3:71:2e:69:3a:1b:e2:29: 31:38:8f:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjYwNDE2MjAxNzAxWhcNMjYwNDIzMjAxNzAxWjAYMRYwFAYD VQQDEw02OWUxNDNiZC1jZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SAArgDINfXfxzspyviaXt7t/AmxeT3n1fcnw5K1mhvNGrj78UNNrILASDXD tS9dkX7/bTr9bWKNrnV6DVYC2+zsLY0b3Z518aeBF7gZ5U5uGrYTGam/gwI0GlwM SzRv11PlGvHRiybUV2dBluSm0IqDS6KxH9nDGWuORpwTeAqaBCBqCe+ygsClvbcG nRJcxYxE918oo/rD06TTzA+udmVrL88/27WhS949McoahcvYnoEGYosIPHZJ+nk9 Ab8Bteykz/vOlHY8IV7nm1pfAkH/dS1+k3WgsDw1q1+to+uA1g0GxuVw0QTeiwHb iiiZ3bg6ecqa3oExX3X3FOkcTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACsAMCI hYMplEDxYmsJTqSMu95/MB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkm3pVLbJGGV6R95dVp0jFo+ZUOyn0KJBDQIKWzRuDo7ihgw+cgaG+Y0BzWzD fw2EEoyKwJEcDqJHoDLD/+70fTagkfaRCVfx2adtlAE9R/y8Chr//gTZVIiNXDqk GbAuFj/gexhjnDxv7IppZAx57lsXwNTXG7wQy75ZcMMfXAHRfg4PxOhbhpwBWs/m u9GsSIs70B09s0QCa/waf7K6vBKvGe5D585rk9o+88BAsV0OtZ74KdCeVv9nixrE HhP5EDweMYhch1VeY76/xkz5zzad4HTyJbMXog7FbsWRULRM1Wo7iwu1s4Br7GQV dr1oBwOZM6NxLmk6G+IpMTiPpQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:08 2026 by rpki-client