$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: zPkor9meyR65AHHpB+RSXG2vtbAzpUH54zJz2ZFcy1c= Subject key identifier: EF:65:1C:7D:A9:95:B1:92:CD:B6:44:2D:7C:72:25:19:E4:9F:39:73 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0CEA Signing time: Sat 18 Oct 2025 19:08:12 +0000 Manifest this update: Sat 18 Oct 2025 19:08:11 +0000 Manifest next update: Sat 25 Oct 2025 19:08:11 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: VEIHfCuQDkAOeG4cSlEQnOhPyfZdPUC2bArSfutaZDU=) 2: 6BD78854828411F099E2E925C4F9AE02.roa (hash: 9j0RVXeWOTqtCIIu8pRWvFaGzaYiOgKNK4oM1aL4Rcw=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: 1AwqjGia6pPis1SRG0AJmel2AnBG9n7ZvOPcTreTaGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Oct 18 19:08:11 2025 GMT Not After : Oct 25 19:08:11 2025 GMT Subject: CN=68f3e59b-5fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:1c:c8:de:f7:ef:28:7c:2c:5e:5e:43:bb: 88:70:7a:35:2b:14:4f:5b:c0:20:19:8a:40:6f:a6: 11:ef:fe:01:c3:65:fb:25:b2:9c:16:8e:c0:d4:56: e3:17:84:f9:7b:77:37:68:2d:a4:e2:e1:94:c1:5d: ad:b1:ad:7b:61:d4:f0:13:7b:90:f2:77:0e:f0:e8: d1:11:5e:06:72:17:47:69:a1:ec:56:0d:43:97:42: 41:45:27:4a:2f:99:18:de:75:9a:c5:52:6b:d3:03: 31:45:09:9f:04:c1:fe:8a:2a:3e:3f:f1:be:98:ce: ca:04:d8:36:76:ba:4f:d3:15:df:1c:ac:c3:2f:b5: b1:3f:22:fe:ed:16:aa:65:16:66:3f:3d:8c:ad:af: c6:4f:7c:29:98:9e:e8:99:e9:c5:3c:3c:56:98:d8: 4a:89:f5:f7:f7:4c:a3:6b:74:45:9f:0e:c3:db:a9: 09:6f:bb:47:78:23:e0:ab:c6:fb:e6:66:b3:c6:be: 8a:e6:00:40:32:ae:a8:5d:dc:ad:e9:ee:7d:ce:9d: 71:c1:a7:7b:a8:de:59:8f:38:c3:a8:90:a5:11:65: 8b:2a:3e:cc:d6:1a:cb:17:c6:9c:d0:2e:d6:ab:63: 71:4f:ba:d4:fc:5e:b7:71:c4:e8:2e:98:b2:59:11: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:1C:7D:A9:95:B1:92:CD:B6:44:2D:7C:72:25:19:E4:9F:39:73 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:88:32:76:8f:d8:d1:a1:98:ae:0e:a7:35:18:c1:bb:f2:5b: e0:26:3e:ba:25:10:11:66:1b:61:4a:20:8d:40:7f:2d:d7:7d: b0:c6:69:2f:fb:1e:55:e3:60:79:60:81:61:0c:96:e8:8a:e2: cf:cd:8d:b2:a6:65:0b:32:90:60:fc:a0:a2:38:e1:0c:87:e5: da:d4:d1:e1:23:b2:f4:75:83:e6:93:4f:7e:e6:b9:d8:1f:be: b5:13:ab:96:fb:c6:14:61:ec:d4:dd:53:4b:8e:77:1d:5a:92: d0:aa:7f:d0:e3:be:a9:6a:2e:fe:07:55:a0:1f:0b:0b:c1:47: a9:2a:a5:34:80:2d:9b:12:7c:ac:80:b3:50:7d:56:ce:fb:a4: f7:56:d4:31:23:64:55:7b:e1:2a:6a:98:35:db:4a:1f:59:09: 01:cb:06:03:55:d7:b0:8e:f8:7a:5f:ed:a0:2c:ac:49:e4:12: de:6d:76:93:2f:92:f6:a3:e9:47:1e:78:a7:4a:18:6a:99:87: 6e:b3:4d:5a:35:61:40:12:66:40:8b:a7:8d:8d:e5:88:93:69: be:05:4a:66:ef:ef:08:53:96:85:e0:77:62:0b:21:dd:78:ae: 95:d5:e9:1b:a5:ff:16:56:a2:41:cb:cf:a8:dc:41:48:b3:60: 58:a3:42:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUxMDE4MTkwODExWhcNMjUxMDI1MTkwODExWjAYMRYwFAYD VQQDEw02OGYzZTU5Yi01ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUEcyN737yh8LF5eQ7uIcHo1KxRPW8AgGYpAb6YR7/4Bw2X7JbKcFo7A1Fbj F4T5e3c3aC2k4uGUwV2tsa17YdTwE3uQ8ncO8OjREV4GchdHaaHsVg1Dl0JBRSdK L5kY3nWaxVJr0wMxRQmfBMH+iio+P/G+mM7KBNg2drpP0xXfHKzDL7WxPyL+7Raq ZRZmPz2Mra/GT3wpmJ7omenFPDxWmNhKifX390yja3RFnw7D26kJb7tHeCPgq8b7 5mazxr6K5gBAMq6oXdyt6e59zp1xwad7qN5ZjzjDqJClEWWLKj7M1hrLF8ac0C7W q2NxT7rU/F63ccToLpiyWRGCcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9lHH2p lbGSzbZELXxyJRnknzlzMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTiDJ2j9jRoZiuDqc1GMG78lvgJj66JRARZhthSiCNQH8t132wxmkv +x5V42B5YIFhDJboiuLPzY2ypmULMpBg/KCiOOEMh+Xa1NHhI7L0dYPmk09+5rnY H761E6uW+8YUYezU3VNLjncdWpLQqn/Q476pai7+B1WgHwsLwUepKqU0gC2bEnys gLNQfVbO+6T3VtQxI2RVe+Eqapg120ofWQkBywYDVdewjvh6X+2gLKxJ5BLebXaT L5L2o+lHHninShhqmYdus01aNWFAEmZAi6eNjeWIk2m+BUpm7+8IU5aF4HdiCyHd eK6V1ekbpf8WVqJBy8+o3EFIs2BYo0K4 -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:03 2025 by rpki-client