$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: 4w49bz8E3PXKVZNr6k1poikBGCLZyWDlvq4Zus7HK2k= Subject key identifier: BA:DA:5F:EC:76:20:72:0E:24:00:6E:1C:60:38:FA:E8:C5:C0:1A:FF Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0D5D Signing time: Sat 28 Feb 2026 20:45:04 +0000 Manifest this update: Sat 28 Feb 2026 20:45:03 +0000 Manifest next update: Sat 07 Mar 2026 20:45:03 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: CpzI/DFbO/X7NM9QcOA7oI5JXPHzblcaCBs2e+r5Fw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: Feb 28 20:45:03 2026 GMT Not After : Mar 7 20:45:03 2026 GMT Subject: CN=69a353d0-56b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:9a:b5:c6:59:3f:26:21:d8:04:77:15:50: 3a:13:e2:90:49:28:d6:de:2f:7b:a3:f7:33:4e:3e: a8:25:49:59:9b:3e:d5:de:28:ab:64:6b:18:df:83: 7b:c9:b4:a8:22:26:b9:b2:54:d1:9d:54:2a:7e:33: 92:f8:a3:c9:91:44:af:f3:49:6a:41:26:c8:85:ee: 59:4e:77:53:75:2f:bb:b3:ef:b8:30:f7:e3:2b:de: 39:84:7b:be:e5:ed:23:4c:c0:92:62:b8:79:55:2f: 8d:0b:aa:ab:02:3f:11:1d:1a:1c:49:a6:85:9b:f6: 02:c2:e5:a9:8c:47:64:01:eb:6a:73:30:1a:ce:eb: 65:be:99:4c:d4:47:09:84:a6:20:bd:17:6c:6b:9b: b9:55:81:d9:58:dd:be:94:eb:ab:89:29:4d:4b:c2: ff:4e:e6:ae:ad:6f:a7:fe:92:29:81:94:b0:e1:96: 77:27:80:92:42:dd:91:43:a5:cb:f7:0a:af:1e:4d: 52:a2:c7:d8:81:fb:96:70:22:91:2a:59:52:6b:c6: 2d:1e:a6:c3:60:41:c1:67:3d:3d:cd:d7:a6:e5:da: 08:8e:42:f3:b1:55:eb:ca:c4:f4:0c:20:ee:fa:21: 74:86:b9:c3:45:0d:a9:f3:d6:93:25:d1:7c:e5:3e: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:5F:EC:76:20:72:0E:24:00:6E:1C:60:38:FA:E8:C5:C0:1A:FF X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c0:10:c0:29:41:08:19:ed:10:37:05:4f:b2:11:11:07:76: 26:85:5f:af:87:dc:ee:d5:0e:65:29:0b:1f:ef:12:be:95:8e: e0:71:20:2a:0f:43:76:4e:5b:0b:70:06:2b:68:3d:a1:bc:56: 4b:86:6d:f9:e3:4d:91:48:32:1d:78:8f:b5:78:39:00:ad:79: b9:a8:76:ff:5d:5f:5d:ee:44:28:a2:72:5c:31:19:45:03:08: 4f:db:25:64:c0:c7:e4:4c:cd:b6:6e:75:bf:14:17:40:01:ec: 53:c6:ae:2d:2b:39:ce:e7:97:f5:8f:89:60:bd:6f:a2:42:ec: fb:c6:5b:13:f6:7c:2b:14:26:01:49:58:5c:cb:cd:d1:74:cf: 3a:7a:40:72:19:f7:f9:f4:c5:6d:3a:9b:81:70:e0:54:a4:2a: b2:0c:d6:ac:66:57:f0:02:1f:8e:9d:ab:c2:8e:53:28:01:4b: 51:b1:b9:d2:fd:dc:33:7e:d4:88:ea:ce:fe:ef:97:d1:a9:b0: 20:fc:d7:9f:dc:d9:6c:6d:1f:5c:65:88:5f:f4:46:8c:fa:0b: 7f:6c:ce:59:e2:70:bb:50:44:68:d4:59:a9:48:ac:14:b8:32: f0:30:00:73:29:ea:a5:0d:d1:bd:b1:ac:ae:51:5a:20:54:1d: ad:26:65:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjYwMjI4MjA0NTAzWhcNMjYwMzA3MjA0NTAzWjAYMRYwFAYD VQQDDA02OWEzNTNkMC01NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EqatcZZPyYh2AR3FVA6E+KQSSjW3i97o/czTj6oJUlZmz7V3iirZGsY34N7 ybSoIia5slTRnVQqfjOS+KPJkUSv80lqQSbIhe5ZTndTdS+7s++4MPfjK945hHu+ 5e0jTMCSYrh5VS+NC6qrAj8RHRocSaaFm/YCwuWpjEdkAetqczAazutlvplM1EcJ hKYgvRdsa5u5VYHZWN2+lOuriSlNS8L/TuaurW+n/pIpgZSw4ZZ3J4CSQt2RQ6XL 9wqvHk1SosfYgfuWcCKRKllSa8YtHqbDYEHBZz09zdem5doIjkLzsVXrysT0DCDu +iF0hrnDRQ2p89aTJdF85T72AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLraX+x2 IHIOJABuHGA4+ujFwBr/MB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG8AQwClBCBntEDcFT7IREQd2JoVfr4fc7tUOZSkLH+8SvpWO4HEgKg9Ddk5b C3AGK2g9obxWS4Zt+eNNkUgyHXiPtXg5AK15uah2/11fXe5EKKJyXDEZRQMIT9sl ZMDH5EzNtm51vxQXQAHsU8auLSs5zueX9Y+JYL1vokLs+8ZbE/Z8KxQmAUlYXMvN 0XTPOnpAchn3+fTFbTqbgXDgVKQqsgzWrGZX8AIfjp2rwo5TKAFLUbG50v3cM37U iOrO/u+X0amwIPzXn9zZbG0fXGWIX/RGjPoLf2zOWeJwu1BEaNRZqUisFLgy8DAA cynqpQ3RvbGsrlFaIFQdrSZlJw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:41 2026 by rpki-client