
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json)
Hash identifier: 7UCMzpd2beh2SZ0GzhVNuX0lSY9+SOWGkYxEykpLBNg=
Subject key identifier: 15:1C:1F:B7:B6:03:5A:D3:32:40:6E:83:EF:E2:12:53:2E:8C:CB:08
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0D98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
Manifest number: 0D40
Signing time: Sat 28 Feb 2026 18:28:32 +0000
Manifest this update: Sat 28 Feb 2026 18:28:31 +0000
Manifest next update: Sat 07 Mar 2026 18:28:31 +0000
Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: bg/mNYx2gxRuecr6FzpkFWU92Zy2drLtHtg8VzMUlzw=)
2: 566800AE193C11F094773636C4F9AE02.roa (hash: mUGpGWO5NBy5obOMz8h6C8xaIpHllmfKh8FGinzOf+E=)
3: 0D341A3005A911F19E018F8D063D8C67.roa (hash: zJ15AChEzNua5dRT3aE1+lZ5jbY/7mvSyeKPbxXnEgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3480 (0xd98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Feb 28 18:28:31 2026 GMT
Not After : Mar 7 18:28:31 2026 GMT
Subject: CN=69a333d0-3c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:5b:c9:8a:1d:29:04:6f:0a:7a:7f:b1:fa:
a8:87:aa:54:8d:17:d9:bb:b5:7a:92:76:5e:5f:78:
09:b6:53:9f:a8:25:06:50:ed:12:e3:e4:46:c1:04:
01:0b:84:b0:f5:ca:e0:9e:6b:63:54:10:32:87:ea:
48:2e:d3:2b:5e:50:23:ca:23:c5:ce:02:8b:bf:12:
5f:44:f6:f7:bf:fc:7a:e7:5b:c5:20:44:98:8a:fa:
b8:57:6c:a3:6c:87:be:a8:2d:84:ef:c2:da:c9:d6:
50:2d:a2:1a:ef:c6:d7:a3:cf:08:1a:cf:20:b2:74:
2a:dd:c6:ae:cc:32:34:40:98:89:0a:cf:0d:26:f3:
f5:25:e2:f0:6c:3a:33:08:53:ea:8a:75:d8:b1:4e:
ce:35:1e:25:a5:9f:c9:49:34:79:55:07:a9:43:42:
09:19:59:2a:97:53:1a:01:79:dd:d6:01:87:ed:89:
2c:32:73:63:bf:71:e2:5b:52:98:59:72:b0:41:4e:
26:14:50:23:40:87:3c:80:59:81:8a:4f:4b:f4:6e:
5b:b3:b7:a1:81:5f:a8:66:3f:05:de:4c:f4:2c:19:
46:33:2b:af:de:c5:49:20:4b:68:77:99:6c:28:eb:
01:c3:1f:27:0a:64:a8:cd:fb:f9:65:2c:e6:b0:09:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:1F:B7:B6:03:5A:D3:32:40:6E:83:EF:E2:12:53:2E:8C:CB:08
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:cc:2b:d4:2e:c6:1d:80:1d:a1:07:20:ed:53:98:5d:5d:
f3:26:0b:38:5f:30:09:18:83:74:43:26:7a:02:c2:6a:c2:0b:
fc:54:ef:05:bc:6c:97:bc:82:94:94:6f:ab:67:2b:b8:a2:d6:
cf:c9:e0:56:b1:99:7c:ea:57:ae:49:4d:06:3a:d7:8f:1b:96:
fc:33:ed:0b:d7:b6:39:7c:7b:82:92:74:71:b4:5a:31:6b:00:
2b:6f:2f:fa:a9:e1:1c:b3:26:2c:38:eb:76:75:4c:e3:6a:b6:
41:8f:e1:a2:e2:80:4d:47:f4:91:c2:1b:c8:c6:c2:d7:d7:a9:
19:4a:5c:fe:ad:78:2e:d2:7e:c1:52:00:c7:d7:c4:cf:4f:dc:
85:30:57:e6:d4:2a:ff:1c:01:13:ae:d6:68:d7:8c:f0:d4:bd:
50:69:71:c5:ac:a4:43:83:d7:b0:66:82:5a:1f:d0:5f:8d:d1:
3f:17:e4:ae:4a:69:bd:25:28:30:be:32:32:48:88:7a:7f:8a:
52:b7:0a:54:47:57:98:d6:c9:a4:3b:b2:f9:83:a4:88:27:03:
bd:57:34:e4:45:5e:d1:0d:ce:20:f5:45:a9:02:6e:e3:c4:50:
20:41:4e:5b:7f:11:02:2a:27:5f:67:c4:22:17:cc:d3:ef:6d:
99:31:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:44 2026 by rpki-client