$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: WONrXOAwlqlyclMMaUGmpToENcuHjNE6h+N/GCc+QAM= Subject key identifier: 9B:F8:9E:4E:7A:55:A8:53:CA:BC:F9:A3:10:CC:1F:58:2D:0F:F6:11 Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 024A Signing time: Tue 15 Apr 2025 01:32:36 +0000 Manifest this update: Tue 15 Apr 2025 01:32:36 +0000 Manifest next update: Tue 22 Apr 2025 01:32:36 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: an3TLQgZ89lvY+I9083J98NmztMf7oPI5TxTIdLh26g=) 2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=) 3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Apr 15 01:32:36 2025 GMT Not After : Apr 22 01:32:36 2025 GMT Subject: CN=67fdb734-eaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:48:77:bf:99:b3:1e:22:7c:c9:13:b3:ae: e2:a7:17:c3:1e:d9:f6:85:af:e3:fe:1e:a0:14:fc: 87:83:f7:95:df:25:f2:60:6c:b4:63:8f:08:37:06: 12:7b:63:a5:cd:ab:50:25:54:ed:b6:56:e7:78:83: 86:48:cd:2b:12:01:00:3c:06:dd:4c:c1:4d:fe:60: d4:56:d8:d0:0a:c7:40:f3:66:73:7a:cd:91:51:b2: f1:7d:ed:45:de:5e:5e:0d:c2:84:de:a4:59:e2:28: 94:21:58:2f:9f:51:6a:25:e6:ed:b2:18:df:4e:b5: 66:a5:9f:68:aa:7c:8e:7c:7b:61:31:6a:9c:22:51: 62:54:5d:3f:74:d5:53:4e:5b:af:ca:e3:c7:44:eb: 16:1d:04:0d:79:ca:88:a5:f6:79:14:48:70:40:f3: 04:f9:58:bd:fe:ee:eb:98:40:83:23:fa:0e:ea:6a: 2f:da:19:4a:25:fb:4b:89:07:87:72:7b:a7:fc:2a: 7a:11:53:87:ae:d2:73:0f:f0:6b:dc:1d:60:fb:9d: 8c:d2:65:f9:a0:3d:ea:99:34:b5:63:67:1f:b8:02: ed:4f:af:03:a0:81:72:51:9a:3d:96:5b:7a:39:70: e1:d6:eb:52:c5:6a:dd:16:27:92:9d:91:d6:aa:c4: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F8:9E:4E:7A:55:A8:53:CA:BC:F9:A3:10:CC:1F:58:2D:0F:F6:11 X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:78:ac:50:7d:57:69:c0:00:40:3b:25:fb:5b:b8:28:a2: 62:1b:13:7b:d4:e3:cc:e4:38:81:9f:10:2d:c9:e3:5a:dc:f0: 69:9b:29:a5:73:c6:38:9e:b1:fd:03:0c:1e:90:24:0c:d0:9a: 49:e0:02:9a:29:c2:c9:e6:ff:c3:94:e8:85:86:d4:c2:d4:a8: 1f:8d:3d:81:b1:42:fb:0f:22:6a:4a:5b:66:21:79:c0:2d:3a: d0:c9:03:d8:22:5e:2f:b4:a2:6f:51:3a:16:78:07:e4:90:67: fa:0d:06:2c:51:1e:33:4a:45:2c:b9:e3:93:a4:73:d5:5f:a4: 83:4d:6f:a2:0a:61:1d:75:07:87:35:14:79:fc:d9:a8:a7:39: 22:b8:a8:16:08:d6:a4:b3:2b:25:f5:dd:da:be:f0:d9:f9:9f: ed:4a:36:a2:bb:af:ab:37:f7:87:fd:a8:c9:c4:fe:04:4a:99: 8e:b2:6a:bb:7c:5b:90:3b:a8:01:dc:25:86:8d:a1:17:26:1d: 48:26:e6:05:5c:e1:89:aa:28:15:c3:3c:a6:13:66:99:12:72: 0c:44:6a:d7:2e:9d:4b:9a:fd:c3:c3:d8:f5:05:02:ec:ed:cb: 6c:d1:fa:2e:d3:6c:a8:78:92:2d:f6:23:10:94:1d:94:c4:64: ce:93:f7:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjUwNDE1MDEzMjM2WhcNMjUwNDIyMDEzMjM2WjAYMRYwFAYD VQQDEw02N2ZkYjczNC1lYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP1Id7+Zsx4ifMkTs67ipxfDHtn2ha/j/h6gFPyHg/eV3yXyYGy0Y48INwYS e2OlzatQJVTttlbneIOGSM0rEgEAPAbdTMFN/mDUVtjQCsdA82Zzes2RUbLxfe1F 3l5eDcKE3qRZ4iiUIVgvn1FqJebtshjfTrVmpZ9oqnyOfHthMWqcIlFiVF0/dNVT TluvyuPHROsWHQQNecqIpfZ5FEhwQPME+Vi9/u7rmECDI/oO6mov2hlKJftLiQeH cnun/Cp6EVOHrtJzD/Br3B1g+52M0mX5oD3qmTS1Y2cfuALtT68DoIFyUZo9llt6 OXDh1utSxWrdFieSnZHWqsRIwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJv4nk56 VahTyrz5oxDMH1gtD/YRMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Y3isUH1XacAAQDsl+1u4KKJiGxN71OPM5DiBnxAtyeNa3PBpmyml c8Y4nrH9AwwekCQM0JpJ4AKaKcLJ5v/DlOiFhtTC1KgfjT2BsUL7DyJqSltmIXnA LTrQyQPYIl4vtKJvUToWeAfkkGf6DQYsUR4zSkUsueOTpHPVX6SDTW+iCmEddQeH NRR5/NmopzkiuKgWCNaksysl9d3avvDZ+Z/tSjaiu6+rN/eH/ajJxP4ESpmOsmq7 fFuQO6gB3CWGjaEXJh1IJuYFXOGJqigVwzymE2aZEnIMRGrXLp1Lmv3Dw9j1BQLs 7cts0fou02yoeJIt9iMQlB2UxGTOk/fq -----END CERTIFICATE-----Generated at Tue Apr 15 20:16:34 2025 by rpki-client