$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json) Hash identifier: JTBokRx3/PSmu7A6S+53UQLB3VXzIgQPIufZWivXiVY= Subject key identifier: F6:43:A5:19:4B:7C:2E:16:44:48:0D:17:3C:ED:2F:3F:B6:76:33:A5 Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft Manifest number: 0223 Signing time: Mon 27 Jul 2026 04:19:33 +0000 Manifest this update: Mon 27 Jul 2026 04:19:32 +0000 Manifest next update: Mon 03 Aug 2026 04:19:32 +0000 Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: w3LCC3WxJcTvdS8vntGm+Ie35NICCMi5qfby/39x2e4=) 2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: Y/N7Od4khfLczJDMgbO0tCR9gSc5Ipt+5xzaIbpHVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Jul 27 04:19:32 2026 GMT Not After : Aug 3 04:19:32 2026 GMT Subject: CN=6a66dc55-9556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:00:ef:8e:67:5e:f0:9b:01:2e:e0:b9:ef: bc:aa:67:3a:cc:42:38:ad:f2:f0:ce:18:d1:a2:70: ea:fa:90:c7:8e:0f:df:e7:d4:4c:e0:3f:3b:c9:06: 06:8a:8b:35:fd:98:c0:63:83:8a:6e:3b:b2:8f:a7: f1:6d:98:d4:65:d0:ef:56:ca:c4:11:a7:23:a2:d4: 4d:7f:08:7e:e5:be:5d:35:7b:52:cb:06:b6:e0:de: 9e:dd:8c:e5:8d:c8:b5:4d:6d:b8:25:a8:a4:00:45: 03:cc:d2:ab:2c:00:df:7e:e8:b6:f4:fc:e0:ce:c4: ff:dc:b0:3d:e0:6b:58:01:57:72:ba:78:fc:a8:a2: 1d:4d:0a:dd:e6:a6:58:34:e2:42:81:5f:32:eb:73: e6:18:0c:03:36:84:61:2e:2f:bd:4a:b3:5d:f7:6f: 38:9a:64:9f:7b:cb:de:62:58:ec:c0:8a:77:c8:ca: e5:0e:3f:d8:d7:10:c2:ec:c3:f0:8a:88:51:c3:8d: 00:18:67:af:5f:7c:96:c3:01:76:0d:c8:05:17:cc: e6:e7:68:eb:eb:d0:f0:87:4f:23:08:fb:ff:09:65: ad:1b:77:7e:47:e0:83:6d:9b:03:1c:b2:a5:af:5f: bf:4d:d3:3b:e6:19:3f:fb:73:d0:be:a7:ce:be:11: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:43:A5:19:4B:7C:2E:16:44:48:0D:17:3C:ED:2F:3F:B6:76:33:A5 X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d2:c8:57:1a:46:d4:a6:5f:17:15:ca:da:c0:dc:06:33:43: 17:2c:7a:5f:cb:f5:a0:e1:51:8e:20:af:80:54:f4:cd:2b:81: 11:31:df:5f:f3:d1:58:a0:71:92:43:3a:a5:37:e2:f6:2f:24: 42:53:0e:5d:89:00:3f:dc:6e:67:7b:97:46:94:10:58:e8:82: c6:1c:ec:7e:fe:98:17:d4:db:37:95:ae:a6:ad:1c:e0:41:0e: d8:07:41:76:32:9a:d7:49:ec:68:ae:f3:5d:14:47:65:d3:2b: 86:be:4f:10:23:5c:8c:92:b9:41:44:c5:e5:ab:86:e3:f0:d2: f3:4e:5a:23:08:34:cc:92:92:3c:12:7b:d0:39:44:67:28:9f: 5c:9f:f8:b9:24:92:65:42:e8:d4:80:fe:c1:c3:ad:c3:68:52: 64:dc:ca:41:ef:0d:17:1e:bb:9c:be:fc:35:bc:99:66:bd:cd: a2:81:78:a5:72:c9:b4:f2:ad:b5:1e:3b:d3:c4:4e:dd:13:c9: 36:3f:6b:0f:c1:1e:3e:49:25:36:d6:29:7e:03:52:f2:fb:b5: fd:c8:8d:13:68:1f:00:3d:f3:3b:d2:a9:b0:9c:28:27:e3:57: 44:06:af:1b:65:6e:3b:07:55:f3:0a:69:7d:59:85:aa:65:c5: de:d4:dc:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjYwNzI3MDQxOTMyWhcNMjYwODAzMDQxOTMyWjAYMRYwFAYD VQQDEw02YTY2ZGM1NS05NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hQA745nXvCbAS7gue+8qmc6zEI4rfLwzhjRonDq+pDHjg/f59RM4D87yQYG ios1/ZjAY4OKbjuyj6fxbZjUZdDvVsrEEacjotRNfwh+5b5dNXtSywa24N6e3Yzl jci1TW24JaikAEUDzNKrLADffui29PzgzsT/3LA94GtYAVdyunj8qKIdTQrd5qZY NOJCgV8y63PmGAwDNoRhLi+9SrNd9284mmSfe8veYljswIp3yMrlDj/Y1xDC7MPw iohRw40AGGevX3yWwwF2DcgFF8zm52jr69Dwh08jCPv/CWWtG3d+R+CDbZsDHLKl r1+/TdM75hk/+3PQvqfOvhHoAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZDpRlL fC4WREgNFzztLz+2djOlMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m c1ZGV0FORWdvMGNyNFV0ekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAetLIVxpG1KZfFxXK2sDcBjNDFyx6X8v1oOFRjiCvgFT0zSuBETHfX/PRWKBx kkM6pTfi9i8kQlMOXYkAP9xuZ3uXRpQQWOiCxhzsfv6YF9TbN5Wupq0c4EEO2AdB djKa10nsaK7zXRRHZdMrhr5PECNcjJK5QUTF5auG4/DS805aIwg0zJKSPBJ70DlE ZyifXJ/4uSSSZULo1ID+wcOtw2hSZNzKQe8NFx67nL78NbyZZr3NooF4pXLJtPKt tR4708RO3RPJNj9rD8EePkklNtYpfgNS8vu1/ciNE2gfAD3zO9KpsJwoJ+NXRAav G2VuOwdV8wppfVmFqmXF3tTcdw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:32:52 2026 by rpki-client