$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: +jLXCr/qfHVxvjM8sJ5YgfiXPt3UnO5cbYuU+uQMbbg= Subject key identifier: F6:EB:09:A3:3D:3B:B0:B4:1D:D9:41:97:2E:91:2B:2F:19:6A:32:3E Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 028B Signing time: Sat 23 Aug 2025 01:54:38 +0000 Manifest this update: Sat 23 Aug 2025 01:54:37 +0000 Manifest next update: Sat 30 Aug 2025 01:54:37 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: YKQMqyYs+EqJLGmlgNH/KGns3Z/3Q0TOcAqkyYrjs1Y=) 2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=) 3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Aug 23 01:54:37 2025 GMT Not After : Aug 30 01:54:37 2025 GMT Subject: CN=68a91f5e-5254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:66:6b:be:89:85:88:cb:c7:67:6a:da:97: 0e:94:52:79:17:c5:0f:bf:75:c2:10:4f:d1:96:3a: 30:d5:e6:5a:0d:27:89:96:82:09:8f:3e:cb:10:63: 18:80:2d:6c:4f:1e:89:4d:38:9b:4d:db:4c:ff:f0: ff:18:74:7a:01:fe:1e:d8:39:64:78:b7:70:c7:d8: f0:c1:2e:fa:fa:6a:4c:85:a6:33:95:b7:c5:7c:33: 5c:3c:8d:74:85:79:ed:fa:01:36:7a:32:eb:ee:26: 32:40:63:1b:88:0a:c0:c8:e4:c3:16:87:1a:0d:c0: cc:be:6b:38:55:e6:10:8f:02:86:28:8a:08:93:f5: 39:38:9b:9f:7e:1a:18:8b:d6:6d:66:3b:d9:c2:1d: cd:04:f8:0b:30:9f:6a:12:91:6b:97:1a:ae:8d:0e: 7a:32:e2:f5:f8:af:97:e2:3a:66:01:6e:4b:3e:69: 5c:3f:2d:ff:42:8f:b4:0f:e9:86:b7:24:4a:96:5d: 2d:a1:0f:05:14:00:01:02:6c:5f:ed:96:3f:41:2f: f1:b3:a8:b9:a8:09:8d:66:0b:28:15:9e:79:81:0a: 45:d8:d6:e2:aa:1e:b7:4a:a7:87:9b:d0:52:36:9a: b7:49:14:d6:51:8d:9d:b4:6e:f0:5e:f7:ee:4e:ae: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EB:09:A3:3D:3B:B0:B4:1D:D9:41:97:2E:91:2B:2F:19:6A:32:3E X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:54:cb:0d:6b:b3:80:e4:31:b4:a8:28:9e:6b:8c:9c:22: 2e:f0:7f:82:05:d5:17:89:51:32:ed:4c:b2:3d:17:79:6c:b7: 8a:3a:0b:3c:68:8c:92:7a:f1:c4:42:b3:65:62:c6:7d:42:7b: a9:aa:02:85:b8:c6:90:18:ff:b5:70:cf:9d:48:2e:09:3c:4d: 8c:f6:73:77:65:53:fe:34:48:df:f6:6b:2b:32:9c:9d:8a:00: 01:78:2d:6d:cd:4e:28:4f:e0:35:cd:df:6f:34:ea:73:5b:fb: 50:11:8a:8a:33:69:4e:31:45:dc:ee:d5:2b:32:cf:1d:44:9f: d8:30:87:ae:66:32:67:41:c0:52:4c:c9:3c:2a:60:29:e2:9e: 76:86:08:46:55:0c:98:13:88:7a:1a:12:3a:fa:c1:32:2b:2a: 55:73:84:2d:87:3f:0b:e4:a9:d1:94:bc:12:71:f7:b6:01:5e: b3:6b:b2:9c:8e:d4:d1:db:09:cb:fb:00:29:e9:9c:e5:16:b8: 65:25:f8:ff:66:44:f4:81:46:a9:00:39:15:65:52:c3:cb:c3: 1b:d1:84:de:c3:8f:a1:8b:b7:ea:70:92:76:a7:fa:34:82:67: 2c:69:97:a6:94:ab:b5:09:06:fd:77:3e:1f:fc:46:d4:a8:0e: 4d:7c:4c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjUwODIzMDE1NDM3WhcNMjUwODMwMDE1NDM3WjAYMRYwFAYD VQQDEw02OGE5MWY1ZS01MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufNma76JhYjLx2dq2pcOlFJ5F8UPv3XCEE/Rljow1eZaDSeJloIJjz7LEGMY gC1sTx6JTTibTdtM//D/GHR6Af4e2DlkeLdwx9jwwS76+mpMhaYzlbfFfDNcPI10 hXnt+gE2ejLr7iYyQGMbiArAyOTDFocaDcDMvms4VeYQjwKGKIoIk/U5OJuffhoY i9ZtZjvZwh3NBPgLMJ9qEpFrlxqujQ56MuL1+K+X4jpmAW5LPmlcPy3/Qo+0D+mG tyRKll0toQ8FFAABAmxf7ZY/QS/xs6i5qAmNZgsoFZ55gQpF2Nbiqh63SqeHm9BS Npq3SRTWUY2dtG7wXvfuTq5tUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbrCaM9 O7C0HdlBly6RKy8ZajI+MB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6FVTLDWuzgOQxtKgonmuMnCIu8H+CBdUXiVEy7UyyPRd5bLeKOgs8 aIySevHEQrNlYsZ9QnupqgKFuMaQGP+1cM+dSC4JPE2M9nN3ZVP+NEjf9msrMpyd igABeC1tzU4oT+A1zd9vNOpzW/tQEYqKM2lOMUXc7tUrMs8dRJ/YMIeuZjJnQcBS TMk8KmAp4p52hghGVQyYE4h6GhI6+sEyKypVc4Qthz8L5KnRlLwScfe2AV6za7Kc jtTR2wnL+wAp6ZzlFrhlJfj/ZkT0gUapADkVZVLDy8Mb0YTew4+hi7fqcJJ2p/o0 gmcsaZemlKu1CQb9dz4f/EbUqA5NfEwa -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:02 2025 by rpki-client