$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: lNWRjvd8YvYtAmuqKA8E+FDngSRnPC1xM5S0gNx5LEA= Subject key identifier: CA:7E:CA:D8:66:52:6B:2D:BC:3C:E4:02:52:24:BC:D7:8B:D7:2F:A8 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0CC3 Signing time: Fri 22 Aug 2025 18:32:54 +0000 Manifest this update: Fri 22 Aug 2025 18:32:53 +0000 Manifest next update: Fri 29 Aug 2025 18:32:53 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: BlhIe9upDMh3PmTuseqTRZGOSficAVTW/tKgQE/T1kI=) 2: 566800AE193C11F094773636C4F9AE02.roa (hash: IrwNCzx+o2yZYpUWlO+X0SPdTTMlIcoBi3jj0b6tFAo=) 3: E02160F2792611F0BA686F55C4F9AE02.roa (hash: fRp0JkpXb4hKUdkhBU2cMVsufNCggHj+Hk/4uOQHIYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Aug 22 18:32:53 2025 GMT Not After : Aug 29 18:32:53 2025 GMT Subject: CN=68a8b7d6-94e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:7b:06:3f:37:33:3f:a7:fa:7d:1c:be:2e: b0:c0:57:05:d3:57:7e:02:8b:b4:5c:ed:aa:11:f1: 28:ba:bb:ce:fe:9e:da:b1:f3:75:72:88:5e:5b:34: 80:10:b5:74:9c:d5:1b:67:54:15:f2:77:f9:f1:7d: a0:b8:f5:4d:25:09:ae:ea:1e:4c:f6:eb:bd:43:ff: 0c:ad:7d:3c:13:80:a8:92:53:ac:fe:f1:90:60:d3: 8e:f3:4f:eb:9c:3b:6c:10:69:dd:a2:4c:00:24:9a: 27:c4:f1:f5:a8:80:d6:b1:22:07:4a:d5:af:a6:a7: f4:32:f2:29:2e:b4:95:59:73:ba:c3:78:de:cf:6d: 1e:e1:30:20:5d:c7:8e:c8:ef:3c:e6:8d:75:51:b2: 22:a9:d6:df:64:e2:6d:8d:7f:26:3e:3b:ab:24:55: 02:11:27:f9:ac:39:07:da:4b:84:4a:66:bc:b9:56: 7a:f3:93:91:3f:7c:02:e6:61:fd:82:ab:df:3c:cb: e7:7b:42:fb:29:28:49:8d:c6:d7:d2:f0:ef:d4:d2: 14:c0:73:35:b4:fa:c0:46:87:10:55:8b:d7:ef:67: 47:ca:fd:ad:a1:58:ec:27:01:89:49:7a:71:54:82: 33:28:f4:44:a3:f6:d4:13:f5:f1:c4:f7:f0:6e:37: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:CA:D8:66:52:6B:2D:BC:3C:E4:02:52:24:BC:D7:8B:D7:2F:A8 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:72:5f:bd:2d:45:72:ef:56:3b:21:78:3d:08:65:ed:a7:49: ea:0d:ed:13:93:81:12:46:f9:4a:27:3a:02:92:79:86:6e:08: e2:3d:d4:cf:b1:19:5b:a5:bc:93:67:61:5d:ca:9a:73:93:e5: 4d:e8:45:93:b2:09:0d:04:17:18:61:55:a4:f5:3c:d4:56:51: d5:bf:51:86:27:a1:62:ea:e9:5a:6c:71:26:85:39:5a:da:72: 1a:90:4e:a6:f7:01:55:36:4a:90:3b:e2:f1:72:e1:04:8d:f9: da:3b:3d:67:d6:f6:3c:b1:2d:78:3c:a8:4d:19:a5:28:52:64: 79:8c:09:b4:59:2b:20:48:14:7f:b7:be:3b:eb:af:98:71:58: 0d:c9:ae:5d:e1:3a:58:94:64:ae:af:c4:65:cb:16:10:7c:48: b8:f3:39:1e:c2:6f:f7:4b:a1:80:20:96:c5:3e:73:dd:01:17: 52:aa:96:59:ff:2c:55:25:7c:f3:a5:b0:7c:33:79:40:c6:9d: 27:3d:15:53:0a:1d:58:07:d5:7d:c5:8c:c0:b6:d9:b7:aa:e4: 62:04:59:b2:c9:a1:b3:bc:e3:aa:d0:54:60:da:58:cc:78:79: bc:35:5a:ca:75:de:cd:05:7e:56:6a:3c:ff:6a:0f:96:f6:dd: 4e:2b:e7:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUwODIyMTgzMjUzWhcNMjUwODI5MTgzMjUzWjAYMRYwFAYD VQQDEw02OGE4YjdkNi05NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTF7Bj83Mz+n+n0cvi6wwFcF01d+Aou0XO2qEfEourvO/p7asfN1coheWzSA ELV0nNUbZ1QV8nf58X2guPVNJQmu6h5M9uu9Q/8MrX08E4CoklOs/vGQYNOO80/r nDtsEGndokwAJJonxPH1qIDWsSIHStWvpqf0MvIpLrSVWXO6w3jez20e4TAgXceO yO885o11UbIiqdbfZOJtjX8mPjurJFUCESf5rDkH2kuESma8uVZ685ORP3wC5mH9 gqvfPMvne0L7KShJjcbX0vDv1NIUwHM1tPrARocQVYvX72dHyv2toVjsJwGJSXpx VIIzKPREo/bUE/XxxPfwbjeARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp+ythm UmstvDzkAlIkvNeL1y+oMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlcl+9LUVy71Y7IXg9CGXtp0nqDe0Tk4ESRvlKJzoCknmGbgjiPdTP sRlbpbyTZ2Fdyppzk+VN6EWTsgkNBBcYYVWk9TzUVlHVv1GGJ6Fi6ulabHEmhTla 2nIakE6m9wFVNkqQO+LxcuEEjfnaOz1n1vY8sS14PKhNGaUoUmR5jAm0WSsgSBR/ t74766+YcVgNya5d4TpYlGSur8RlyxYQfEi48zkewm/3S6GAIJbFPnPdARdSqpZZ /yxVJXzzpbB8M3lAxp0nPRVTCh1YB9V9xYzAttm3quRiBFmyyaGzvOOq0FRg2ljM eHm8NVrKdd7NBX5Wajz/ag+W9t1OK+d8 -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:47 2025 by rpki-client