$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: pZSSNx36jSsdC9ekheqYIeJCUfXUc2SW7B0WWDZJ0SQ= Subject key identifier: 9E:21:00:F3:0B:E7:06:70:6F:E2:37:3C:7F:35:3D:67:75:83:EB:E7 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 0F60 Signing time: Tue 04 Nov 2025 17:39:41 +0000 Manifest this update: Tue 04 Nov 2025 17:39:40 +0000 Manifest next update: Tue 11 Nov 2025 17:39:40 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: 8fq6lKUcKNLycXc6/0NIv8Y0oJJSCcgijWsw9pUm0e4=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: l1aL436ui+DSs7MhbbXkGIT5+J+EKVHo8IJU3TtL4kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Nov 4 17:39:40 2025 GMT Not After : Nov 11 17:39:40 2025 GMT Subject: CN=690a3a5d-6135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:74:d5:23:65:d9:fc:a8:7d:ba:f1:de:26: 31:21:03:0b:66:ce:c7:4a:82:bd:04:f6:20:eb:11: d4:9b:de:8c:0b:55:39:1c:85:fd:e0:e8:6f:2d:0a: 1d:10:72:f0:5e:4a:d2:f7:14:54:c5:33:2c:be:55: 35:35:28:8e:9a:08:a8:3e:6a:d6:9a:f3:9a:c3:bf: 67:34:a0:9a:12:0a:85:f1:40:f9:fd:38:77:61:d8: d7:84:a0:c6:01:89:f3:41:00:20:dc:79:e4:9d:5a: 46:da:45:e3:d0:dd:3a:aa:41:99:96:38:5d:92:d2: cf:aa:44:57:79:f4:51:04:16:16:cc:a1:4a:9f:c5: cc:a7:03:cc:f6:b2:8b:b5:5b:a9:8e:cf:a9:d1:be: 92:d7:43:42:fb:f2:0f:1c:9d:5a:6c:56:41:cb:36: 57:5f:68:d9:0c:10:71:fd:9c:65:eb:d7:f3:1a:ee: 15:c6:14:3b:d0:f4:93:ba:2b:1b:51:58:b3:f2:e6: e3:94:f6:11:e7:b2:c8:80:ca:b9:fb:95:0e:fc:10: 03:62:0f:e1:1c:85:6c:b1:12:2c:bd:39:0f:d3:66: 54:60:d9:30:0c:85:6c:ca:81:9c:cf:00:6a:a0:f0: 91:b7:7f:3d:8c:38:c6:dc:15:6f:05:57:cf:31:d2: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:00:F3:0B:E7:06:70:6F:E2:37:3C:7F:35:3D:67:75:83:EB:E7 X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:28:b9:5e:c9:85:b7:d1:f1:e4:e9:16:35:32:9b:6c:c8:38: 10:59:ee:56:bd:53:94:81:3d:a6:e7:9b:2c:82:07:66:30:70: 0a:09:49:a4:5e:47:43:8d:21:20:ce:86:60:01:c6:3a:09:76: ae:2e:50:62:4b:20:e6:d1:fb:e3:97:fc:b4:bd:1d:19:b8:2c: 0e:e6:ba:22:fb:16:f9:93:bf:10:10:2a:9e:71:7f:49:f1:8d: 78:12:dc:a2:9b:15:c9:2c:c5:8d:36:40:5e:43:68:cb:f6:35: fd:e7:c7:b7:f7:1b:2a:cd:84:10:48:66:47:85:38:af:a4:f3: c2:1b:38:bc:23:9a:e2:32:5c:f9:a7:ba:29:0d:a8:10:59:ee: 33:f7:dd:2d:2b:bf:f4:8e:36:b7:da:ba:92:13:63:1d:a9:d0: 44:3f:ae:8c:9c:8c:04:50:b3:c3:6a:1c:41:26:1e:b4:ce:81: f4:eb:86:c2:eb:27:df:ce:37:57:5a:1c:24:d3:fc:78:53:aa: fb:40:b9:56:b1:a9:c2:25:ca:98:4c:ea:4e:24:56:36:c6:9a: 40:39:72:52:8d:e5:34:21:15:10:29:6f:bd:14:5f:2c:20:e7: e7:a8:b4:8b:35:22:df:67:c8:19:bd:1e:fc:8d:b0:3d:fa:4a: d2:fe:3f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjUxMTA0MTczOTQwWhcNMjUxMTExMTczOTQwWjAYMRYwFAYD VQQDEw02OTBhM2E1ZC02MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssF01SNl2fyofbrx3iYxIQMLZs7HSoK9BPYg6xHUm96MC1U5HIX94OhvLQod EHLwXkrS9xRUxTMsvlU1NSiOmgioPmrWmvOaw79nNKCaEgqF8UD5/Th3YdjXhKDG AYnzQQAg3HnknVpG2kXj0N06qkGZljhdktLPqkRXefRRBBYWzKFKn8XMpwPM9rKL tVupjs+p0b6S10NC+/IPHJ1abFZByzZXX2jZDBBx/Zxl69fzGu4VxhQ70PSTuisb UViz8ubjlPYR57LIgMq5+5UO/BADYg/hHIVssRIsvTkP02ZUYNkwDIVsyoGczwBq oPCRt389jDjG3BVvBVfPMdKmrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4hAPML 5wZwb+I3PH81PWd1g+vnMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2KLleyYW30fHk6RY1MptsyDgQWe5WvVOUgT2m55ssggdmMHAKCUmk XkdDjSEgzoZgAcY6CXauLlBiSyDm0fvjl/y0vR0ZuCwO5roi+xb5k78QECqecX9J 8Y14EtyimxXJLMWNNkBeQ2jL9jX958e39xsqzYQQSGZHhTivpPPCGzi8I5riMlz5 p7opDagQWe4z990tK7/0jja32rqSE2MdqdBEP66MnIwEULPDahxBJh60zoH064bC 6yffzjdXWhwk0/x4U6r7QLlWsanCJcqYTOpOJFY2xppAOXJSjeU0IRUQKW+9FF8s IOfnqLSLNSLfZ8gZvR78jbA9+krS/j+R -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:33 2025 by rpki-client