$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: bQySmhMnOHCvoYXcgpXZAXo/tvBX6WU4B7Vo8aezcGk= Subject key identifier: 50:23:D0:13:42:A8:A1:E9:CC:42:C4:1E:4F:43:40:4D:36:F6:EA:B1 Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 0318 Signing time: Thu 21 May 2026 01:17:09 +0000 Manifest this update: Thu 21 May 2026 01:17:09 +0000 Manifest next update: Thu 28 May 2026 01:17:09 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: C1h29o7ceEqaBuqpujlu3P4YHiHWKFXq6M+1OUvVGSA=) 2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: pfFM49AewSnbYQOQYvGFBTcjUpW5EFPfC+P+FjjpnB4=) 3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +o+C/qUQzkMCGKd5HlBvgEOiBcnQ3aHh6w81utoZMtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: May 21 01:17:09 2026 GMT Not After : May 28 01:17:09 2026 GMT Subject: CN=6a0e5d15-e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:9c:ea:75:e9:74:bd:8a:f0:14:0d:f7:f7: 72:18:f2:43:5c:60:9b:19:23:f3:c8:5e:bb:53:19: 5c:5f:7a:97:ff:dd:96:6b:42:3f:38:dd:b4:ed:27: a7:5c:ac:98:16:8b:9c:fc:db:c4:2d:bf:6a:7c:44: 9e:2c:d5:98:51:64:64:f4:28:d1:bc:d8:3b:9f:d2: 3c:49:10:fe:32:2b:5c:39:22:a8:6d:3d:60:e2:33: 88:fd:d0:a2:b8:88:17:73:65:9d:eb:97:14:3f:a7: 93:86:09:12:b9:7c:57:49:70:1c:fb:2a:64:c3:67: cd:87:b1:61:43:c1:05:43:bc:07:a8:ee:8c:75:e6: f6:13:93:1e:06:dd:00:e2:95:3d:1e:f7:e1:b7:a4: 63:70:07:d3:6c:58:1f:aa:6f:35:04:6c:b0:a1:a2: ba:bc:74:6b:f5:18:f9:29:75:e3:7a:c1:c1:0b:98: fb:54:c3:69:16:22:1a:83:3e:af:7c:01:e4:c7:94: 70:cc:6e:70:26:06:ba:3d:c2:56:b0:9b:3f:be:44: cd:d9:da:75:4b:da:f4:0e:2c:34:46:0a:b5:99:4b: a3:47:6e:9b:cb:b3:e3:4d:57:d3:27:b4:f0:b7:1f: 80:0a:c9:b6:51:14:75:8b:0f:de:f4:a6:d6:79:b0: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:D0:13:42:A8:A1:E9:CC:42:C4:1E:4F:43:40:4D:36:F6:EA:B1 X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5d:6c:af:4e:94:35:57:f9:f4:fc:02:4c:d1:ed:be:1c:09: 24:76:66:4a:63:43:f2:78:d3:71:af:d6:0d:17:a2:5b:70:b6: 66:73:6a:9d:0a:ad:cc:70:ef:b9:05:23:fb:c1:47:da:89:13: 08:29:88:66:c3:22:1c:d3:46:e2:58:f5:50:4d:75:c4:6d:1a: 66:ca:7b:3a:4a:e3:c3:f9:b1:3c:1e:1e:09:f0:51:13:d9:4a: 89:ad:97:ee:2e:9c:f6:45:c9:57:06:56:e9:b8:46:98:e5:3c: 61:b0:09:39:bc:eb:c3:1e:c9:13:7b:c0:e0:5d:e9:a7:51:d6: b3:93:05:73:f6:7a:26:3a:d6:c0:95:e9:aa:b8:23:1e:3c:28: 89:44:3b:aa:9f:96:b5:cf:5d:a0:64:da:b6:45:87:9a:3d:3f: b8:77:71:9f:52:96:25:13:10:c5:42:f6:e5:ef:33:52:08:53: ad:11:9f:7f:ca:7f:25:d9:5d:11:38:95:dc:f5:ed:50:07:73: b1:9a:f4:33:10:20:45:2d:25:2c:e8:09:50:12:fd:a6:d5:3d: 2c:d2:a5:c3:af:0f:73:f8:a8:f2:3e:96:dd:7e:d4:93:1d:3c: 30:3c:52:43:8e:df:22:56:cf:f3:3e:a9:71:08:b2:c6:43:dd: 7c:2f:0a:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjYwNTIxMDExNzA5WhcNMjYwNTI4MDExNzA5WjAYMRYwFAYD VQQDEw02YTBlNWQxNS1lMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXqc6nXpdL2K8BQN9/dyGPJDXGCbGSPzyF67UxlcX3qX/92Wa0I/ON207Sen XKyYFouc/NvELb9qfESeLNWYUWRk9CjRvNg7n9I8SRD+MitcOSKobT1g4jOI/dCi uIgXc2Wd65cUP6eThgkSuXxXSXAc+ypkw2fNh7FhQ8EFQ7wHqO6Mdeb2E5MeBt0A 4pU9Hvfht6RjcAfTbFgfqm81BGywoaK6vHRr9Rj5KXXjesHBC5j7VMNpFiIagz6v fAHkx5RwzG5wJga6PcJWsJs/vkTN2dp1S9r0Diw0Rgq1mUujR26by7PjTVfTJ7Tw tx+ACsm2URR1iw/e9KbWebBbbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAj0BNC qKHpzELEHk9DQE029uqxMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO11sr06UNVf59PwCTNHtvhwJJHZmSmND8njTca/WDReiW3C2ZnNqnQqtzHDv uQUj+8FH2okTCCmIZsMiHNNG4lj1UE11xG0aZsp7Okrjw/mxPB4eCfBRE9lKia2X 7i6c9kXJVwZW6bhGmOU8YbAJObzrwx7JE3vA4F3pp1HWs5MFc/Z6JjrWwJXpqrgj HjwoiUQ7qp+Wtc9doGTatkWHmj0/uHdxn1KWJRMQxUL25e8zUghTrRGff8p/Jdld ETiV3PXtUAdzsZr0MxAgRS0lLOgJUBL9ptU9LNKlw68Pc/io8j6W3X7Ukx08MDxS Q47fIlbP8z6pcQiyxkPdfC8KPw== -----END CERTIFICATE-----Generated at Thu May 21 09:37:25 2026 by rpki-client