$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: hhy8VKYDX/sEMRD9mUo0fQKiQpHIjIiKCrMgo/0afYM= Subject key identifier: FA:D9:AA:C9:37:0E:5F:85:A3:E6:2A:37:53:1F:28:9C:26:07:48:D4 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 025A Signing time: Thu 21 May 2026 02:24:18 +0000 Manifest this update: Thu 21 May 2026 02:24:17 +0000 Manifest next update: Thu 28 May 2026 02:24:17 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: Ij6C2dj2c4CR4cZcekFjcF6adF0XcOdXn3riba9H/Zs=) 2: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: 0Sdkpie+7gAg3O3unZJoDbb5tUYnJKsnlgFztV27JM8=) 3: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: NFJ9aOnOJ1ce1G8RIXRSmmwTJR2+Vdaz9PP9KsiGnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: May 21 02:24:17 2026 GMT Not After : May 28 02:24:17 2026 GMT Subject: CN=6a0e6cd2-90a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:9a:da:f0:67:dd:aa:83:f1:d2:75:69:67: 51:13:39:13:8b:74:bb:2a:fe:3f:bb:23:6d:4c:07: 20:b6:99:a8:f7:56:62:fd:19:65:42:d2:91:ee:c9: 32:19:fb:6b:25:bc:04:ba:b4:87:92:e2:a6:14:9b: a1:de:c4:e9:7a:6f:71:86:4c:8b:df:ab:69:21:c4: d4:7b:1b:5e:9b:af:6b:cb:f8:af:c4:47:61:80:db: 5c:64:11:77:2a:5e:a5:ae:9e:41:81:10:56:4c:b3: f7:c4:8e:43:12:2a:46:ae:7b:13:3b:fc:7c:2c:e0: 48:c3:74:a5:2e:16:c3:2a:7b:8c:1c:99:9b:d6:6a: 38:1a:7b:f8:ab:4d:42:9a:72:6e:d9:77:0c:84:33: e5:13:d7:e6:10:10:6f:4a:f0:51:77:68:70:63:8a: fc:f7:55:92:13:2c:1d:d8:3e:85:0c:7e:91:2e:25: 5b:0b:92:5b:77:11:87:7d:b6:46:0a:dc:01:99:53: fd:54:13:c8:20:cb:c3:82:26:30:7f:97:92:d2:6b: 4b:48:9b:7c:4c:0b:e6:28:9f:0e:63:e2:71:de:01: 26:d2:cf:48:b8:46:89:a4:46:e5:cb:8f:f9:85:c9: 4d:38:24:8b:32:37:c9:be:f3:27:af:ce:74:e0:57: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:AA:C9:37:0E:5F:85:A3:E6:2A:37:53:1F:28:9C:26:07:48:D4 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fc:1f:6d:b5:28:b2:dd:a4:02:c7:ef:58:15:eb:3f:8a:c6: 6e:b4:d8:2d:4e:2a:13:e6:98:7b:14:70:54:dc:83:d7:f1:8b: e2:15:35:dd:90:b0:31:22:a9:0e:09:19:bc:44:62:24:05:18: fb:8e:fc:7c:8d:8f:22:af:c7:1b:e4:27:f3:df:67:ae:48:14: 22:1f:96:be:14:c4:ba:99:18:6e:29:d1:ee:b4:7c:a3:8a:81: 16:08:1a:a4:cf:1c:f3:4f:21:02:8a:83:34:b2:9b:ba:ea:b5: 27:ec:09:fd:e5:fd:03:7b:84:9f:1b:b1:39:92:a0:c5:6d:ff: fb:ed:65:98:ef:ac:94:7b:b9:9c:d2:63:3c:d5:e3:fe:f1:f1: 9e:c4:35:96:66:52:33:6a:2a:23:c1:66:5f:fb:06:4d:26:91: 4c:53:12:d7:dc:bc:98:ac:67:4e:aa:a6:dd:94:09:c9:be:4e: c9:b1:cc:95:91:31:fe:b8:ac:05:52:9e:06:51:02:b5:ee:3b: 16:1a:0a:7d:c6:2a:78:0a:28:bc:37:e5:a7:cd:47:f0:81:2b: 89:97:98:22:4f:a3:e5:7e:2b:9a:b8:51:3b:74:e7:cf:63:38: ee:8e:73:94:8d:a2:e6:67:13:0a:31:a9:11:e7:18:aa:8c:e7: 31:7b:71:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjYwNTIxMDIyNDE3WhcNMjYwNTI4MDIyNDE3WjAYMRYwFAYD VQQDEw02YTBlNmNkMi05MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWya2vBn3aqD8dJ1aWdREzkTi3S7Kv4/uyNtTAcgtpmo91Zi/RllQtKR7sky GftrJbwEurSHkuKmFJuh3sTpem9xhkyL36tpIcTUextem69ry/ivxEdhgNtcZBF3 Kl6lrp5BgRBWTLP3xI5DEipGrnsTO/x8LOBIw3SlLhbDKnuMHJmb1mo4Gnv4q01C mnJu2XcMhDPlE9fmEBBvSvBRd2hwY4r891WSEywd2D6FDH6RLiVbC5JbdxGHfbZG CtwBmVP9VBPIIMvDgiYwf5eS0mtLSJt8TAvmKJ8OY+Jx3gEm0s9IuEaJpEbly4/5 hclNOCSLMjfJvvMnr8504FflVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrZqsk3 Dl+Fo+YqN1MfKJwmB0jUMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/wfbbUost2kAsfvWBXrP4rGbrTYLU4qE+aYexRwVNyD1/GL4hU13ZCwMSKp DgkZvERiJAUY+478fI2PIq/HG+Qn899nrkgUIh+WvhTEupkYbinR7rR8o4qBFgga pM8c808hAoqDNLKbuuq1J+wJ/eX9A3uEnxuxOZKgxW3/++1lmO+slHu5nNJjPNXj /vHxnsQ1lmZSM2oqI8FmX/sGTSaRTFMS19y8mKxnTqqm3ZQJyb5OybHMlZEx/ris BVKeBlECte47FhoKfcYqeAoovDflp81H8IEriZeYIk+j5X4rmrhRO3Tnz2M47o5z lI2i5mcTCjGpEecYqoznMXtxoQ== -----END CERTIFICATE-----Generated at Thu May 21 10:18:05 2026 by rpki-client