$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft File: GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json) Hash identifier: tLTrya/6pjLhH4F8pmTrmGXIUAxIdtvYWKCQxqL7+I0= Subject key identifier: 84:A6:A1:68:9C:7A:74:92:59:8D:05:7E:75:3D:E9:D3:86:86:A4:10 Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Certificate serial: 0D43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft Manifest number: 0CF5 Signing time: Tue 04 Nov 2025 18:27:54 +0000 Manifest this update: Tue 04 Nov 2025 18:27:54 +0000 Manifest next update: Tue 11 Nov 2025 18:27:54 +0000 Files and hashes: 1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: CGB5v6+ex58l1UKWhCBmS29PenOVMIeg54WIM21P/9Q=) 2: 6BD78854828411F099E2E925C4F9AE02.roa (hash: 9j0RVXeWOTqtCIIu8pRWvFaGzaYiOgKNK4oM1aL4Rcw=) 3: 566800AE193C11F094773636C4F9AE02.roa (hash: LDxBzmswdwsw+9v/l/93CJjumlDe/PyvRMs7ZjDXsiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3395 (0xd43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD Validity Not Before: Nov 4 18:27:54 2025 GMT Not After : Nov 11 18:27:54 2025 GMT Subject: CN=690a45aa-6923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:7c:c1:2d:bc:a3:84:c2:29:6d:6c:02:f4: e3:ad:c9:f8:c3:34:1d:1c:a1:d3:5f:34:7e:9d:6f: d3:57:e4:14:03:6e:f8:36:88:6f:c8:e3:bd:a7:c3: 7a:5b:fd:43:59:63:b2:84:85:23:38:41:a1:46:39: 1b:05:6d:ac:b0:05:e3:e1:23:55:4a:a4:39:09:94: 96:f4:9c:1c:14:fa:6d:e9:e8:6b:51:a3:d6:4a:fc: 26:f5:aa:88:4b:8a:a9:0e:70:bb:b5:e7:7f:bb:61: e4:a5:4c:72:98:23:73:06:9b:a4:27:40:02:01:75: b0:d7:0b:59:18:ca:01:13:3b:c4:18:61:4f:4f:eb: 98:70:64:be:47:45:10:df:e5:cf:12:c1:b9:8d:ca: ab:17:3e:14:76:55:2c:eb:2c:93:54:31:c2:7c:1c: 47:f4:b6:91:34:f8:32:26:7e:91:6b:fb:55:94:bd: b2:55:69:c4:5f:74:8d:a1:23:10:83:ac:4f:a0:ea: 82:43:f9:b7:74:4c:92:0f:b6:9f:6d:43:0c:2f:cd: 00:7a:be:a4:c9:d6:b8:88:c7:17:fe:cc:9f:d5:06: f9:c7:ed:e1:f3:1a:ea:71:e1:f5:77:a2:cc:36:8d: f9:26:24:47:0d:58:c2:15:3d:6a:8c:de:27:b4:63: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:A1:68:9C:7A:74:92:59:8D:05:7E:75:3D:E9:D3:86:86:A4:10 X509v3 Authority Key Identifier: keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1f:de:e6:6f:6c:2e:9d:b1:35:d9:e6:cf:69:d3:58:46:e9: 09:10:41:e1:83:f7:58:ef:d8:9c:2c:bf:16:aa:24:cc:c4:00: ed:0b:bd:7a:6a:7a:d2:6b:2f:7c:89:23:60:11:83:0c:fa:73: 10:4f:30:c1:26:04:ae:e3:aa:b4:3b:04:c1:fe:a6:73:35:50: 5c:13:b0:d3:21:6c:d7:69:9e:d0:72:75:e4:f0:22:4e:7b:dc: 26:08:6b:4d:bf:b3:df:10:a7:b7:f3:50:f1:27:6b:06:88:89: 43:a0:5e:e6:e2:a7:44:3b:c9:f2:58:59:e5:5e:26:ad:fd:e9: 4d:ef:37:2a:71:16:f2:ed:c2:03:53:61:ca:3b:97:c1:58:54: 1a:88:81:41:87:11:30:8f:84:7b:c5:3f:63:11:06:8e:77:67: fc:ec:26:0a:52:d7:42:1c:07:cf:ff:7d:ba:50:a9:6e:b2:5c: 9b:83:6b:5f:63:c4:1d:bf:da:64:42:85:8a:c9:4d:b0:eb:b4: f5:ea:59:b9:8f:5d:89:23:07:e9:e7:b6:a0:9a:6a:39:2a:4f: 94:b8:54:49:81:57:0a:89:7b:72:32:27:f6:8f:6b:78:eb:e9: 98:3c:d9:e8:a0:52:18:ae:46:0a:5f:40:15:1e:a7:09:a1:b6: 42:b0:a2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB RjYyREVGRkQwHhcNMjUxMTA0MTgyNzU0WhcNMjUxMTExMTgyNzU0WjAYMRYwFAYD VQQDEw02OTBhNDVhYS02OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugR8wS28o4TCKW1sAvTjrcn4wzQdHKHTXzR+nW/TV+QUA274NohvyOO9p8N6 W/1DWWOyhIUjOEGhRjkbBW2ssAXj4SNVSqQ5CZSW9JwcFPpt6ehrUaPWSvwm9aqI S4qpDnC7ted/u2HkpUxymCNzBpukJ0ACAXWw1wtZGMoBEzvEGGFPT+uYcGS+R0UQ 3+XPEsG5jcqrFz4UdlUs6yyTVDHCfBxH9LaRNPgyJn6Ra/tVlL2yVWnEX3SNoSMQ g6xPoOqCQ/m3dEySD7afbUMML80Aer6kyda4iMcX/syf1Qb5x+3h8xrqceH1d6LM No35JiRHDVjCFT1qjN4ntGPYxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISmoWic enSSWY0FfnU96dOGhqQQMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2 QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdH97mb2wunbE12ebPadNYRukJEEHhg/dY79icLL8WqiTMxADtC716 anrSay98iSNgEYMM+nMQTzDBJgSu46q0OwTB/qZzNVBcE7DTIWzXaZ7QcnXk8CJO e9wmCGtNv7PfEKe381DxJ2sGiIlDoF7m4qdEO8nyWFnlXiat/elN7zcqcRby7cID U2HKO5fBWFQaiIFBhxEwj4R7xT9jEQaOd2f87CYKUtdCHAfP/326UKluslybg2tf Y8Qdv9pkQoWKyU2w67T16lm5j12JIwfp57agmmo5Kk+UuFRJgVcKiXtyMif2j2t4 6+mYPNnooFIYrkYKX0AVHqcJobZCsKKe -----END CERTIFICATE-----Generated at Wed Nov 5 17:34:54 2025 by rpki-client