$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: b22LL3XUgR3oa0YGv4eGKkIPgockhmet8KbCLEQye64= Subject key identifier: 8E:6C:B9:8C:E8:BD:D9:63:28:27:93:17:2C:76:07:5A:56:A9:0D:1E Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 1009 Signing time: Tue 22 Sep 2026 17:22:06 +0000 Manifest this update: Tue 22 Sep 2026 17:22:05 +0000 Manifest next update: Tue 29 Sep 2026 17:22:05 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: moWYuwDCP7v72qGKq8J+s7pNqD2Ob/ZpnljlRtPaDRg=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: QQaRw8VhWjtv5+iTZ71TRP+gKsecpysEZWYxDXGHx8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Sep 22 17:22:05 2026 GMT Not After : Sep 29 17:22:05 2026 GMT Subject: CN=6ab2b93d-d6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:23:c5:44:fb:e0:bc:36:61:60:3d:ce:51: a4:f7:01:ab:30:7a:5a:06:82:62:2d:81:cb:f9:9e: e7:e1:4c:d0:f6:4f:3f:89:99:bb:98:b5:e5:10:ae: 75:3a:d4:fc:15:b7:eb:ac:8f:95:8d:f7:3f:c9:88: be:27:d1:2e:a2:6e:b1:24:51:9a:f5:ea:5f:6f:e8: 73:c6:2e:e5:56:e1:73:30:90:53:c3:3b:0f:96:b7: 1e:28:8f:1e:7d:28:35:91:81:4b:7f:0c:4c:c2:c9: 65:af:cd:e0:6b:57:3a:31:42:52:c2:e4:c7:e7:1b: 53:c3:a8:9b:c4:26:76:8f:48:46:75:d8:f9:f9:3f: bf:e9:65:68:43:e3:38:d2:0e:37:65:88:fb:62:9b: 4b:cd:fc:8c:09:cf:e8:07:83:65:4d:02:24:4f:a1: 37:a0:77:2f:4b:39:f4:c4:d9:3b:91:88:42:ba:c3: 4e:7d:b4:5e:03:70:f6:c6:db:e2:07:ea:4e:16:41: 6d:13:04:15:3f:04:68:33:6e:5c:8f:a2:91:db:e1: 01:1b:eb:70:0f:21:d4:ce:c3:86:f7:b9:27:0c:e8: 1a:db:e7:3c:08:a4:10:96:0c:38:b8:db:b8:5f:58: 4e:d2:cf:5c:8d:a9:eb:5c:52:0e:e4:5f:84:c1:c8: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:B9:8C:E8:BD:D9:63:28:27:93:17:2C:76:07:5A:56:A9:0D:1E X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4c:7a:c9:bb:99:b3:6b:01:1f:dc:5e:8c:03:8f:60:70:19: 65:22:df:a1:8f:f8:68:89:2e:76:56:93:63:00:56:f2:75:e8: 2d:0c:05:c4:45:6e:8e:85:69:67:09:ae:e3:60:f9:4d:e6:4b: 50:01:90:02:ad:f9:6f:ce:9c:d1:0e:91:08:42:d0:2d:ba:d0: b4:51:54:08:8b:87:fb:48:38:b6:23:0a:98:17:ff:f3:81:29: 35:10:2d:18:27:22:70:59:62:b1:f7:76:ac:65:20:ff:03:70: fc:6c:c4:52:68:e3:f8:7b:46:b0:06:2a:fa:6e:04:6b:d1:6b: 0d:ba:e2:6e:e8:61:70:22:15:bd:c4:57:54:0e:e9:05:8f:d1: d6:0c:da:84:97:c3:04:b8:25:e9:d1:72:70:78:2b:8e:7c:33: 1c:73:98:5b:bd:37:81:e7:53:36:c1:71:47:39:35:1b:2d:79: 05:94:c5:50:bf:55:00:a9:36:fd:e4:69:36:7e:62:61:8b:f7: 2d:98:31:b7:33:f9:87:6d:53:79:57:e6:91:0f:35:3c:43:54: e1:62:53:e2:d0:04:92:39:fd:dd:3d:3b:18:61:04:78:dd:8a: cf:eb:26:e8:a7:ef:79:4c:f9:fb:2f:8e:f9:d9:bb:12:12:6b: 21:09:af:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjYwOTIyMTcyMjA1WhcNMjYwOTI5MTcyMjA1WjAYMRYwFAYD VQQDEw02YWIyYjkzZC1kNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGEjxUT74Lw2YWA9zlGk9wGrMHpaBoJiLYHL+Z7n4UzQ9k8/iZm7mLXlEK51 OtT8FbfrrI+Vjfc/yYi+J9Euom6xJFGa9epfb+hzxi7lVuFzMJBTwzsPlrceKI8e fSg1kYFLfwxMwsllr83ga1c6MUJSwuTH5xtTw6ibxCZ2j0hGddj5+T+/6WVoQ+M4 0g43ZYj7YptLzfyMCc/oB4NlTQIkT6E3oHcvSzn0xNk7kYhCusNOfbReA3D2xtvi B+pOFkFtEwQVPwRoM25cj6KR2+EBG+twDyHUzsOG97knDOga2+c8CKQQlgw4uNu4 X1hO0s9cjanrXFIO5F+EwcjJrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5suYzo vdljKCeTFyx2B1pWqQ0eMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkx6ybuZs2sBH9xejAOPYHAZZSLfoY/4aIkudlaTYwBW8nXoLQwFxEVujoVp Zwmu42D5TeZLUAGQAq35b86c0Q6RCELQLbrQtFFUCIuH+0g4tiMKmBf/84EpNRAt GCcicFlisfd2rGUg/wNw/GzEUmjj+HtGsAYq+m4Ea9FrDbribuhhcCIVvcRXVA7p BY/R1gzahJfDBLgl6dFycHgrjnwzHHOYW703gedTNsFxRzk1Gy15BZTFUL9VAKk2 /eRpNn5iYYv3LZgxtzP5h21TeVfmkQ81PENU4WJT4tAEkjn93T07GGEEeN2Kz+sm 6KfveUz5+y+O+dm7EhJrIQmvoQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:38:36 2026 by rpki-client