$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: v3PkTmVdjsekATBpU63gTSa8X+yeEzc6YdmS6qdXIMI= Subject key identifier: 46:6B:14:BE:1C:BC:E8:E9:ED:C1:79:0C:6A:A8:5A:C7:89:89:53:21 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0D6C Signing time: Tue 12 May 2026 18:19:06 +0000 Manifest this update: Tue 12 May 2026 18:19:05 +0000 Manifest next update: Tue 19 May 2026 18:19:05 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: ewWdTQu0bRiq27FqEdmf15QUWxn6FhXmlbdizP/mjFc=) 2: C5991018455911F1AF364F43AC833773.roa (hash: F3fXsYYIXllQJg/rQ0cQAnsOHKVUoDJHRrrlCd5Wm14=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: z8eMELWvGD9RiYY3uqJc97NK+qwf06Jq58+etYDZR/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3530 (0xdca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: May 12 18:19:05 2026 GMT Not After : May 19 18:19:05 2026 GMT Subject: CN=6a036f19-dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:fe:71:a3:11:4e:d6:78:53:97:83:fc:c3: 45:07:51:67:3a:c8:5e:7f:18:7e:6f:e5:ae:e7:d1: 72:09:a9:a7:89:58:19:5b:4f:f9:01:c2:1b:80:00: f7:06:55:f8:a1:4a:af:08:a0:aa:1f:ac:2f:f4:78: 3f:4b:63:76:c6:fb:dd:fe:cf:45:b7:a2:d6:61:98: 55:c8:3f:ac:fb:48:35:10:f1:8d:c2:e2:93:e6:a1: 27:30:ed:5e:ff:49:5e:ce:d2:26:6b:51:8e:63:e6: 25:e4:7d:dc:6e:64:87:68:af:e0:4b:28:75:4d:9d: 9a:42:5d:b4:1f:ea:37:66:03:bc:bf:d8:3e:5c:ba: 73:06:8f:4f:7e:01:0b:5f:c0:eb:a7:13:f9:c2:e4: 30:17:08:5b:06:63:fa:9f:6b:24:07:86:f5:ec:3c: 5b:22:39:28:55:4f:2e:71:a3:62:7e:23:e2:a8:37: a5:84:2b:75:0d:91:53:c0:9d:b2:e1:47:d0:63:75: 48:ba:7c:ee:a6:8b:9c:c1:0b:c8:64:47:c3:eb:73: c2:9d:ab:55:0a:12:d4:52:f6:c1:44:9d:1f:70:38: a2:7d:13:fd:df:39:90:6a:29:59:40:00:3b:8b:fb: 37:fa:fe:aa:14:0b:b9:b5:a8:0d:7e:dd:18:e2:23: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:14:BE:1C:BC:E8:E9:ED:C1:79:0C:6A:A8:5A:C7:89:89:53:21 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:18:7d:e4:23:cf:6f:a0:f7:54:e4:c0:8e:b6:3c:b4:e5:e7: a0:67:4e:e1:c9:b0:57:fb:99:d2:ea:dc:04:8b:ec:c7:29:f2: b1:9e:a1:4d:a8:69:4e:33:67:b6:cf:42:43:e0:01:10:e8:23: 3b:71:20:f1:6c:6c:e2:c9:36:73:ad:c6:55:c6:67:4a:22:af: a1:66:01:db:4a:8c:e2:97:14:ca:0b:20:8f:f4:4f:be:97:1b: 41:9f:b1:c4:9c:5a:51:51:73:8f:a4:d3:34:69:bf:d3:35:0c: 9e:2c:22:24:af:7d:ea:76:f1:2e:84:b3:30:cd:c8:d4:4d:c6: 9b:1a:44:34:dd:40:4f:20:12:87:3a:19:40:63:e5:c1:3b:72: 18:e4:4f:8f:ce:a8:2f:ba:24:ee:55:2d:06:26:fe:9c:db:76: 58:b1:d2:dd:1c:11:0a:ef:d4:5a:7b:38:ca:08:08:2c:3f:17: 8d:14:96:f5:5f:e1:98:5e:c0:4e:8f:f6:e7:ee:9d:7c:92:a4: 0c:5b:fa:f7:31:a4:f4:5f:37:e5:dd:02:76:a1:6f:9d:ea:09: b7:d5:d4:dd:1a:e4:cf:af:66:05:6a:ab:3a:68:9c:bd:5c:96: 87:40:1c:04:23:00:c7:50:16:74:b2:d9:f4:58:c0:65:af:4e: 49:34:f6:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjYwNTEyMTgxOTA1WhcNMjYwNTE5MTgxOTA1WjAYMRYwFAYD VQQDEw02YTAzNmYxOS1kZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC3+caMRTtZ4U5eD/MNFB1FnOshefxh+b+Wu59FyCamniVgZW0/5AcIbgAD3 BlX4oUqvCKCqH6wv9Hg/S2N2xvvd/s9Ft6LWYZhVyD+s+0g1EPGNwuKT5qEnMO1e /0leztIma1GOY+Yl5H3cbmSHaK/gSyh1TZ2aQl20H+o3ZgO8v9g+XLpzBo9PfgEL X8DrpxP5wuQwFwhbBmP6n2skB4b17DxbIjkoVU8ucaNifiPiqDelhCt1DZFTwJ2y 4UfQY3VIunzupoucwQvIZEfD63PCnatVChLUUvbBRJ0fcDiifRP93zmQailZQAA7 i/s3+v6qFAu5tagNft0Y4iMN/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZrFL4c vOjp7cF5DGqoWseJiVMhMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPxh95CPPb6D3VOTAjrY8tOXnoGdO4cmwV/uZ0urcBIvsxynysZ6hTahpTjNn ts9CQ+ABEOgjO3Eg8Wxs4sk2c63GVcZnSiKvoWYB20qM4pcUygsgj/RPvpcbQZ+x xJxaUVFzj6TTNGm/0zUMniwiJK996nbxLoSzMM3I1E3GmxpENN1ATyAShzoZQGPl wTtyGORPj86oL7ok7lUtBib+nNt2WLHS3RwRCu/UWns4yggILD8XjRSW9V/hmF7A To/25+6dfJKkDFv69zGk9F835d0CdqFvneoJt9XU3Rrkz69mBWqrOmicvVyWh0Ac BCMAx1AWdLLZ9FjAZa9OSTT28A== -----END CERTIFICATE-----Generated at Wed May 13 05:54:15 2026 by rpki-client