$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json) Hash identifier: j/nsb7L+pF6RLxcmY8mKEROC7sUqgaXfOH7r+aukiXE= Subject key identifier: 0E:23:CF:16:9F:27:21:52:BB:BE:30:7A:C7:D8:4B:07:79:CD:F4:2A Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft Manifest number: 0246 Signing time: Sat 03 Oct 2026 03:04:21 +0000 Manifest this update: Sat 03 Oct 2026 03:04:20 +0000 Manifest next update: Sat 10 Oct 2026 03:04:20 +0000 Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: LSiRxa1lRp0AL1WSdqcmJZH0RcHLptZL3M6hr2eW0hs=) 2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: Y/N7Od4khfLczJDMgbO0tCR9gSc5Ipt+5xzaIbpHVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Oct 3 03:04:20 2026 GMT Not After : Oct 10 03:04:20 2026 GMT Subject: CN=6ac070b5-7895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:49:7e:1e:cf:8d:2a:47:20:ef:bc:6d:89: 31:e7:f1:20:db:c9:17:54:12:1f:cf:a2:ba:f2:de: 96:9b:ec:80:7c:bf:7f:7c:7e:cb:9f:a3:e6:20:e0: bd:e8:fa:86:91:dc:23:eb:7a:c3:50:97:99:7c:2d: 59:1b:13:3a:2a:10:71:71:72:55:42:c2:f4:c8:91: 1b:26:ea:60:12:b6:3f:08:0e:ab:cc:87:ca:c9:c8: 54:26:05:d7:1d:22:7a:19:6a:c2:a3:3c:01:e5:41: 52:ff:1a:77:09:10:e9:42:7c:b4:98:9a:84:44:b5: 47:11:4b:e3:69:30:0e:08:fd:b6:37:af:4c:da:b5: 3b:25:b1:ee:c6:3a:fc:f7:f4:37:b2:92:8e:1e:81: 58:6c:2e:55:58:0b:ad:52:30:62:b6:19:73:a5:4a: 51:24:65:89:21:45:f6:34:c8:bc:1c:e7:cc:27:fa: c8:14:ab:86:7f:71:00:30:ee:76:92:13:92:59:c0: 32:ab:6b:89:8c:f7:45:8a:9a:e3:f8:f5:a7:b5:a6: 95:6b:e1:86:48:22:71:c9:4e:b5:9a:d1:7c:1d:1b: 59:23:13:b7:48:5a:1d:9c:5d:4a:aa:77:61:a9:6e: ca:6a:4a:9c:81:1d:38:29:d8:00:fa:29:a9:92:90: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:23:CF:16:9F:27:21:52:BB:BE:30:7A:C7:D8:4B:07:79:CD:F4:2A X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9a:ac:ca:5d:bf:39:90:31:92:e4:b5:e9:14:0e:59:9a:dc: c0:5e:6d:2c:33:b5:b5:d0:f5:5e:41:1e:df:03:04:80:32:e0: 80:f0:54:64:4f:f4:87:4d:c4:5b:ce:83:9d:23:d1:78:16:70: 1b:18:2b:56:6a:87:3e:d0:4f:b8:ac:4d:e5:0f:60:7a:17:1a: 23:65:86:01:8e:3b:7b:c9:de:06:15:5f:cd:01:11:19:65:82: b5:8e:5e:60:8a:6d:ce:9f:de:43:c0:cf:bd:df:26:76:57:b8: 01:e0:55:45:87:7a:d8:dc:35:f4:c8:38:58:75:0b:24:f8:f3: a0:ef:47:79:fd:70:5f:07:d2:5e:c3:5f:ff:c6:98:46:6f:96: 1c:b4:f7:e9:a9:b4:11:54:f9:4d:14:d0:db:1e:d4:0e:99:3d: 5a:ef:87:c2:86:4c:af:97:ff:ba:11:ac:cf:e1:59:1d:b2:83: 08:8a:f9:76:bb:f5:cf:31:7e:80:76:01:b9:84:04:d2:48:54: 91:88:25:10:43:7d:3c:23:f7:6c:f9:a5:1b:ea:3e:05:15:e7: 86:b0:16:c1:16:91:c6:fa:15:88:38:9f:2e:b1:44:64:a8:e8: 38:9b:da:9c:87:84:38:50:1f:f9:7f:bb:48:dc:31:75:17:50: 3f:da:95:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjYxMDAzMDMwNDIwWhcNMjYxMDEwMDMwNDIwWjAYMRYwFAYD VQQDEw02YWMwNzBiNS03ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmZJfh7PjSpHIO+8bYkx5/Eg28kXVBIfz6K68t6Wm+yAfL9/fH7Ln6PmIOC9 6PqGkdwj63rDUJeZfC1ZGxM6KhBxcXJVQsL0yJEbJupgErY/CA6rzIfKychUJgXX HSJ6GWrCozwB5UFS/xp3CRDpQny0mJqERLVHEUvjaTAOCP22N69M2rU7JbHuxjr8 9/Q3spKOHoFYbC5VWAutUjBithlzpUpRJGWJIUX2NMi8HOfMJ/rIFKuGf3EAMO52 khOSWcAyq2uJjPdFiprj+PWntaaVa+GGSCJxyU61mtF8HRtZIxO3SFodnF1Kqndh qW7KakqcgR04KdgA+impkpAmaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4jzxaf JyFSu74wesfYSwd5zfQqMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m c1ZGV0FORWdvMGNyNFV0ekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpqsyl2/OZAxkuS16RQOWZrcwF5tLDO1tdD1XkEe3wMEgDLggPBUZE/0h03E W86DnSPReBZwGxgrVmqHPtBPuKxN5Q9gehcaI2WGAY47e8neBhVfzQERGWWCtY5e YIptzp/eQ8DPvd8mdle4AeBVRYd62Nw19Mg4WHULJPjzoO9Hef1wXwfSXsNf/8aY Rm+WHLT36am0EVT5TRTQ2x7UDpk9Wu+HwoZMr5f/uhGsz+FZHbKDCIr5drv1zzF+ gHYBuYQE0khUkYglEEN9PCP3bPmlG+o+BRXnhrAWwRaRxvoViDifLrFEZKjoOJva nIeEOFAf+X+7SNwxdRdQP9qV7A== -----END CERTIFICATE-----Generated at Sun Oct 4 16:53:54 2026 by rpki-client