$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: lNBDGnasGCGAIBBUmqxadWmba+4U5ZmvYkKpb+CFJQ8= Subject key identifier: C7:62:A9:D6:65:BD:72:04:6A:C8:73:10:67:06:81:5B:B5:7C:B8:3E Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 0359 Signing time: Mon 21 Sep 2026 00:45:03 +0000 Manifest this update: Mon 21 Sep 2026 00:45:03 +0000 Manifest next update: Mon 28 Sep 2026 00:45:03 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: eZhrbnmege13Gc98vuzh6Na6iAtU+ts3AMUdfAhzeQU=) 2: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: ny+peatocik5gyQBXSnN29JmEus6VTTlcTUer1clVSM=) 3: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: kw1yUd7ndkpzKEdE8Z4fgfnxfU5sx/M0DmArKCfDvFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Sep 21 00:45:03 2026 GMT Not After : Sep 28 00:45:03 2026 GMT Subject: CN=6ab07e0f-6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:35:a7:8b:68:e1:fc:0c:c3:51:d0:af:a6: 72:9b:09:f6:eb:9c:8d:0e:46:d2:6e:23:37:fa:a2: 81:9e:df:83:fb:b5:2e:c4:6a:c8:ad:fb:5d:a6:dd: d2:85:76:d3:35:01:c7:f0:af:27:86:8b:e8:b9:27: 17:6f:3f:ad:03:6b:f6:0b:96:07:6c:0f:c7:cb:8b: 66:ac:07:0f:ad:f7:bc:81:b7:d2:e3:c6:65:f1:6e: 35:83:1e:b3:43:bf:dd:b6:fc:9f:dc:df:2e:7e:ef: 66:e7:01:b3:60:4d:38:7e:cf:5b:5c:eb:c7:46:4c: 33:f7:b9:9f:2a:75:13:aa:3c:94:49:a2:d5:54:4b: 27:a8:e2:85:b1:94:a1:a5:72:8d:b4:5c:f4:ab:88: c3:f6:37:f7:0e:aa:54:89:db:8b:2c:06:11:58:72: cb:4a:68:79:04:36:9c:97:a9:b1:ca:82:e3:c3:ed: 1d:4f:df:23:de:ad:0f:8b:26:b1:4c:20:0a:97:9b: 34:b4:85:c2:ed:95:5e:fc:aa:1b:b5:0b:49:fa:d7: e5:e3:58:e3:e5:80:c7:11:5f:b2:6b:b8:07:2f:9b: c6:09:b8:c4:60:72:68:bb:7f:e4:16:20:6f:92:3a: c4:15:99:f7:e8:54:3a:ca:80:d7:93:1e:c2:d6:da: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:A9:D6:65:BD:72:04:6A:C8:73:10:67:06:81:5B:B5:7C:B8:3E X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f2:d6:aa:1f:69:ab:3f:79:8b:e7:cb:65:1c:98:5f:68:89: 58:b0:b9:81:1f:89:86:58:a1:13:bf:b3:75:a9:83:44:0e:cc: 3a:0e:11:93:0d:04:42:84:e7:3b:87:42:bd:13:ac:24:e7:fb: f3:32:0d:80:51:b2:bc:54:98:1b:62:21:7d:0d:e2:56:be:79: aa:ba:90:66:89:69:ce:f1:c3:fb:93:99:c0:40:62:38:69:5f: 4c:1d:5f:23:5f:45:db:df:18:02:9d:07:c1:57:43:d8:53:be: 6f:81:d6:a2:32:6e:8f:a3:94:35:58:2d:22:e9:83:e1:4e:8e: 8a:e2:49:a7:7a:ac:c4:49:40:5b:cb:30:55:44:b6:a9:6b:ff: d3:ce:66:a9:5e:19:63:c4:59:db:b3:15:05:13:4c:ff:b7:fd: da:a1:79:3c:ae:b8:52:ec:c0:14:b2:d6:15:7b:86:a9:9a:45: aa:68:80:f2:14:98:ff:e4:16:85:6f:7b:4d:40:15:22:09:8f: 72:84:2c:7d:b5:86:33:fe:b7:8f:85:17:ad:93:fa:b4:88:43: 13:1e:0f:4b:4a:bd:f0:bf:23:ad:cf:64:71:41:8a:63:bb:3f: 17:7b:72:ce:ec:55:d8:fb:9c:94:93:f4:05:a2:61:a3:34:e9: 99:eb:a8:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjYwOTIxMDA0NTAzWhcNMjYwOTI4MDA0NTAzWjAYMRYwFAYD VQQDEw02YWIwN2UwZi02MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9k1p4to4fwMw1HQr6Zymwn265yNDkbSbiM3+qKBnt+D+7UuxGrIrftdpt3S hXbTNQHH8K8nhovouScXbz+tA2v2C5YHbA/Hy4tmrAcPrfe8gbfS48Zl8W41gx6z Q7/dtvyf3N8ufu9m5wGzYE04fs9bXOvHRkwz97mfKnUTqjyUSaLVVEsnqOKFsZSh pXKNtFz0q4jD9jf3DqpUiduLLAYRWHLLSmh5BDacl6mxyoLjw+0dT98j3q0Piyax TCAKl5s0tIXC7ZVe/KobtQtJ+tfl41jj5YDHEV+ya7gHL5vGCbjEYHJou3/kFiBv kjrEFZn36FQ6yoDXkx7C1tovIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdiqdZl vXIEashzEGcGgVu1fLg+MB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVvLWqh9pqz95i+fLZRyYX2iJWLC5gR+JhlihE7+zdamDRA7MOg4Rkw0EQoTn O4dCvROsJOf78zINgFGyvFSYG2IhfQ3iVr55qrqQZolpzvHD+5OZwEBiOGlfTB1f I19F298YAp0HwVdD2FO+b4HWojJuj6OUNVgtIumD4U6OiuJJp3qsxElAW8swVUS2 qWv/085mqV4ZY8RZ27MVBRNM/7f92qF5PK64UuzAFLLWFXuGqZpFqmiA8hSY/+QW hW97TUAVIgmPcoQsfbWGM/63j4UXrZP6tIhDEx4PS0q98L8jrc9kcUGKY7s/F3ty zuxV2PuclJP0BaJhozTpmeuoBA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:23:38 2026 by rpki-client