$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft File: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json) Hash identifier: 0Zsa6E+1HRVAkK3tJh1wtcfF+sF+9C7kLQz9Bby9o2w= Subject key identifier: 03:CF:72:F8:63:77:B6:21:5F:05:E8:72:0E:DE:74:30:16:31:14:D4 Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 Certificate issuer: /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft Manifest number: 14 Signing time: Sun 19 Oct 2025 11:28:31 +0000 Manifest this update: Sun 19 Oct 2025 11:28:31 +0000 Manifest next update: Sun 26 Oct 2025 11:28:31 +0000 Files and hashes: 1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: iY0TlkIOGDJIk2hEfSHN4BLMIZ1nTanI9fCOvwtRvD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479 Validity Not Before: Oct 19 11:28:31 2025 GMT Not After : Oct 26 11:28:31 2025 GMT Subject: CN=68f4cb5f-a4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:8e:f3:a1:a4:4a:7d:14:6c:a2:4a:34:7e: a7:d4:45:c2:bd:06:b9:c4:c1:dc:b6:23:12:7d:59: d4:bc:01:ef:ab:d3:39:99:00:0f:2e:ea:06:e7:13: 49:03:1f:9e:bd:2e:25:76:57:69:0a:9f:3b:a1:40: e1:e6:e2:33:e8:b3:09:b9:df:15:14:52:fd:27:ef: d7:c5:21:62:09:fb:6a:7a:ad:58:c0:cb:c4:32:f0: fc:77:f6:a5:8d:e3:c8:2c:17:e1:26:9e:13:3c:33: 03:e7:b1:c3:b6:4f:bb:63:7e:c5:69:36:3e:61:8f: ef:29:53:37:90:47:c1:28:6a:ca:cd:c5:ae:63:74: db:48:03:f6:1f:d1:fb:17:d3:8d:4a:87:2e:da:a0: b8:3e:67:44:26:e8:40:da:03:09:b6:4d:31:22:60: 54:f0:da:f6:32:e5:57:d0:d2:26:4f:b1:8b:34:87: 23:e8:f8:bc:62:c2:e1:da:39:a3:cd:ca:15:24:78: fa:42:9d:6f:1a:ee:68:e0:f1:0e:29:e2:9b:aa:bd: fe:b4:d3:cd:93:96:45:b6:9d:42:74:2a:54:62:b5: 07:be:bd:40:3d:c8:e8:33:72:e2:5f:38:ae:8d:f9: 1d:8b:ca:c7:b0:08:3b:09:48:e3:cc:2b:0a:68:60: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:72:F8:63:77:B6:21:5F:05:E8:72:0E:DE:74:30:16:31:14:D4 X509v3 Authority Key Identifier: keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8d:c2:93:1c:4c:53:dd:8c:51:34:f2:70:27:25:ce:6d:70: 82:22:90:dc:17:9f:7c:f7:36:91:04:16:4e:76:b4:15:58:76: 0f:89:e6:7c:02:8d:c3:b5:e7:35:7a:ce:dc:b3:fd:ef:fa:d1: 9c:3f:4b:14:18:79:0b:6d:d3:8d:30:80:6b:6a:6f:86:ce:18: 52:43:99:03:83:98:e3:ae:52:18:a0:12:20:f9:03:14:d4:52: 62:c2:75:4b:f8:84:f6:15:08:01:37:f4:97:68:ed:4b:27:fb: da:0e:f5:bc:ae:c2:fa:ee:71:0b:be:6d:29:2d:15:49:75:05: 0e:d0:df:00:ee:01:a8:4d:f3:15:31:61:1b:b8:11:bb:17:dc: d1:2e:51:11:1d:62:27:48:41:e7:fb:63:57:4e:0d:ea:7d:a1: 31:61:f7:68:7b:0f:36:1a:f6:03:13:0e:d4:ed:3d:fc:8a:39: e4:95:63:0e:c4:1a:82:d2:80:ea:82:0a:a7:0d:7f:00:3c:61: 21:c8:1a:2c:53:9d:35:02:89:ec:d6:e4:61:83:97:fe:5f:03: 17:3f:d3:ac:4f:16:1f:4e:21:ff:b5:2e:d0:11:0d:24:90:a7: 5b:62:6e:6e:5f:fd:cc:41:a7:2f:a0:f9:3c:6e:4d:ed:53:96: 86:22:da:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoNEE0Mzg5RkU5MUY5QTEyNEM3NzZGODlCQjIxRUUwN0Mz RTdFNjQ3OTAeFw0yNTEwMTkxMTI4MzFaFw0yNTEwMjYxMTI4MzFaMBgxFjAUBgNV BAMTDTY4ZjRjYjVmLWE0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdKI7zoaRKfRRsoko0fqfURcK9BrnEwdy2IxJ9WdS8Ae+r0zmZAA8u6gbnE0kD H569LiV2V2kKnzuhQOHm4jPoswm53xUUUv0n79fFIWIJ+2p6rVjAy8Qy8Px39qWN 48gsF+EmnhM8MwPnscO2T7tjfsVpNj5hj+8pUzeQR8EoasrNxa5jdNtIA/Yf0fsX 041Khy7aoLg+Z0Qm6EDaAwm2TTEiYFTw2vYy5VfQ0iZPsYs0hyPo+LxiwuHaOaPN yhUkePpCnW8a7mjg8Q4p4puqvf60082TlkW2nUJ0KlRitQe+vUA9yOgzcuJfOK6N +R2LysewCDsJSOPMKwpoYNTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA89y+GN3 tiFfBehyDt50MBYxFNQwHwYDVR0jBBgwFoAUSkOJ/pH5oSTHdvibsh7gfD5+ZHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzgyQzBBQTIwOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NUSGR2aWJzaDdnZkQ1LVpI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2tPSl9wSDVvU1RIZHZpYnNoN2dmRDUtWkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzgyQzBBQTIwOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL1NrT0pfcEg1b1NU SGR2aWJzaDdnZkQ1LVpIay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaNwpMcTFPdjFE08nAnJc5tcIIikNwXn3z3NpEEFk52tBVYdg+J5nwC jcO15zV6ztyz/e/60Zw/SxQYeQtt040wgGtqb4bOGFJDmQODmOOuUhigEiD5AxTU UmLCdUv4hPYVCAE39Jdo7Usn+9oO9byuwvrucQu+bSktFUl1BQ7Q3wDuAahN8xUx YRu4EbsX3NEuUREdYidIQef7Y1dODep9oTFh92h7DzYa9gMTDtTtPfyKOeSVYw7E GoLSgOqCCqcNfwA8YSHIGixTnTUCiezW5GGDl/5fAxc/06xPFh9OIf+1LtARDSSQ p1tibm5f/cxBpy+g+TxuTe1TloYi2is= -----END CERTIFICATE-----Generated at Mon Oct 20 01:30:42 2025 by rpki-client