$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json) Hash identifier: vGeedKinQQdjPf7497k2NLrJfFHLONqkwunX2cdzCE4= Subject key identifier: 9B:BE:45:6B:4B:F6:37:D5:EF:F7:43:F5:33:A6:8D:57:84:85:38:25 Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft Manifest number: 0242 Signing time: Fri 25 Sep 2026 02:32:35 +0000 Manifest this update: Fri 25 Sep 2026 02:32:34 +0000 Manifest next update: Fri 02 Oct 2026 02:32:34 +0000 Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: EQ6n2tceSOqY4yr8bnCQpbMTCO1gOSwIzAEBzRKLCQI=) 2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: Y/N7Od4khfLczJDMgbO0tCR9gSc5Ipt+5xzaIbpHVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Sep 25 02:32:34 2026 GMT Not After : Oct 2 02:32:34 2026 GMT Subject: CN=6ab5dd43-fe24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:19:fe:63:30:6e:10:1c:ed:04:78:f3:53: ac:87:2d:9c:f6:6b:0f:4c:b7:64:37:d6:4d:fd:14: 8e:0a:e0:e0:8f:7e:92:5f:3a:e6:76:54:df:4e:79: e1:b5:3d:9e:02:5d:f0:ef:06:17:b0:93:cc:d3:35: a8:c7:08:62:75:36:25:06:8b:bb:c5:ec:44:2e:62: 0e:73:5f:37:b6:c7:4a:4e:96:a2:8d:30:e7:4f:0f: 9f:37:de:7c:a4:43:d4:33:0a:79:bc:3c:33:6b:38: 3c:bd:c1:42:64:f8:39:f8:54:0b:23:32:6a:df:76: 9d:e9:ff:f4:8b:8a:57:c4:69:95:c0:97:95:18:4b: c1:c8:ec:cf:53:00:ac:c7:f5:49:dc:03:6a:f7:92: 66:80:a7:9a:29:cd:44:de:8b:4d:64:8c:09:81:70: e0:c8:d0:90:66:f2:55:ce:90:0a:a8:69:37:d9:27: d7:9f:65:37:bc:6a:85:2a:d3:14:aa:df:b7:eb:00: 34:e4:14:07:ca:ef:81:b3:ce:d7:0c:69:1e:f0:ea: e3:df:77:fb:20:21:8a:66:9a:ac:95:c7:3f:3f:4a: 27:02:5d:6b:52:9b:98:6c:c2:72:44:e5:1d:f6:ac: f1:0c:7e:ba:5f:5d:25:b6:ef:5e:74:3f:e0:df:da: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:45:6B:4B:F6:37:D5:EF:F7:43:F5:33:A6:8D:57:84:85:38:25 X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:20:ca:ae:60:74:01:41:8c:6e:43:2a:79:c8:63:dd:98:e1: 43:84:16:b6:60:8f:ba:17:b0:c4:68:94:58:96:90:3a:37:ee: 82:e2:ab:3e:63:10:37:c9:a0:9e:7f:fa:ac:64:bd:03:2d:10: c8:55:b0:82:99:03:65:b8:07:41:a2:e3:01:f0:25:75:b1:31: 62:93:f5:17:8e:8a:cc:8b:6d:de:12:f4:5b:92:f7:89:1d:ab: c0:05:8f:bf:23:d4:e5:f0:df:c8:41:77:87:87:af:39:dd:40: 3b:e7:ac:0c:07:8d:44:eb:65:b2:d0:60:07:17:2e:1c:91:e0: 29:e9:36:42:0f:5a:0d:74:10:6b:d8:80:72:99:06:9f:8b:f2: c5:eb:40:15:d0:ba:b0:63:e4:f1:ba:7e:75:1c:58:cf:41:ec: 17:75:41:69:87:52:9d:39:f3:2a:54:9c:d8:dc:88:dd:7f:ec: 92:96:e1:c6:70:65:80:e8:40:b8:b8:f8:e9:02:b5:3d:20:bc: 2e:93:5b:5b:08:54:4b:93:e0:71:d1:f4:50:63:d0:fc:0b:84: ad:da:36:51:6a:1a:fc:43:14:fa:57:4c:ba:32:4a:c2:9a:48: 86:00:46:d1:ed:a4:c3:1a:3c:67:c3:c4:1a:c8:af:cd:1a:a0: 3d:06:d1:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjYwOTI1MDIzMjM0WhcNMjYxMDAyMDIzMjM0WjAYMRYwFAYD VQQDEw02YWI1ZGQ0My1mZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTQZ/mMwbhAc7QR481Oshy2c9msPTLdkN9ZN/RSOCuDgj36SXzrmdlTfTnnh tT2eAl3w7wYXsJPM0zWoxwhidTYlBou7xexELmIOc183tsdKTpaijTDnTw+fN958 pEPUMwp5vDwzazg8vcFCZPg5+FQLIzJq33ad6f/0i4pXxGmVwJeVGEvByOzPUwCs x/VJ3ANq95JmgKeaKc1E3otNZIwJgXDgyNCQZvJVzpAKqGk32SfXn2U3vGqFKtMU qt+36wA05BQHyu+Bs87XDGke8Orj33f7ICGKZpqslcc/P0onAl1rUpuYbMJyROUd 9qzxDH66X10ltu9edD/g39qJOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJu+RWtL 9jfV7/dD9TOmjVeEhTglMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m c1ZGV0FORWdvMGNyNFV0ekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACDKrmB0AUGMbkMqechj3ZjhQ4QWtmCPuhewxGiUWJaQOjfuguKrPmMQN8mg nn/6rGS9Ay0QyFWwgpkDZbgHQaLjAfAldbExYpP1F46KzItt3hL0W5L3iR2rwAWP vyPU5fDfyEF3h4evOd1AO+esDAeNROtlstBgBxcuHJHgKek2Qg9aDXQQa9iAcpkG n4vyxetAFdC6sGPk8bp+dRxYz0HsF3VBaYdSnTnzKlSc2NyI3X/skpbhxnBlgOhA uLj46QK1PSC8LpNbWwhUS5PgcdH0UGPQ/AuErdo2UWoa/EMU+ldMujJKwppIhgBG 0e2kwxo8Z8PEGsivzRqgPQbRWw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:43:38 2026 by rpki-client