$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: JTnuxd/45aBUS48e8na/KpsMkq2DaNwlEyy1StgNP9g= Subject key identifier: EE:1B:4D:9F:6D:51:E4:AB:8C:EC:EE:03:8C:9B:9E:92:A3:22:DB:CE Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0FB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 0FAA Signing time: Tue 24 Mar 2026 17:23:56 +0000 Manifest this update: Tue 24 Mar 2026 17:23:56 +0000 Manifest next update: Tue 31 Mar 2026 17:23:56 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: Z54ylPkG0uIPk6IKr3CW5OEqbA4YjhkibxG4fuQ6Csg=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: ouoKGaYnU6vSBzKjK+iRb5OXctmchN2GDet5Vb4DoGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4020 (0xfb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Mar 24 17:23:56 2026 GMT Not After : Mar 31 17:23:56 2026 GMT Subject: CN=69c2c8ac-5f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:81:6d:a7:06:20:2b:1d:01:bb:43:d0:9c:32: e2:25:bd:ee:b9:6d:ea:1e:42:21:c8:85:7f:31:bb: 38:6e:fd:15:5f:4a:83:e1:64:9e:aa:fe:81:db:85: 2b:7c:af:15:10:65:59:07:ca:5a:2b:9f:32:42:30: 33:c4:97:b1:87:9c:a1:04:5a:6a:94:72:4c:a7:6d: 02:b9:ac:40:ad:9a:97:6b:97:9b:a6:cc:af:6e:5f: 03:ab:65:8a:5b:28:8b:53:71:13:28:29:d8:d5:f1: ad:7c:69:9e:81:53:de:4b:b6:95:0a:58:ba:21:72: 44:0b:80:a8:a2:9a:cf:85:f6:45:2f:d1:39:25:0f: 90:86:42:3a:69:6d:28:20:c1:2b:fc:23:7d:e2:29: c9:e0:76:72:c7:fb:a6:cb:3e:ce:8d:74:8d:7d:d1: 0a:40:a6:c3:e5:da:31:96:fc:7a:ef:7d:95:d6:aa: ee:a3:79:b6:b9:45:b4:a9:ad:ad:b3:cb:36:de:b1: eb:01:ed:b1:e1:20:e8:5e:de:5e:0c:5b:37:43:49: 89:d9:75:9e:ae:63:da:3f:65:91:a0:2d:be:28:7f: 13:31:18:30:09:d4:f4:7e:89:56:c6:c3:8f:bb:8d: 59:15:43:c2:fb:b0:9f:43:a0:00:07:ca:03:2f:26: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1B:4D:9F:6D:51:E4:AB:8C:EC:EE:03:8C:9B:9E:92:A3:22:DB:CE X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:9f:45:d8:42:c5:15:07:d2:a7:58:81:d0:b3:44:4f:2c:14: 51:4e:97:be:b8:a4:e5:b3:8a:a8:29:c1:71:2e:a3:5c:09:b8: 22:83:1a:4a:af:b5:ec:9d:ed:e4:dc:48:04:4a:d0:30:7e:5b: 24:63:42:d7:dc:ff:96:5c:32:75:35:6d:b9:e2:ff:8f:ef:4c: 3d:7e:81:e3:f3:9f:c8:40:78:38:30:53:2b:fd:d9:2d:5f:a3: bd:70:20:68:c1:75:a6:43:9d:6a:71:59:d6:3f:67:76:7e:e8: 7e:75:58:16:46:98:0b:e9:5e:f7:fe:32:ba:63:2d:57:4e:c9: f7:54:51:cc:c7:a7:ea:0a:1a:86:77:ab:7c:fb:52:71:39:45: 1b:e8:29:f3:8e:78:2d:bc:76:2b:b1:5c:41:5d:5d:39:59:a8: ab:cd:75:e6:b2:e2:6d:cb:1d:8f:83:e1:d8:d6:e3:aa:36:00: 97:2b:4c:0a:6f:37:57:b3:6a:89:0b:1b:4f:d9:c6:41:c3:ce: 87:3b:3b:4f:56:7e:58:4b:8c:9d:ed:6c:6b:4c:d3:5f:37:27: ca:c7:f6:6c:b6:6d:89:0c:54:ec:77:c6:b8:e1:81:7f:8b:ad: c6:cd:0a:d4:c5:07:2f:eb:d6:5d:2a:09:36:50:5c:ba:4f:bc: ea:a3:f8:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjYwMzI0MTcyMzU2WhcNMjYwMzMxMTcyMzU2WjAYMRYwFAYD VQQDEw02OWMyYzhhYy01ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IFtpwYgKx0Bu0PQnDLiJb3uuW3qHkIhyIV/Mbs4bv0VX0qD4WSeqv6B24Ur fK8VEGVZB8paK58yQjAzxJexh5yhBFpqlHJMp20CuaxArZqXa5ebpsyvbl8Dq2WK WyiLU3ETKCnY1fGtfGmegVPeS7aVCli6IXJEC4CooprPhfZFL9E5JQ+QhkI6aW0o IMEr/CN94inJ4HZyx/umyz7OjXSNfdEKQKbD5doxlvx6732V1qruo3m2uUW0qa2t s8s23rHrAe2x4SDoXt5eDFs3Q0mJ2XWermPaP2WRoC2+KH8TMRgwCdT0folWxsOP u41ZFUPC+7CfQ6AAB8oDLyZAFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4bTZ9t UeSrjOzuA4ybnpKjItvOMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzp9F2ELFFQfSp1iB0LNETywUUU6Xvrik5bOKqCnBcS6jXAm4IoMaSq+17J3t 5NxIBErQMH5bJGNC19z/llwydTVtueL/j+9MPX6B4/OfyEB4ODBTK/3ZLV+jvXAg aMF1pkOdanFZ1j9ndn7ofnVYFkaYC+le9/4yumMtV07J91RRzMen6goahnerfPtS cTlFG+gp8454Lbx2K7FcQV1dOVmoq8115rLibcsdj4Ph2NbjqjYAlytMCm83V7Nq iQsbT9nGQcPOhzs7T1Z+WEuMne1sa0zTXzcnysf2bLZtiQxU7HfGuOGBf4utxs0K 1MUHL+vWXSoJNlBcuk+86qP4Ug== -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:52 2026 by rpki-client