
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier: bpPSfQP+n7xGPy4xbI8/EBINMoa/KpqamJqwzQL5Hc8=
Subject key identifier: 02:F8:3C:FD:AD:11:9D:56:5E:B9:07:A9:89:7B:83:E5:D1:FD:AF:91
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial: 0356
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number: 0346
Signing time: Wed 19 Aug 2026 01:22:55 +0000
Manifest this update: Wed 19 Aug 2026 01:22:55 +0000
Manifest next update: Wed 26 Aug 2026 01:22:55 +0000
Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: RtWbVm3bfPqwsF9NROvPGbOMDsB//atjd0dmuwb8DDE=)
2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: pfFM49AewSnbYQOQYvGFBTcjUpW5EFPfC+P+FjjpnB4=)
3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +o+C/qUQzkMCGKd5HlBvgEOiBcnQ3aHh6w81utoZMtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Validity
Not Before: Aug 19 01:22:55 2026 GMT
Not After : Aug 26 01:22:55 2026 GMT
Subject: CN=6a85056f-b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:14:59:ee:26:50:d8:da:ed:b1:94:82:75:
01:db:9e:59:06:b7:31:91:e0:5e:71:eb:64:e3:eb:
80:a2:ea:5c:aa:62:ad:58:c7:8d:bd:9c:a4:ba:5a:
5d:74:94:35:0a:b2:e8:b2:85:a9:7b:b3:eb:cf:8d:
7e:7a:d9:91:e3:f4:4a:1f:e8:f5:c3:62:37:ff:90:
2b:48:96:e4:f3:0b:e8:d2:9b:5a:b2:6a:d1:a5:4c:
28:cf:63:99:12:aa:2f:e1:95:31:16:07:bc:0b:b5:
35:a9:98:3d:f1:96:af:e1:33:25:d0:3c:41:6e:8d:
49:f3:24:36:a5:1e:be:f4:09:3c:53:d5:fb:15:a8:
03:f6:3f:13:3c:e2:03:cd:69:38:ee:e4:14:33:3d:
c8:8a:09:41:65:83:b4:d8:ed:50:c9:4d:6a:78:22:
68:bf:c0:c6:b0:f3:7f:23:c6:f2:45:99:2f:ad:57:
61:0f:66:db:7d:1a:04:64:1b:89:ad:0b:6b:25:36:
32:da:02:1c:30:f0:7f:f2:a3:4c:7f:7d:49:80:15:
bc:32:fd:b0:dc:35:f5:a3:02:15:13:b9:49:52:4f:
0b:aa:00:36:33:6c:da:f2:f3:de:04:13:b8:3c:a5:
1c:2c:ea:d1:67:e9:68:25:57:31:8d:f5:ea:98:a9:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:3C:FD:AD:11:9D:56:5E:B9:07:A9:89:7B:83:E5:D1:FD:AF:91
X509v3 Authority Key Identifier:
keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:8b:83:db:22:31:b8:ea:ed:c5:e9:dc:ac:63:eb:66:b2:48:
57:61:38:d3:f8:87:1c:0a:fa:81:cc:c1:bd:dc:fa:fc:d9:5a:
15:3b:46:60:7c:69:bd:42:bf:ad:80:07:03:a8:de:8e:1d:08:
07:cb:ea:d5:01:c5:9a:e3:fc:78:32:20:c2:b3:11:18:ea:60:
73:01:c5:7f:0c:86:db:e9:6e:02:8d:08:76:34:90:95:47:ea:
08:e7:49:e0:e6:30:38:28:ae:91:1e:31:96:22:95:78:94:4d:
d3:58:fd:75:af:6c:f3:0f:1f:16:ac:ef:b7:8e:a7:bf:b3:b9:
94:6d:aa:69:97:ea:e6:24:e2:71:80:52:2f:61:f1:0e:71:49:
cd:fc:9c:f8:7f:98:83:68:13:09:b6:ad:11:18:44:37:8d:75:
77:c9:af:11:c4:cc:50:a8:8e:ce:55:26:5a:71:15:42:e2:64:
2d:08:98:4c:6a:2a:2d:47:06:db:2f:10:77:d3:a9:b3:4b:33:
83:66:d6:ed:c6:82:6b:3d:6c:51:e2:41:74:09:aa:c4:ba:04:
7b:71:77:8d:66:86:12:f5:d3:8d:a6:9d:e4:fe:84:6f:c8:0b:
ec:85:0e:fb:2a:df:a5:71:ba:b4:db:a2:47:79:9f:3a:08:7c:
6a:0f:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:39 2026 by rpki-client