$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: Us0INbJZPwNV0r3AVX/IXR2vpA5q8mnZDzPWYruzVgM= Subject key identifier: B1:67:AB:4F:15:7B:E2:A7:FC:13:11:37:05:09:FB:37:00:AE:4D:66 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0E38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0DCC Signing time: Tue 20 Oct 2026 18:15:45 +0000 Manifest this update: Tue 20 Oct 2026 18:15:45 +0000 Manifest next update: Tue 27 Oct 2026 18:15:45 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: Is3y4+0Ld9X0Eu4SsYFjTKpiPOUS7TJB4rkL7VOle7s=) 2: 0144318C9AFB11F1AE17B1595911F970.roa (hash: mjYuZtC3XEskN7xgTBANLx/Rych49xVi6AQW29IHHX4=) 3: 14AD087E635711F1A8C1BFBC9B47A888.roa (hash: GuKhdUk0QOKZ+c+n8FsIgBWyRs9/Jk+Wnwz1GAszubk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 18:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3640 (0xe38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Oct 20 18:15:45 2026 GMT Not After : Oct 27 18:15:45 2026 GMT Subject: CN=6ad7afd1-812b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:44:57:00:6c:3c:4b:0c:55:1d:a7:6d:25: d6:ff:24:59:ca:21:a7:49:bb:e5:e3:bd:b7:60:85: 7b:7a:cc:dd:e9:de:4a:16:83:60:e2:51:fd:b9:77: 82:51:02:fe:6e:36:14:8d:97:2f:ae:fe:41:f4:5e: b2:70:6d:fd:89:0c:30:0e:0d:3d:6d:e5:0a:7c:d3: 90:40:5c:e0:db:66:19:c4:4b:98:45:c4:f2:ce:ab: 36:a0:eb:a7:a0:35:f5:3c:11:cc:9a:f4:4b:03:d5: 37:65:58:4f:6d:4f:5f:f4:af:7e:e5:34:65:f2:92: a0:0a:bd:ba:1e:d1:0d:27:d4:dd:22:ec:35:ac:d8: 2a:9c:87:ef:c0:34:c8:fb:4e:d6:20:ac:0e:fb:ac: b0:c6:81:9f:da:93:61:7d:a5:ba:5c:84:fe:dd:b5: 35:7f:97:f4:24:77:a0:66:83:98:20:c9:88:1b:0b: 60:4b:d8:87:8e:57:98:69:e6:98:bf:e7:21:b2:05: 2f:a1:69:b5:b7:bb:4d:98:e4:8a:f8:a0:b0:0b:28: 24:1d:c6:0e:3e:23:c9:40:3f:4f:a3:c7:e2:84:dc: 2e:8d:41:a4:bc:ac:8c:ad:e9:95:77:f1:f1:97:e0: 94:cd:bf:39:1e:36:48:58:f4:19:77:a4:65:7c:5d: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:AB:4F:15:7B:E2:A7:FC:13:11:37:05:09:FB:37:00:AE:4D:66 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fa:49:21:a7:df:1e:09:02:a9:20:cd:a5:c0:7a:73:81:5a: c4:da:d1:c8:e4:63:0f:bd:96:d3:d8:60:5b:3a:01:76:67:f2: 01:d8:9c:c9:ec:e4:ea:59:78:a6:19:ad:ac:58:76:da:e1:b3: 5c:14:10:b6:55:c4:60:ed:76:9b:14:a7:7e:b3:f7:1f:c2:b6: 08:9c:b3:d5:1e:ee:fe:ae:7b:3e:99:dc:ae:4e:e4:55:60:39: 0c:26:40:f1:1c:84:21:3a:83:b6:e5:51:d7:75:47:d9:fd:7c: eb:f3:3f:81:fa:40:ba:19:fe:f8:52:d5:fa:a5:02:2e:87:26: e8:84:e6:d9:ad:84:2f:2a:13:e4:19:ab:69:4b:6a:80:98:05: c7:97:f8:7f:88:50:34:34:6a:5d:78:4a:e9:fc:ef:0a:07:8c: 76:67:92:f8:9c:fb:7b:a4:00:41:dd:b7:51:ab:53:df:2a:9a: 68:74:ed:08:62:c6:5b:4f:82:b4:17:0c:3a:1a:b3:e6:b1:f8: 7a:cf:08:b2:9e:45:e1:10:43:7c:ef:ea:b3:74:2c:08:05:29: 4c:16:2c:aa:5d:c6:c3:06:68:f3:12:0e:c9:95:7a:8d:97:52: 69:bc:93:3f:c3:b7:95:d0:25:f0:3b:a6:e3:81:06:38:6b:57: d4:c7:09:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjYxMDIwMTgxNTQ1WhcNMjYxMDI3MTgxNTQ1WjAYMRYwFAYD VQQDEw02YWQ3YWZkMS04MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs9EVwBsPEsMVR2nbSXW/yRZyiGnSbvl4723YIV7eszd6d5KFoNg4lH9uXeC UQL+bjYUjZcvrv5B9F6ycG39iQwwDg09beUKfNOQQFzg22YZxEuYRcTyzqs2oOun oDX1PBHMmvRLA9U3ZVhPbU9f9K9+5TRl8pKgCr26HtENJ9TdIuw1rNgqnIfvwDTI +07WIKwO+6ywxoGf2pNhfaW6XIT+3bU1f5f0JHegZoOYIMmIGwtgS9iHjleYaeaY v+chsgUvoWm1t7tNmOSK+KCwCygkHcYOPiPJQD9Po8fihNwujUGkvKyMremVd/Hx l+CUzb85HjZIWPQZd6RlfF2cMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFnq08V e+Kn/BMRNwUJ+zcArk1mMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGPpJIaffHgkCqSDNpcB6c4FaxNrRyORjD72W09hgWzoBdmfyAdicyezk6ll4 phmtrFh22uGzXBQQtlXEYO12mxSnfrP3H8K2CJyz1R7u/q57Ppncrk7kVWA5DCZA 8RyEITqDtuVR13VH2f186/M/gfpAuhn++FLV+qUCLocm6ITm2a2ELyoT5BmraUtq gJgFx5f4f4hQNDRqXXhK6fzvCgeMdmeS+Jz7e6QAQd23UatT3yqaaHTtCGLGW0+C tBcMOhqz5rH4es8Isp5F4RBDfO/qs3QsCAUpTBYsql3GwwZo8xIOyZV6jZdSabyT P8O3ldAl8Dum44EGOGtX1McJ5g== -----END CERTIFICATE-----Generated at Thu Oct 22 17:59:21 2026 by rpki-client