$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: tnb9d1gRB4GgHfc6A/0m99/KgnTcz9RJlmKk/9nLabE= Subject key identifier: 85:E4:5A:CE:D9:A3:D9:2C:A1:D5:6D:9B:53:91:64:FB:9B:2B:11:98 Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 028A Signing time: Thu 21 Aug 2025 01:51:15 +0000 Manifest this update: Thu 21 Aug 2025 01:51:15 +0000 Manifest next update: Thu 28 Aug 2025 01:51:15 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: BdZE4tQwSsoAT1odXegAQcmQqK+gIPFIwkRVR3Mt8FY=) 2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=) 3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Aug 21 01:51:15 2025 GMT Not After : Aug 28 01:51:15 2025 GMT Subject: CN=68a67b93-45a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:c8:c2:0c:0c:b5:8b:00:ac:52:50:d0:26: b7:cd:00:96:5c:06:1d:ba:d9:46:47:34:48:27:74: c7:88:d1:94:e4:f2:bd:ca:c3:ff:60:1a:4a:8d:84: 11:73:de:cd:10:be:d6:54:db:bb:da:8e:1a:c9:ab: 55:4a:57:e8:56:7b:d6:64:bc:78:8c:8f:29:99:f3: 05:68:e9:d7:77:a2:a1:aa:ee:7d:50:ef:44:77:1b: e6:4f:c2:cf:b9:11:b6:a6:12:85:d1:c0:b4:63:aa: 46:b0:2e:cc:ce:42:75:aa:df:3e:82:07:46:fe:cb: 74:07:09:c0:79:97:d4:b5:83:c5:d9:c6:ef:fd:89: 13:7e:d9:11:97:0a:4a:bf:d5:83:87:b3:2a:9e:c2: 80:aa:4e:0a:28:bc:ad:3c:a3:5f:c4:0b:41:3d:9e: 80:4c:e1:bd:7d:6d:23:d0:a8:b9:36:40:d0:7a:b4: 0c:88:49:3b:b6:8d:91:aa:a0:07:6d:3f:a0:eb:e9: d1:90:12:97:80:90:32:73:cc:ab:65:bd:12:3d:b6: a3:33:78:b4:5a:8c:7c:43:e7:25:b2:e8:8a:31:1d: de:2a:26:00:48:82:2e:4d:28:06:e0:72:f9:67:88: 2a:90:4c:03:2b:58:fb:53:aa:51:66:69:a4:9d:7e: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E4:5A:CE:D9:A3:D9:2C:A1:D5:6D:9B:53:91:64:FB:9B:2B:11:98 X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:da:4a:4f:9a:9e:d2:4f:7b:cb:56:d2:86:30:1d:a6:9f: c4:0c:bd:07:8c:97:5d:b5:65:9d:25:48:9b:3e:be:28:58:1d: b9:0d:55:cb:4d:69:7b:fe:ab:88:34:2c:21:8f:99:76:a4:07: 60:b9:51:ed:20:91:92:17:21:83:48:14:2d:fc:29:39:ef:d6: 27:56:5a:5d:cc:c1:56:03:43:66:1d:fe:80:83:3f:63:d7:ef: 88:56:06:43:2d:31:44:82:b7:7d:d4:37:4c:30:8e:06:e1:84: 91:f1:6f:bf:94:e7:ca:db:18:07:26:ab:6a:4c:c1:bc:c5:c8: 80:68:e0:da:89:8b:6e:ff:88:45:c2:ef:da:11:0a:55:dd:f3: 7a:ff:94:b0:7f:41:62:3d:7c:ab:97:34:d4:34:2f:4f:13:e7: 22:92:d5:e2:a9:a5:87:3a:06:fa:3b:31:17:ca:54:2c:ed:8d: 96:4d:c6:66:b4:e9:42:ab:fe:92:a5:17:60:49:bd:2e:e7:c3: da:1d:31:12:fc:46:e5:90:9d:c8:d9:ae:b5:4d:4a:ea:3d:f6: 3e:e6:e8:59:49:15:03:ce:ba:70:8e:36:51:83:6a:86:60:b0: 09:7f:d4:10:10:39:98:d6:0e:4a:72:3a:06:f4:e9:e6:25:87: c8:4b:fc:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjUwODIxMDE1MTE1WhcNMjUwODI4MDE1MTE1WjAYMRYwFAYD VQQDEw02OGE2N2I5My00NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjnIwgwMtYsArFJQ0Ca3zQCWXAYdutlGRzRIJ3THiNGU5PK9ysP/YBpKjYQR c97NEL7WVNu72o4ayatVSlfoVnvWZLx4jI8pmfMFaOnXd6Khqu59UO9EdxvmT8LP uRG2phKF0cC0Y6pGsC7MzkJ1qt8+ggdG/st0BwnAeZfUtYPF2cbv/YkTftkRlwpK v9WDh7MqnsKAqk4KKLytPKNfxAtBPZ6ATOG9fW0j0Ki5NkDQerQMiEk7to2RqqAH bT+g6+nRkBKXgJAyc8yrZb0SPbajM3i0Wox8Q+clsuiKMR3eKiYASIIuTSgG4HL5 Z4gqkEwDK1j7U6pRZmmknX6UawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXkWs7Z o9ksodVtm1ORZPubKxGYMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMbdpKT5qe0k97y1bShjAdpp/EDL0HjJddtWWdJUibPr4oWB25DVXL TWl7/quINCwhj5l2pAdguVHtIJGSFyGDSBQt/Ck579YnVlpdzMFWA0NmHf6Agz9j 1++IVgZDLTFEgrd91DdMMI4G4YSR8W+/lOfK2xgHJqtqTMG8xciAaODaiYtu/4hF wu/aEQpV3fN6/5Swf0FiPXyrlzTUNC9PE+ciktXiqaWHOgb6OzEXylQs7Y2WTcZm tOlCq/6SpRdgSb0u58PaHTES/EblkJ3I2a61TUrqPfY+5uhZSRUDzrpwjjZRg2qG YLAJf9QQEDmY1g5KcjoG9OnmJYfIS/w4 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client