$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: iELZEgHCaWPeh81xOqHv2MvNoQ2X2YdNIFcCt2RzKgc= Subject key identifier: 2F:37:5A:2B:04:92:DF:FA:E9:9C:0F:5B:81:D8:CE:C4:3E:7A:CA:81 Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 090C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0DF8 Signing time: Tue 28 Jul 2026 20:38:02 +0000 Manifest this update: Tue 28 Jul 2026 20:38:02 +0000 Manifest next update: Tue 04 Aug 2026 20:38:02 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: rzugBRcfYs/xwbXmkPVtqUqfnv2/s4eK3dyr5m3WZO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Jul 28 20:38:02 2026 GMT Not After : Aug 4 20:38:02 2026 GMT Subject: CN=6a69132a-06f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:ef:14:7c:de:e5:51:6b:e7:e2:84:6c:ae: f9:8b:af:95:e9:e6:e9:9a:7b:77:bd:b1:7d:f8:81: c0:7c:4f:c7:77:fc:5f:e2:a5:9c:27:e6:9e:3f:56: 21:46:de:3c:9b:4e:90:d4:09:8f:f7:b3:a3:58:cd: 9c:c2:ae:01:9c:7a:5e:c6:66:5b:17:50:b5:ab:03: 90:6f:73:84:08:62:a1:0f:53:dc:6b:56:15:29:03: 2e:dc:0b:a8:e7:2a:fd:c1:e5:86:6f:53:fb:5b:e1: da:50:8c:02:33:c7:30:eb:e1:ad:f9:b7:71:01:2d: cb:5d:59:90:4a:a7:0c:4f:54:fe:a1:99:6e:cd:d0: ed:04:69:0d:a7:05:84:88:8c:b6:af:cc:36:3d:02: 4f:c0:a5:bf:f3:2f:20:c5:fa:f4:a2:a2:ff:b6:6b: 83:2e:6f:4d:9d:7a:35:f2:9b:cc:24:32:82:62:96: ec:7d:6b:d5:b6:22:d4:10:da:54:2b:a6:e5:43:af: 4e:d7:5b:5a:35:82:2d:fc:05:4f:9d:e0:90:27:f6: 22:88:b1:5a:24:a2:8e:34:cb:4b:15:5b:d4:1d:2a: 25:23:eb:cd:a8:df:cb:cf:f4:a9:ed:ba:cf:ab:95: 5a:fd:48:bb:67:6c:75:a8:6f:df:88:7f:37:c2:e3: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:37:5A:2B:04:92:DF:FA:E9:9C:0F:5B:81:D8:CE:C4:3E:7A:CA:81 X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4e:31:6b:64:21:79:2e:f5:5e:4b:de:68:2b:af:fd:14:5f: da:85:c0:f5:92:e4:52:85:7e:84:88:fb:b6:32:01:47:45:7a: 9e:1e:8d:f7:d2:49:05:f2:68:8b:a5:82:24:d8:88:51:92:50: f3:a0:7f:7c:42:13:44:11:a8:a2:53:62:7b:e0:59:c2:55:74: 9d:f7:d3:73:87:28:c3:c1:07:33:b0:0a:41:9c:4d:1e:7c:a6: 49:dd:1d:cf:fd:66:1f:07:fe:e8:5f:09:90:d9:1f:e4:11:73: 80:a2:1e:58:49:03:3a:1f:bb:6d:3e:c0:4e:c9:b4:14:5c:9c: b6:01:8e:f9:00:f8:74:ba:f1:28:f9:ee:1f:d0:5c:60:db:81: 94:70:10:b9:9b:6d:e9:a2:6e:3a:cc:05:96:1a:12:65:6b:56: 8d:7b:26:b2:7a:d8:f4:79:6f:c3:c8:6a:44:fb:b6:92:79:3a: ab:41:7e:a1:f8:6e:39:20:7d:e8:0e:de:6d:8b:44:c0:12:ff: 3a:8a:95:8a:d7:21:d4:a5:83:6e:30:ae:6c:22:91:c5:8e:dc: 4a:c0:81:4a:5c:75:ee:58:06:ff:07:40:bb:6b:0d:cb:72:d6: bd:e2:db:39:6d:c8:fd:a0:e2:5a:3a:7f:7b:9d:56:2b:78:1c: 30:0c:d2:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjYwNzI4MjAzODAyWhcNMjYwODA0MjAzODAyWjAYMRYwFAYD VQQDEw02YTY5MTMyYS0wNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh47vFHze5VFr5+KEbK75i6+V6ebpmnt3vbF9+IHAfE/Hd/xf4qWcJ+aeP1Yh Rt48m06Q1AmP97OjWM2cwq4BnHpexmZbF1C1qwOQb3OECGKhD1Pca1YVKQMu3Auo 5yr9weWGb1P7W+HaUIwCM8cw6+Gt+bdxAS3LXVmQSqcMT1T+oZluzdDtBGkNpwWE iIy2r8w2PQJPwKW/8y8gxfr0oqL/tmuDLm9NnXo18pvMJDKCYpbsfWvVtiLUENpU K6blQ69O11taNYIt/AVPneCQJ/YiiLFaJKKONMtLFVvUHSolI+vNqN/Lz/Sp7brP q5Va/Ui7Z2x1qG/fiH83wuPR7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC83WisE kt/66ZwPW4HYzsQ+esqBMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGU4xa2QheS71XkveaCuv/RRf2oXA9ZLkUoV+hIj7tjIBR0V6nh6N99JJBfJo i6WCJNiIUZJQ86B/fEITRBGoolNie+BZwlV0nffTc4cow8EHM7AKQZxNHnymSd0d z/1mHwf+6F8JkNkf5BFzgKIeWEkDOh+7bT7ATsm0FFyctgGO+QD4dLrxKPnuH9Bc YNuBlHAQuZtt6aJuOswFlhoSZWtWjXsmsnrY9Hlvw8hqRPu2knk6q0F+ofhuOSB9 6A7ebYtEwBL/OoqVitch1KWDbjCubCKRxY7cSsCBSlx17lgG/wdAu2sNy3LWveLb OW3I/aDiWjp/e51WK3gcMAzSwA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:36:22 2026 by rpki-client