$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: 6nfsDvBla0hWW1wfFimKPq3FBwvB3FCAyRIiECuoj1s= Subject key identifier: 1A:33:D1:69:F2:AC:F4:E2:6E:57:80:E1:36:01:4C:3A:A0:EB:05:55 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0DAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0D50 Signing time: Tue 24 Mar 2026 18:08:52 +0000 Manifest this update: Tue 24 Mar 2026 18:08:52 +0000 Manifest next update: Tue 31 Mar 2026 18:08:52 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: t5DwoXAZphxt4Q85Y4HIdLzmxTv1CU9MjPjLpgXeB1g=) 2: 0D341A3005A911F19E018F8D063D8C67.roa (hash: y4m6yYrzdqqRXHW2Z2qtJIcDrcsI0TGTykZNYjDl5pA=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: n+6S6drduflW8vmKudlFPF0ZyDGO0es3RyPNjv25FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Mar 24 18:08:52 2026 GMT Not After : Mar 31 18:08:52 2026 GMT Subject: CN=69c2d334-494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:80:5a:2e:5e:1f:a6:77:1d:65:b1:29:42: a0:a6:0d:41:5a:33:ba:e0:a0:8e:29:bc:17:cd:1f: 5c:7d:48:4e:af:20:97:5d:e5:d0:3d:22:fc:d3:86: ad:5c:fc:b1:79:6f:f1:55:54:7c:58:ee:c0:38:40: bb:09:36:57:cf:4d:80:09:32:a9:24:03:af:ed:17: cd:1c:d7:67:2f:9f:6f:3f:3b:8d:4d:af:21:73:f9: 2a:f9:95:80:e8:2f:b1:f6:a9:c5:87:77:4d:c1:4a: aa:6e:0c:a9:7f:65:14:e5:2f:27:f9:b3:2a:91:71: bf:86:72:a8:f8:4b:fc:2e:e5:83:fa:c2:ea:57:fc: 1b:65:37:46:aa:7c:99:76:05:fa:e3:ff:dc:3a:5c: b1:d2:52:89:80:97:31:91:bb:8f:9f:f1:21:b4:7b: 71:2e:2a:c8:f4:8d:fb:3c:25:ce:2e:5b:2b:3e:39: 2b:ad:82:be:f9:86:d8:23:37:03:c5:72:60:75:f8: c4:26:91:85:b9:d2:5a:63:b9:24:59:dd:32:ad:bb: c0:8a:b4:87:4e:4e:c6:8f:0b:4f:cc:2b:70:ed:a0: c9:69:5d:38:8d:fe:a9:c1:fb:d7:b4:c2:3f:4d:09: 00:b2:09:18:fc:62:e3:a5:69:a7:e2:82:ce:27:d4: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:D1:69:F2:AC:F4:E2:6E:57:80:E1:36:01:4C:3A:A0:EB:05:55 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:48:32:30:0f:20:91:2b:be:20:5d:b5:cc:39:ad:80:c4: 9f:56:79:1f:1d:87:00:ba:39:a9:d3:85:7e:99:1f:38:6d:bc: bd:0e:b3:77:2f:b4:1e:1b:93:68:fb:86:9b:43:1a:f1:83:48: 5c:d8:a4:00:68:de:2b:30:09:18:13:e0:85:e5:ce:27:b0:ea: dd:91:60:ad:56:07:83:42:1e:b1:2d:45:6a:d2:ac:42:31:23: 73:d6:cc:3d:48:b2:8f:3d:fa:31:be:2d:79:5b:cd:7b:af:94: 86:29:18:41:70:b1:91:b1:98:05:e8:bc:52:c0:91:e7:59:fc: 61:47:20:26:1f:1e:91:bf:86:da:20:a8:9b:0d:90:c1:bc:f4: 87:ad:7f:cc:34:85:71:1c:9a:39:2c:e6:80:8c:7d:a9:5e:4a: 3a:66:81:16:21:ce:d7:32:45:11:da:b2:5c:57:c2:07:20:28: 8a:63:ca:5b:cb:a7:84:84:c5:79:88:55:be:0d:f1:89:aa:ac: 8f:23:0f:ff:f6:6f:5e:3f:cc:70:ae:46:31:ed:68:eb:6d:1e: 36:4d:32:73:7c:ec:0d:5d:91:64:f6:38:33:aa:60:93:28:ea: f3:84:2c:85:2e:f2:68:60:ea:86:e0:06:ed:c4:8e:6c:35:6a: 4e:ff:eb:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjYwMzI0MTgwODUyWhcNMjYwMzMxMTgwODUyWjAYMRYwFAYD VQQDEw02OWMyZDMzNC00OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvaAWi5eH6Z3HWWxKUKgpg1BWjO64KCOKbwXzR9cfUhOryCXXeXQPSL804at XPyxeW/xVVR8WO7AOEC7CTZXz02ACTKpJAOv7RfNHNdnL59vPzuNTa8hc/kq+ZWA 6C+x9qnFh3dNwUqqbgypf2UU5S8n+bMqkXG/hnKo+Ev8LuWD+sLqV/wbZTdGqnyZ dgX64//cOlyx0lKJgJcxkbuPn/EhtHtxLirI9I37PCXOLlsrPjkrrYK++YbYIzcD xXJgdfjEJpGFudJaY7kkWd0yrbvAirSHTk7GjwtPzCtw7aDJaV04jf6pwfvXtMI/ TQkAsgkY/GLjpWmn4oLOJ9SstwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoz0Wny rPTibleA4TYBTDqg6wVVMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWNIMjAPIJErviBdtcw5rYDEn1Z5Hx2HALo5qdOFfpkfOG28vQ6zdy+0HhuT aPuGm0Ma8YNIXNikAGjeKzAJGBPgheXOJ7Dq3ZFgrVYHg0IesS1FatKsQjEjc9bM PUiyjz36Mb4teVvNe6+UhikYQXCxkbGYBei8UsCR51n8YUcgJh8ekb+G2iComw2Q wbz0h61/zDSFcRyaOSzmgIx9qV5KOmaBFiHO1zJFEdqyXFfCByAoimPKW8unhITF eYhVvg3xiaqsjyMP//ZvXj/McK5GMe1o620eNk0yc3zsDV2RZPY4M6pgkyjq84Qs hS7yaGDqhuAG7cSObDVqTv/rXw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:24 2026 by rpki-client