$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json) Hash identifier: Dtn8MgPutQBmmy3GkfddozH3YUDJ4UqOxr3TNlsXh78= Subject key identifier: 89:74:47:B4:31:11:B3:9E:A1:62:27:FC:D5:92:B5:EC:13:11:A6:FE Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft Manifest number: 0226 Signing time: Sat 01 Aug 2026 04:12:36 +0000 Manifest this update: Sat 01 Aug 2026 04:12:35 +0000 Manifest next update: Sat 08 Aug 2026 04:12:35 +0000 Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: uDuqIxXEWw06uoI8BbUwMT+YgQ4m6PCXusi+JXwBsoU=) 2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: Y/N7Od4khfLczJDMgbO0tCR9gSc5Ipt+5xzaIbpHVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Aug 2026 04:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Aug 1 04:12:35 2026 GMT Not After : Aug 8 04:12:35 2026 GMT Subject: CN=6a6d7233-7580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:dd:b1:9d:4a:46:93:ec:26:29:48:7b:59: 08:1d:70:83:53:b4:33:17:76:05:43:c2:cb:1b:ab: a3:28:0b:3f:ca:ec:97:81:7f:a6:32:a2:69:d2:9e: ee:68:d7:a1:d6:a9:fd:ba:73:fb:1d:62:6c:0e:44: 57:6a:b7:07:b8:99:04:c7:dd:46:54:1a:e1:5f:ab: 00:8e:0a:33:2a:c7:23:2c:10:a7:4f:a1:ac:12:c4: 42:e1:2a:ca:62:e3:52:5c:54:df:c4:4b:58:6e:c0: 99:f5:0a:a4:71:23:a9:88:a1:02:7d:e5:5f:37:f3: 9e:c0:65:61:13:10:e6:ec:8b:cf:0e:db:42:83:7c: 5a:a4:c3:c3:ad:44:b9:3c:6b:3a:4c:70:57:46:5d: 7e:e6:db:84:1f:ae:b1:cb:b4:75:c3:42:6d:d4:3b: cc:7c:75:76:03:4e:a5:a5:67:c7:c3:24:0f:13:9b: c2:8c:d2:8f:08:fa:20:a2:7e:33:26:46:94:81:de: e8:83:0d:ad:85:f9:b6:70:d9:33:89:65:0c:3c:5b: 59:00:49:9c:e7:8d:b3:5e:74:27:a0:f0:31:25:49: 50:13:a4:f4:c5:89:f2:c5:5b:5c:75:d0:a2:25:49: 68:c8:2e:d7:d3:c9:fb:47:10:d6:c1:6b:ff:b1:94: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:47:B4:31:11:B3:9E:A1:62:27:FC:D5:92:B5:EC:13:11:A6:FE X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7a:f9:a4:99:61:6f:7a:ab:17:7f:b0:29:dc:8c:a9:37:84: c3:2f:d2:4c:fa:95:af:96:61:91:a1:71:d0:45:93:b2:2c:94: 62:73:20:04:1a:2f:8f:7d:ac:2f:4c:e2:a0:c9:c2:d7:9f:8a: fa:0b:cb:d0:fa:5b:64:ed:1a:72:5e:b4:e2:c4:f6:13:b8:12: 84:d4:68:9a:0d:69:63:99:27:1f:d9:dd:6d:01:8e:ee:22:a7: 02:9a:28:2e:27:be:82:0c:31:d4:7d:ef:00:30:bf:e9:cf:91: ed:29:11:86:82:ad:b1:3d:c6:ae:3e:f8:47:df:48:a0:c8:64: 5f:1c:33:fd:f2:3c:76:7e:17:de:5e:46:da:32:c5:51:23:c3: 9f:10:f8:65:6d:25:a9:32:b0:ba:11:5b:0b:d3:79:f6:d8:5e: 0a:b4:89:d6:2d:1e:cb:43:b4:2e:bc:2e:58:0f:ad:28:06:f8: 58:d3:7e:c9:00:e2:be:bc:b9:04:fc:2d:13:e7:69:99:7d:61: 6e:b2:7b:c6:f0:c7:09:28:15:b4:e4:a4:4a:16:6f:5e:e0:f8: 15:e0:b6:2d:a3:f2:51:ca:50:7d:9e:d3:41:3d:3b:52:60:64: 62:af:cc:f1:36:1e:93:77:9f:b7:e7:b4:fc:b2:9c:ee:dc:ae: 92:88:7d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjYwODAxMDQxMjM1WhcNMjYwODA4MDQxMjM1WjAYMRYwFAYD VQQDEw02YTZkNzIzMy03NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFHdsZ1KRpPsJilIe1kIHXCDU7QzF3YFQ8LLG6ujKAs/yuyXgX+mMqJp0p7u aNeh1qn9unP7HWJsDkRXarcHuJkEx91GVBrhX6sAjgozKscjLBCnT6GsEsRC4SrK YuNSXFTfxEtYbsCZ9QqkcSOpiKECfeVfN/OewGVhExDm7IvPDttCg3xapMPDrUS5 PGs6THBXRl1+5tuEH66xy7R1w0Jt1DvMfHV2A06lpWfHwyQPE5vCjNKPCPogon4z JkaUgd7ogw2thfm2cNkziWUMPFtZAEmc542zXnQnoPAxJUlQE6T0xYnyxVtcddCi JUloyC7X08n7RxDWwWv/sZTt2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIl0R7Qx EbOeoWIn/NWStewTEab+MB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m c1ZGV0FORWdvMGNyNFV0ekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHr5pJlhb3qrF3+wKdyMqTeEwy/STPqVr5ZhkaFx0EWTsiyUYnMgBBovj32s L0zioMnC15+K+gvL0PpbZO0acl604sT2E7gShNRomg1pY5knH9ndbQGO7iKnApoo Lie+ggwx1H3vADC/6c+R7SkRhoKtsT3Grj74R99IoMhkXxwz/fI8dn4X3l5G2jLF USPDnxD4ZW0lqTKwuhFbC9N59theCrSJ1i0ey0O0LrwuWA+tKAb4WNN+yQDivry5 BPwtE+dpmX1hbrJ7xvDHCSgVtOSkShZvXuD4FeC2LaPyUcpQfZ7TQT07UmBkYq/M 8TYek3eft+e0/LKc7tyukoh9/A== -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:42 2026 by rpki-client