$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: oFtDTFMfZSfrdVI9UfnQsGe1lYIIPoQ8AdEBATxZDcc= Subject key identifier: 07:C5:E3:4A:9E:34:EF:05:1E:EE:A1:BF:74:72:B5:36:B6:EE:BC:5E Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0DFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0D97 Signing time: Wed 22 Jul 2026 18:28:35 +0000 Manifest this update: Wed 22 Jul 2026 18:28:35 +0000 Manifest next update: Wed 29 Jul 2026 18:28:35 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: V7GzZwGsI9Parb2m83t1q+NhNfDP0r3qzUUEt0nNx6o=) 2: D56F7FF2635611F1B3748DBC9B47A888.roa (hash: dsJg18m5mrxYhkg7yugi1O9ZuT6p9PFj0K0zE1hSxQU=) 3: 14AD087E635711F1A8C1BFBC9B47A888.roa (hash: /xu/u+3n4gHsOINUiGMqVZ+4o2jYPP8AqjTqfATumMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3580 (0xdfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Jul 22 18:28:35 2026 GMT Not After : Jul 29 18:28:35 2026 GMT Subject: CN=6a610bd3-4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:9d:22:09:98:64:27:d9:81:0f:d8:e3:ec: ae:71:2c:09:e3:73:d5:af:bb:5a:4b:ef:30:2e:72: 99:f7:f7:48:38:b6:cd:a3:85:40:bd:4a:35:a5:51: 0b:8f:32:00:14:90:ee:1f:4a:41:f9:8d:de:fc:05: 73:ed:08:8a:09:d9:f4:68:81:43:69:4e:1e:d0:37: 1c:5e:d2:70:21:26:ed:33:34:8c:50:0c:4f:a2:4f: d5:75:8e:d7:65:ad:b5:6d:a3:ba:64:38:9f:10:6d: 13:d8:bb:5f:f6:19:48:db:5e:3d:16:67:70:8b:9d: d3:0c:2f:1c:65:d2:8e:8c:30:66:0e:c0:bf:b9:54: 7b:3b:e4:35:5a:42:1c:61:26:9e:b0:32:77:76:cb: 81:9a:3a:09:2b:f4:82:2f:30:b7:40:be:91:4a:c1: 01:09:95:80:2d:94:1b:da:25:a6:8f:c2:18:ba:70: 08:5c:4d:81:bc:b6:da:3e:74:f6:60:35:9f:91:16: 04:9a:c1:57:d1:d2:11:dc:54:d5:0c:52:69:14:87: 72:ff:2b:c4:bf:df:36:ab:3b:a9:16:e7:98:57:49: a9:56:76:8b:89:5b:7d:14:7f:a5:0a:b2:d8:f3:d6: e7:ed:94:7f:d6:47:3e:88:22:e9:a5:fb:05:92:ff: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C5:E3:4A:9E:34:EF:05:1E:EE:A1:BF:74:72:B5:36:B6:EE:BC:5E X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c1:de:f1:4b:3a:6d:3d:4f:4c:9a:e9:8a:09:6b:d0:53:14: 21:cc:74:95:d4:8e:db:40:1d:b0:4d:2c:aa:6b:19:24:36:e5: fe:4f:7e:cd:67:52:ba:88:ee:70:c2:1d:4a:5d:b7:c1:e9:3a: 1f:42:bb:57:53:51:06:3b:2b:85:21:a6:5e:20:67:99:c9:bd: 29:52:f7:5e:41:15:a8:26:69:65:e1:30:87:df:c6:84:1e:53: 91:e2:1e:04:da:c2:af:bb:b1:29:c6:8f:99:d6:f4:12:36:19: 1e:1d:a8:b6:4c:c9:ac:1b:ec:86:8d:f9:51:41:a6:5b:81:17: 9a:0b:cc:c5:eb:8f:27:df:db:23:e9:a9:4e:3f:7c:bc:5d:57: 17:a8:eb:0b:26:fe:e2:19:87:ab:5e:0e:51:84:8a:e3:7d:b4: ae:44:19:be:fd:c6:9b:43:40:54:5e:cd:37:18:6d:74:9e:e8: 9a:f6:de:38:51:de:15:16:cd:4c:54:85:b6:09:4d:85:6e:c0: 58:d1:46:99:da:36:61:2d:35:ef:e8:16:b9:71:5d:15:0c:79: 56:cb:06:7b:85:3f:d2:29:ee:27:76:da:dc:c1:36:13:97:3f: 88:1a:51:cd:fe:4e:fd:f5:3d:50:f2:31:5f:d7:a7:74:48:2c: 34:ec:15:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjYwNzIyMTgyODM1WhcNMjYwNzI5MTgyODM1WjAYMRYwFAYD VQQDEw02YTYxMGJkMy00OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjt+dIgmYZCfZgQ/Y4+yucSwJ43PVr7taS+8wLnKZ9/dIOLbNo4VAvUo1pVEL jzIAFJDuH0pB+Y3e/AVz7QiKCdn0aIFDaU4e0DccXtJwISbtMzSMUAxPok/VdY7X Za21baO6ZDifEG0T2Ltf9hlI2149Fmdwi53TDC8cZdKOjDBmDsC/uVR7O+Q1WkIc YSaesDJ3dsuBmjoJK/SCLzC3QL6RSsEBCZWALZQb2iWmj8IYunAIXE2BvLbaPnT2 YDWfkRYEmsFX0dIR3FTVDFJpFIdy/yvEv982qzupFueYV0mpVnaLiVt9FH+lCrLY 89bn7ZR/1kc+iCLppfsFkv9Y2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfF40qe NO8FHu6hv3RytTa27rxeMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMMHe8Us6bT1PTJrpiglr0FMUIcx0ldSO20AdsE0sqmsZJDbl/k9+zWdSuoju cMIdSl23wek6H0K7V1NRBjsrhSGmXiBnmcm9KVL3XkEVqCZpZeEwh9/GhB5TkeIe BNrCr7uxKcaPmdb0EjYZHh2otkzJrBvsho35UUGmW4EXmgvMxeuPJ9/bI+mpTj98 vF1XF6jrCyb+4hmHq14OUYSK4320rkQZvv3Gm0NAVF7NNxhtdJ7omvbeOFHeFRbN TFSFtglNhW7AWNFGmdo2YS017+gWuXFdFQx5VssGe4U/0inuJ3ba3ME2E5c/iBpR zf5O/fU9UPIxX9endEgsNOwVRQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:55 2026 by rpki-client