$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: 6TCYLJ8dM+KRM9BFNuncUeQsSkx+C++DsWylpLCAEJA= Subject key identifier: 3F:E8:45:C8:A2:D1:09:7C:8E:CC:98:25:0C:C5:5C:43:80:2C:D2:81 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0F60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 0F57 Signing time: Sat 18 Oct 2025 18:10:56 +0000 Manifest this update: Sat 18 Oct 2025 18:10:56 +0000 Manifest next update: Sat 25 Oct 2025 18:10:56 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: /bQCqN2QoH9BLJXVyBuCptsXsV4iH6KqcUnvKZLb+HE=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: l1aL436ui+DSs7MhbbXkGIT5+J+EKVHo8IJU3TtL4kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Oct 18 18:10:56 2025 GMT Not After : Oct 25 18:10:56 2025 GMT Subject: CN=68f3d830-0fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:72:0a:43:07:d5:09:ea:82:7b:3d:b8:9d: de:fe:57:c6:3a:f4:f7:8b:8a:8b:b3:9c:e3:1f:13: 44:54:d4:b2:67:84:db:83:cc:af:a9:09:ed:48:91: 3a:3e:55:cb:56:e1:42:42:43:13:3a:6c:a1:e8:eb: 54:2b:0b:5c:5c:2d:d0:4a:b0:70:a7:7f:c5:ba:6f: ed:54:6c:a3:d2:06:9f:b4:72:88:b1:ed:ef:90:fd: 0f:12:32:e7:9a:98:f6:bd:45:fe:fe:8d:6b:79:28: 84:a8:e2:45:20:63:08:3b:44:50:0d:27:4b:cb:ad: cf:5e:2e:87:c9:a1:26:f7:04:ec:5a:ba:02:15:63: 32:e1:b5:87:6c:46:58:23:df:90:48:88:8d:44:d0: 0d:1c:eb:d1:60:87:ff:38:fc:dc:81:4a:d6:ce:19: 6e:04:fe:9f:7c:ae:7b:98:38:7d:6d:b5:b3:4f:6b: 7c:05:b0:8b:60:57:1e:45:2a:9d:ad:35:cf:3a:42: 77:6a:fe:c9:66:f4:eb:6f:ed:62:7c:a8:65:23:ef: d3:46:9a:d6:1e:ed:0c:4d:32:f0:d6:06:68:1c:c0: f3:e3:59:f6:1f:72:5f:8c:6f:1f:d3:d1:bb:09:91: 20:42:b7:f8:8c:7b:b2:ca:08:7d:62:04:f0:ea:84: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:45:C8:A2:D1:09:7C:8E:CC:98:25:0C:C5:5C:43:80:2C:D2:81 X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9e:56:33:15:0c:83:81:99:df:1d:f4:54:9d:f9:36:0e:a1: c2:f9:0d:78:49:d0:9b:11:08:a2:90:e0:49:f4:5c:f0:17:18: d8:f6:f1:dc:76:a5:47:32:ac:51:09:be:0b:8c:3a:fa:50:ce: 22:10:7c:60:b3:aa:0d:c1:08:8f:63:1d:7b:fe:50:21:90:5d: 2f:54:0e:e1:a4:97:aa:95:35:32:37:f8:36:b7:1e:e5:7b:5c: cf:be:18:47:60:90:83:c3:71:71:6f:3b:d0:b1:15:37:42:a9: a1:97:1a:23:a5:1c:e3:e3:b3:cd:8c:8d:86:54:b4:18:98:5d: 3d:73:c4:3d:b3:7c:58:47:d2:01:7e:dc:27:8d:83:84:a1:39: 7e:83:a9:30:fc:a4:20:88:d1:d0:f6:a3:37:51:97:8d:23:e4: 79:f8:46:76:18:a6:b2:42:54:96:df:d8:ce:5c:18:e4:cd:5f: 1d:01:ee:5d:b8:49:b5:31:5d:9c:d5:ed:10:71:1e:90:f2:c4: 5d:cd:29:5d:fa:18:af:ca:56:c1:00:06:85:7c:75:b1:fd:92: c8:c0:0e:10:99:e3:d1:dd:61:cc:84:43:43:a3:7c:29:1a:25: 85:39:21:56:8e:d4:e1:8f:be:c2:75:f8:0d:bb:f8:81:9c:5a: 23:c3:b4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjUxMDE4MTgxMDU2WhcNMjUxMDI1MTgxMDU2WjAYMRYwFAYD VQQDEw02OGYzZDgzMC0wZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3tyCkMH1Qnqgns9uJ3e/lfGOvT3i4qLs5zjHxNEVNSyZ4Tbg8yvqQntSJE6 PlXLVuFCQkMTOmyh6OtUKwtcXC3QSrBwp3/Fum/tVGyj0gaftHKIse3vkP0PEjLn mpj2vUX+/o1reSiEqOJFIGMIO0RQDSdLy63PXi6HyaEm9wTsWroCFWMy4bWHbEZY I9+QSIiNRNANHOvRYIf/OPzcgUrWzhluBP6ffK57mDh9bbWzT2t8BbCLYFceRSqd rTXPOkJ3av7JZvTrb+1ifKhlI+/TRprWHu0MTTLw1gZoHMDz41n2H3JfjG8f09G7 CZEgQrf4jHuyygh9YgTw6oTUTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/oRcii 0Ql8jsyYJQzFXEOALNKBMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYnlYzFQyDgZnfHfRUnfk2DqHC+Q14SdCbEQiikOBJ9FzwFxjY9vHc dqVHMqxRCb4LjDr6UM4iEHxgs6oNwQiPYx17/lAhkF0vVA7hpJeqlTUyN/g2tx7l e1zPvhhHYJCDw3FxbzvQsRU3QqmhlxojpRzj47PNjI2GVLQYmF09c8Q9s3xYR9IB ftwnjYOEoTl+g6kw/KQgiNHQ9qM3UZeNI+R5+EZ2GKayQlSW39jOXBjkzV8dAe5d uEm1MV2c1e0QcR6Q8sRdzSld+hivylbBAAaFfHWx/ZLIwA4QmePR3WHMhENDo3wp GiWFOSFWjtThj77CdfgNu/iBnFojw7TC -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:56 2025 by rpki-client