$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json) Hash identifier: n4Oy1HJAZzK1jNPk/OoJApqaWCBAeGhjx1KyQZhnyOI= Subject key identifier: 53:76:D4:04:77:BB:E5:E3:53:66:01:EC:68:C1:70:E6:56:28:C6:5F Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft Manifest number: 0221 Signing time: Thu 23 Jul 2026 04:03:20 +0000 Manifest this update: Thu 23 Jul 2026 04:03:19 +0000 Manifest next update: Thu 30 Jul 2026 04:03:19 +0000 Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: 0puao0GqIp85DHXozgeTtSo2kCmxT92atczyYiXub/4=) 2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: Y/N7Od4khfLczJDMgbO0tCR9gSc5Ipt+5xzaIbpHVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA485, serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732 Validity Not Before: Jul 23 04:03:19 2026 GMT Not After : Jul 30 04:03:19 2026 GMT Subject: CN=6a619288-b262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:a3:d7:37:de:25:ff:15:93:0b:d9:e1:26: e1:da:0d:73:55:78:e5:fe:61:11:59:7e:3c:7a:48: 15:33:fd:b6:7e:ef:49:25:6a:8a:e9:8a:26:ee:fd: fe:00:c7:bb:1f:e0:92:c5:66:2c:e4:2f:22:49:93: 17:37:69:4e:61:0b:7d:91:ac:ad:a1:3d:b0:bb:76: d1:a5:53:76:ec:c3:b2:75:d3:2f:e9:10:7e:e4:00: 27:54:92:b3:db:69:20:11:af:70:29:bf:ed:63:2b: 7f:b8:a2:62:1e:6a:4b:6c:d8:fc:d7:49:bb:53:93: f2:cd:cd:2e:bd:b7:e6:d7:44:50:8d:4d:cc:b1:81: 9f:24:a4:d0:36:87:fc:19:94:e2:ed:95:69:a5:21: ff:ef:53:80:cf:84:2e:33:fd:84:bc:4a:70:06:ab: a0:d5:aa:68:84:e8:c1:21:14:1e:01:59:2a:d6:16: 0c:47:95:e6:1f:c3:b6:4d:e3:d6:d9:13:95:64:a9: cb:88:d3:ac:61:71:98:8d:58:79:a5:8c:d8:e0:66: e0:bd:74:9e:14:53:7d:9d:5d:58:45:18:32:4e:c2: d4:be:ea:94:fc:fb:22:d1:cb:b0:f6:da:0d:d0:14: 09:1b:d0:60:2c:d1:a7:c2:4d:de:0d:1c:36:3f:2e: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:D4:04:77:BB:E5:E3:53:66:01:EC:68:C1:70:E6:56:28:C6:5F X509v3 Authority Key Identifier: keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cb:fc:f7:8d:0e:98:79:b7:e8:45:4c:ac:4f:18:cb:70:8e: b5:1b:df:59:0d:3a:0c:56:61:ee:1e:4b:5a:ce:66:58:01:20: ba:d2:fd:79:ee:d3:7f:31:d9:07:7c:85:69:a8:cf:c9:80:bb: c9:cf:8a:05:8d:c7:1f:aa:31:94:7b:2f:a9:00:3d:7b:6f:ef: 03:6a:18:df:ff:1b:fc:98:c7:73:0a:b5:43:a0:19:dd:bc:76: 15:6d:54:e0:6a:87:8c:18:4d:4b:d3:6e:b4:a9:30:2f:c5:6e: e5:2f:84:92:dc:d6:28:f4:05:d7:89:9a:91:47:5c:c7:c8:a6: 93:f7:c9:db:f4:72:5f:54:0f:bd:ea:37:e9:49:66:bc:ba:df: 23:8e:e3:4d:55:a1:90:63:cc:cc:d6:4a:4d:c6:d0:26:ed:03: c3:50:c9:e1:a5:a6:c4:35:1b:10:70:58:47:f2:4b:c1:87:c8: 23:8c:66:63:b0:83:49:18:e2:04:58:4e:33:7d:af:d0:47:04: 35:0a:38:d7:46:f6:4c:8e:72:05:cf:63:05:5e:0a:51:9a:bd: ce:87:6d:a0:fa:45:a7:e2:46:5e:e9:a0:de:07:a9:3f:73:e3: e1:8d:0f:2c:77:ec:5e:9c:22:24:2b:f1:be:28:b5:5b:e6:fb: 75:56:3c:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0ODUxMTAvBgNVBAUTKDJBNTZFQ0YwRjFGRjM5RkIxNTE1NjAwRDEyMEEzNDcy QkUxNEI3MzIwHhcNMjYwNzIzMDQwMzE5WhcNMjYwNzMwMDQwMzE5WjAYMRYwFAYD VQQDEw02YTYxOTI4OC1iMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZaj1zfeJf8VkwvZ4Sbh2g1zVXjl/mERWX48ekgVM/22fu9JJWqK6Yom7v3+ AMe7H+CSxWYs5C8iSZMXN2lOYQt9kaytoT2wu3bRpVN27MOyddMv6RB+5AAnVJKz 22kgEa9wKb/tYyt/uKJiHmpLbNj810m7U5Pyzc0uvbfm10RQjU3MsYGfJKTQNof8 GZTi7ZVppSH/71OAz4QuM/2EvEpwBqug1apohOjBIRQeAVkq1hYMR5XmH8O2TePW 2ROVZKnLiNOsYXGYjVh5pYzY4GbgvXSeFFN9nV1YRRgyTsLUvuqU/Psi0cuw9toN 0BQJG9BgLNGnwk3eDRw2Py75pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFN21AR3 u+XjU2YB7GjBcOZWKMZfMB8GA1UdIwQYMBaAFCpW7PDx/zn7FRVgDRIKNHK+FLcy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ4NS82MkE5Mjg2NjQ3 Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09mc1ZGV0FORWdvMGNyNFV0 ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tsYnM4UEhfT2ZzVkZXQU5FZ28wY3I0VXR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ4NS82MkE5Mjg2NjQ3Q0UxMUVFODZDMjM4NUNDNEY5QUUwMi9LbGJzOFBIX09m c1ZGV0FORWdvMGNyNFV0ekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnsv8940OmHm36EVMrE8Yy3COtRvfWQ06DFZh7h5LWs5mWAEgutL9ee7TfzHZ B3yFaajPyYC7yc+KBY3HH6oxlHsvqQA9e2/vA2oY3/8b/JjHcwq1Q6AZ3bx2FW1U 4GqHjBhNS9NutKkwL8Vu5S+EktzWKPQF14makUdcx8imk/fJ2/RyX1QPveo36Ulm vLrfI47jTVWhkGPMzNZKTcbQJu0Dw1DJ4aWmxDUbEHBYR/JLwYfII4xmY7CDSRji BFhOM32v0EcENQo410b2TI5yBc9jBV4KUZq9zodtoPpFp+JGXumg3gepP3Pj4Y0P LHfsXpwiJCvxvii1W+b7dVY8Kg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:26 2026 by rpki-client