$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: 4XikyLOhiAWzmJXYWiQCsv7+D6B1CCobC9rVs357h4s= Subject key identifier: 9E:26:B0:4B:FB:C0:B7:6B:26:C7:A8:D6:19:41:60:E7:B5:47:DD:AB Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 0267 Signing time: Fri 13 Jun 2025 01:17:14 +0000 Manifest this update: Fri 13 Jun 2025 01:17:13 +0000 Manifest next update: Fri 20 Jun 2025 01:17:13 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: Kldn5cyddVi6zBMiNUaHsFUcVyeQnnnY1F5kEbZwxvY=) 2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=) 3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Jun 13 01:17:13 2025 GMT Not After : Jun 20 01:17:13 2025 GMT Subject: CN=684b7c1a-ed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:b3:62:63:99:2a:fc:04:1f:7e:d8:5f:2f: 95:0c:19:c7:a7:3d:d0:6d:1c:96:e8:14:47:88:07: ed:f2:ee:31:b5:06:25:70:15:19:c8:b4:de:f8:18: ae:5f:51:2d:fe:53:ec:00:ad:80:b0:15:9a:1b:5f: 0b:17:4a:b0:95:66:f1:12:21:82:dc:4a:92:a8:62: 7c:d9:c7:ce:a3:5b:a0:2f:9a:3a:0a:3b:6b:61:01: 62:bc:c6:09:26:9f:16:db:58:80:61:e4:3a:45:21: fd:dd:3b:1c:84:99:a2:34:44:c4:d6:ea:f1:3b:8c: 1c:fb:db:eb:7d:86:13:78:83:90:78:48:17:6d:fb: 59:de:73:40:bb:2c:4f:d9:41:92:af:8b:d0:e1:66: 01:f9:76:33:87:8a:6d:21:56:e6:02:76:21:2f:6f: bb:a6:54:ac:74:a0:0b:19:5b:e7:15:3d:9a:96:e4: fe:7d:d9:1c:1c:90:46:40:64:45:ac:f7:5e:85:10: df:a0:d9:44:d7:34:7b:5c:fb:4f:74:00:ae:cb:08: f5:a0:9a:48:d5:77:b4:f5:42:dd:60:62:59:69:74: ee:54:8a:69:f7:da:08:61:06:2c:4c:1e:da:66:8d: 41:18:11:16:6e:1c:8a:c1:8f:d7:91:d9:87:0b:1f: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:26:B0:4B:FB:C0:B7:6B:26:C7:A8:D6:19:41:60:E7:B5:47:DD:AB X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:81:32:c5:0a:9e:e5:87:95:be:1c:41:64:1d:03:64:50:ac: 2d:30:78:02:0a:0f:d4:1f:f3:b6:e4:dc:04:e8:14:2d:66:7c: 6c:35:de:98:7f:42:0f:4b:a4:5a:a6:d1:22:5c:2a:a3:a3:ba: 28:e6:70:4e:fc:cf:f9:96:5f:19:c8:da:d5:eb:fa:bf:1f:86: 47:54:22:06:e4:0a:dd:8c:88:fe:6a:83:b6:45:86:fc:85:bb: 0c:1d:e0:aa:b1:d9:9e:17:c3:40:c6:1c:59:81:fa:f6:03:ea: e3:74:64:8b:75:60:30:8e:f5:a9:a7:d8:8e:ba:3b:4e:7f:40: c1:38:05:a3:9b:19:2d:91:80:e2:75:c4:de:8e:ec:62:8b:a1: 3c:c0:1b:7e:1a:01:38:2c:70:86:76:64:50:4b:f9:6d:49:ec: 84:bd:b7:0e:06:aa:06:74:b9:af:20:a3:45:c1:90:c7:d6:12: 40:cd:8c:71:7a:e4:9d:aa:8f:7b:62:a9:85:a3:f9:9d:ba:9c: 4b:ae:5d:0a:9a:79:b2:af:18:97:a4:ba:80:9f:06:f0:17:7c: 26:23:79:22:3a:09:db:b3:e2:4b:55:9a:eb:05:70:ea:a6:8f: 52:70:7a:19:a0:59:e7:e3:2a:06:92:35:c5:a8:a0:04:40:bb: 34:82:31:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjUwNjEzMDExNzEzWhcNMjUwNjIwMDExNzEzWjAYMRYwFAYD VQQDEw02ODRiN2MxYS1lZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFazYmOZKvwEH37YXy+VDBnHpz3QbRyW6BRHiAft8u4xtQYlcBUZyLTe+Biu X1Et/lPsAK2AsBWaG18LF0qwlWbxEiGC3EqSqGJ82cfOo1ugL5o6CjtrYQFivMYJ Jp8W21iAYeQ6RSH93TschJmiNETE1urxO4wc+9vrfYYTeIOQeEgXbftZ3nNAuyxP 2UGSr4vQ4WYB+XYzh4ptIVbmAnYhL2+7plSsdKALGVvnFT2aluT+fdkcHJBGQGRF rPdehRDfoNlE1zR7XPtPdACuywj1oJpI1Xe09ULdYGJZaXTuVIpp99oIYQYsTB7a Zo1BGBEWbhyKwY/XkdmHCx9rvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4msEv7 wLdrJseo1hlBYOe1R92rMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgTLFCp7lh5W+HEFkHQNkUKwtMHgCCg/UH/O25NwE6BQtZnxsNd6Y f0IPS6RaptEiXCqjo7oo5nBO/M/5ll8ZyNrV6/q/H4ZHVCIG5ArdjIj+aoO2RYb8 hbsMHeCqsdmeF8NAxhxZgfr2A+rjdGSLdWAwjvWpp9iOujtOf0DBOAWjmxktkYDi dcTejuxii6E8wBt+GgE4LHCGdmRQS/ltSeyEvbcOBqoGdLmvIKNFwZDH1hJAzYxx euSdqo97YqmFo/mdupxLrl0KmnmyrxiXpLqAnwbwF3wmI3kiOgnbs+JLVZrrBXDq po9ScHoZoFnn4yoGkjXFqKAEQLs0gjGg -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:05 2025 by rpki-client