$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: Kus5Fx3m461dZZt45A3/UN72gSO9tLjJjsxRci6IduY= Subject key identifier: 35:6D:20:D3:F0:87:22:AD:02:75:AF:7B:D3:CC:6D:40:29:B9:07:8C Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 0249 Signing time: Fri 17 Apr 2026 02:16:15 +0000 Manifest this update: Fri 17 Apr 2026 02:16:14 +0000 Manifest next update: Fri 24 Apr 2026 02:16:14 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: mFWBcqB4M5DikBFRMQ/uNA0vU1UTxKujK7GVcxbm/8A=) 2: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: 0Sdkpie+7gAg3O3unZJoDbb5tUYnJKsnlgFztV27JM8=) 3: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: NFJ9aOnOJ1ce1G8RIXRSmmwTJR2+Vdaz9PP9KsiGnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Apr 17 02:16:14 2026 GMT Not After : Apr 24 02:16:14 2026 GMT Subject: CN=69e197ef-8a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:f2:43:11:7a:31:f0:8c:9a:db:27:23:50: 04:11:92:5a:da:09:d2:e6:81:97:4b:e2:f2:1a:7d: 50:0e:db:77:87:b4:fc:66:74:e2:5d:18:a2:89:d2: 57:0d:1c:2d:f9:d3:d1:0e:47:2f:ac:7c:2c:06:76: 8b:8a:80:f2:05:0e:21:49:a1:b9:96:8d:50:fa:73: b7:7b:35:7e:12:40:cc:db:c7:dd:04:dc:64:38:3f: 5e:17:8b:e8:65:01:ae:d5:cb:b1:45:31:ae:76:30: 5f:91:19:8e:93:ed:9d:19:61:e9:b0:dc:7b:bd:f5: e1:e3:c4:33:11:8e:3e:bd:3c:52:50:82:c7:bf:12: 9a:73:f4:4e:88:08:9e:8e:94:5a:75:1f:61:f5:59: c5:86:92:3e:67:62:2b:df:9c:50:28:2d:dc:42:29: ad:ac:23:0d:07:e3:1e:4a:63:6f:2e:e7:7a:b4:f1: eb:9b:00:b1:11:5a:7e:da:82:42:5c:5c:90:bb:6d: 7e:6a:8e:e1:fb:d1:10:39:6e:c4:de:8f:5d:d1:de: c9:7a:69:39:e5:d3:6f:21:88:cf:66:09:91:1d:58: fb:8c:a1:9a:8c:32:ea:22:32:8e:b2:6c:da:b6:a5: 30:f9:0f:15:ef:bd:10:da:71:89:78:29:cd:38:4b: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:20:D3:F0:87:22:AD:02:75:AF:7B:D3:CC:6D:40:29:B9:07:8C X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3d:22:fd:bd:51:84:5c:9d:54:d0:2d:ee:94:9d:a1:8b:6e: 58:f6:48:8b:94:00:ff:a7:b1:88:d8:07:18:0c:d9:83:91:1c: de:9e:13:61:06:45:a3:da:a3:d7:34:b6:f0:a2:af:0b:ef:03: f5:9a:f9:d8:8d:42:de:a6:13:8b:1c:39:75:76:71:34:d0:7a: 09:34:5d:6e:3b:e9:0c:ad:0a:12:be:77:ac:ce:04:c2:0a:1a: fc:31:c7:7f:82:9a:aa:42:46:00:ab:16:8d:01:22:b8:db:e5: 73:f5:5b:b3:09:48:c7:f4:48:77:1d:59:a8:58:6a:90:dc:f9: d3:b7:ca:4b:f6:05:ae:e3:70:3a:2c:64:bb:a1:0e:4f:63:a2: 69:0b:5c:a2:10:d2:ae:64:8f:f3:e8:69:03:aa:08:d4:38:83: 0b:1c:1f:84:62:ae:34:10:9f:de:f1:da:0f:60:f0:ba:1f:ec: 1f:79:70:f8:1c:55:6b:49:66:ed:c9:a2:e3:8a:1d:da:f2:35: ba:ac:9c:97:ea:b7:d7:40:86:a9:2d:b3:33:a6:93:bd:8d:4a: fe:87:65:90:9d:79:57:df:3c:af:a8:7a:77:71:15:47:91:5b: 16:d7:3e:c0:13:00:66:2a:88:b7:1b:37:33:c3:ee:48:b8:41: 3f:7d:d3:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjYwNDE3MDIxNjE0WhcNMjYwNDI0MDIxNjE0WjAYMRYwFAYD VQQDEw02OWUxOTdlZi04YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU7yQxF6MfCMmtsnI1AEEZJa2gnS5oGXS+LyGn1QDtt3h7T8ZnTiXRiiidJX DRwt+dPRDkcvrHwsBnaLioDyBQ4hSaG5lo1Q+nO3ezV+EkDM28fdBNxkOD9eF4vo ZQGu1cuxRTGudjBfkRmOk+2dGWHpsNx7vfXh48QzEY4+vTxSUILHvxKac/ROiAie jpRadR9h9VnFhpI+Z2Ir35xQKC3cQimtrCMNB+MeSmNvLud6tPHrmwCxEVp+2oJC XFyQu21+ao7h+9EQOW7E3o9d0d7Jemk55dNvIYjPZgmRHVj7jKGajDLqIjKOsmza tqUw+Q8V770Q2nGJeCnNOEu5EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVtINPw hyKtAnWve9PMbUApuQeMMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAT0i/b1RhFydVNAt7pSdoYtuWPZIi5QA/6exiNgHGAzZg5Ec3p4TYQZFo9qj 1zS28KKvC+8D9Zr52I1C3qYTixw5dXZxNNB6CTRdbjvpDK0KEr53rM4Ewgoa/DHH f4KaqkJGAKsWjQEiuNvlc/VbswlIx/RIdx1ZqFhqkNz507fKS/YFruNwOixku6EO T2OiaQtcohDSrmSP8+hpA6oI1DiDCxwfhGKuNBCf3vHaD2Dwuh/sH3lw+BxVa0lm 7cmi44od2vI1uqycl+q310CGqS2zM6aTvY1K/odlkJ15V988r6h6d3EVR5FbFtc+ wBMAZiqItxs3M8PuSLhBP33TEg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:55:44 2026 by rpki-client