$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: oWTXsbAGIQLibU02gySq8NbF/Gw9rlR78rfKWsqNIJo= Subject key identifier: 98:74:92:7C:44:87:8D:57:66:83:65:CE:85:76:ED:AE:D5:33:31:64 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0C60 Signing time: Mon 16 Jun 2025 18:24:16 +0000 Manifest this update: Mon 16 Jun 2025 18:24:15 +0000 Manifest next update: Mon 23 Jun 2025 18:24:15 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: rtluhGPBrN0lSr9wyDZiQbE7ocHnn2MpLx2tNEAyir4=) 2: 702BA35A1D4311F09AE68E7FC4F9AE02.roa (hash: 6Wms1LVBEeVGK9PkBmUevbXKIAzZzizcfxFDC5+BJ7U=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: MoTDqIen8yVbDTTL7Vu855UIt3dnaCbMiK4gvMYWMk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Jun 16 18:24:15 2025 GMT Not After : Jun 23 18:24:15 2025 GMT Subject: CN=6850614f-f5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:ef:c4:a8:f8:ca:f6:9c:a8:c1:75:bf:71: 62:5c:95:0c:7b:80:ce:2b:93:20:45:14:08:ef:0d: 6d:2e:3b:f6:f9:c7:51:cd:78:c0:f6:13:99:2a:e9: 74:d5:f2:45:ce:92:47:f8:30:b8:b3:cf:81:69:47: 63:98:65:da:ec:df:ef:2d:b7:99:5d:2d:25:f0:b4: 3e:d1:b5:17:b9:39:f8:68:53:9f:9a:74:69:a2:2e: c2:2b:1f:9c:98:82:e1:1a:f6:2a:d9:47:d4:ac:60: 48:96:49:f9:e2:b0:37:4a:9c:59:76:47:29:ff:c2: 40:6a:f8:fb:43:4b:b5:f2:b9:4b:16:15:c5:5b:d6: dc:f9:d0:df:24:01:78:f3:df:ee:df:f1:f0:06:92: c3:86:ee:31:ca:f9:b9:f1:cf:98:e2:3d:71:c1:8c: 08:35:2a:5c:f3:c3:1c:92:f6:31:cb:a9:97:0d:04: 8c:ec:f0:0b:13:5d:50:bb:80:3f:dd:eb:63:ac:ba: 50:a7:e0:99:40:15:ca:09:ea:69:11:48:22:ca:e2: 62:ae:54:71:a7:20:ac:ec:c5:36:11:9a:d8:9c:e0: b3:1b:36:d8:04:54:83:d0:87:8f:c8:51:05:94:a0: d4:76:48:6d:1b:a8:48:ba:97:af:5d:85:00:b4:29: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:92:7C:44:87:8D:57:66:83:65:CE:85:76:ED:AE:D5:33:31:64 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:ea:7b:02:c0:26:86:97:89:11:c9:31:a8:7e:71:35:7e:5e: 90:06:af:3e:b8:57:cc:ec:cc:ee:a1:b9:80:89:b0:39:41:02: d7:b1:b9:f5:56:92:de:c5:f4:97:9c:e0:0c:db:f1:5d:8c:3b: 80:e8:36:01:35:5c:77:8e:d1:fc:9a:4a:f3:32:99:d6:5c:54: 98:36:df:41:85:6f:6e:4d:1b:bd:75:a5:90:c3:58:e8:79:d3: dd:f7:29:8e:bc:59:6c:46:19:02:18:67:80:36:80:ed:5e:bf: ac:3f:e7:3e:59:71:ca:18:90:08:b5:cb:19:ea:4f:a9:dc:51: 17:86:f2:80:56:d0:14:f1:b6:39:66:3a:9a:a9:d9:0f:b6:c5: d1:74:1b:c6:e1:b4:0a:be:7e:b5:1a:7e:b5:53:5b:32:6f:33: 7f:e0:12:15:bd:29:8d:99:98:9a:f4:28:4c:dc:de:c1:8c:cb: f3:ec:de:d4:48:a8:5c:b2:cd:42:44:0c:bc:d3:62:de:75:4c: 83:ad:05:dc:24:43:95:f0:8a:f7:d9:54:12:e7:9d:15:b7:7c: 99:b6:8a:6c:f1:de:b0:b0:90:e1:31:d6:c5:8a:eb:ba:c7:66: 1b:3d:bb:03:38:e7:ad:7a:24:28:78:01:db:7f:e4:6e:9e:01: 0c:c3:b3:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUwNjE2MTgyNDE1WhcNMjUwNjIzMTgyNDE1WjAYMRYwFAYD VQQDEw02ODUwNjE0Zi1mNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lTvxKj4yvacqMF1v3FiXJUMe4DOK5MgRRQI7w1tLjv2+cdRzXjA9hOZKul0 1fJFzpJH+DC4s8+BaUdjmGXa7N/vLbeZXS0l8LQ+0bUXuTn4aFOfmnRpoi7CKx+c mILhGvYq2UfUrGBIlkn54rA3SpxZdkcp/8JAavj7Q0u18rlLFhXFW9bc+dDfJAF4 89/u3/HwBpLDhu4xyvm58c+Y4j1xwYwINSpc88MckvYxy6mXDQSM7PALE11Qu4A/ 3etjrLpQp+CZQBXKCeppEUgiyuJirlRxpyCs7MU2EZrYnOCzGzbYBFSD0IePyFEF lKDUdkhtG6hIupevXYUAtClvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh0knxE h41XZoNlzoV27a7VMzFkMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ6nsCwCaGl4kRyTGofnE1fl6QBq8+uFfM7MzuobmAibA5QQLXsbn1 VpLexfSXnOAM2/FdjDuA6DYBNVx3jtH8mkrzMpnWXFSYNt9BhW9uTRu9daWQw1jo edPd9ymOvFlsRhkCGGeANoDtXr+sP+c+WXHKGJAItcsZ6k+p3FEXhvKAVtAU8bY5 ZjqaqdkPtsXRdBvG4bQKvn61Gn61U1sybzN/4BIVvSmNmZia9ChM3N7BjMvz7N7U SKhcss1CRAy802LedUyDrQXcJEOV8Ir32VQS550Vt3yZtops8d6wsJDhMdbFiuu6 x2YbPbsDOOeteiQoeAHbf+RungEMw7NJ -----END CERTIFICATE-----Generated at Wed Jun 18 06:43:32 2025 by rpki-client