
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json)
Hash identifier: vJ77qmf1PpDYUTPMOQkVKaZ2E3oXmSHpuwtUEzveAMM=
Subject key identifier: 8B:B8:08:90:6F:C8:B9:6E:92:E7:42:45:E6:56:6E:2E:A3:E3:08:35
Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
Manifest number: 7B
Signing time: Mon 01 Jun 2026 08:33:34 +0000
Manifest this update: Mon 01 Jun 2026 08:33:34 +0000
Manifest next update: Mon 08 Jun 2026 08:33:34 +0000
Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: wOa4BrrUAJmWZka17Cv3yzxxFNobIRX7cF+czaq4BwM=)
2: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: HwzcTj+6E2of2zeq8O1Ng/ngV7Rw888FF8/vBEBckro=)
3: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Validity
Not Before: Jun 1 08:33:34 2026 GMT
Not After : Jun 8 08:33:34 2026 GMT
Subject: CN=6a1d43de-07a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:f6:32:7b:38:8c:58:0c:b7:f3:be:ef:96:
38:a8:ff:d1:ef:3b:68:e8:68:4a:e9:c7:fb:85:75:
63:5b:77:50:83:18:d7:3c:0e:f7:af:aa:3b:b6:f4:
67:ee:d4:13:c2:4d:55:ac:bb:b5:aa:a6:ee:26:f8:
b3:b8:b8:c3:51:96:a3:b5:cb:4d:ee:51:d2:9f:04:
39:29:de:1e:3c:43:29:5e:d7:e8:77:1a:0e:02:2e:
87:16:e5:dd:fb:9e:1b:80:78:2b:6b:07:09:6d:fd:
a8:fc:e8:8e:d6:0b:f5:ba:b2:cd:ea:ec:72:bb:47:
2e:7d:ec:cd:79:17:66:50:f1:d7:a6:87:13:c2:d5:
ef:02:b9:ab:25:57:06:ac:49:94:bd:2f:cc:20:ee:
11:89:ba:d0:69:b5:e9:63:b5:3c:9a:05:c4:7c:62:
19:b5:87:e0:32:66:2a:05:be:a5:09:e2:1f:29:42:
96:c0:49:8b:31:53:00:e9:1f:ee:75:13:d5:85:97:
27:ec:ba:d4:0b:15:63:be:d7:3c:85:db:0e:5d:bc:
8b:87:4a:53:68:ca:55:01:75:5a:a7:29:0b:e8:a2:
0b:90:59:58:7c:cc:05:3f:01:58:91:b4:57:d9:53:
1f:84:ac:c0:f8:ff:43:a5:d3:c8:57:fa:72:c0:e0:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B8:08:90:6F:C8:B9:6E:92:E7:42:45:E6:56:6E:2E:A3:E3:08:35
X509v3 Authority Key Identifier:
keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ad:7b:f2:33:63:19:3d:5e:94:07:b7:b7:8e:94:af:bf:dc:
5c:d9:68:ed:ff:e2:cd:83:4b:f3:ab:fd:cf:b1:5c:1c:19:3a:
15:8e:f0:c1:a4:9d:94:04:08:ff:3f:c0:11:95:95:e0:d3:27:
38:b1:30:d4:53:6a:8e:43:e3:32:1f:2c:92:dc:7c:de:96:ac:
f8:50:ca:78:46:9b:0f:2f:50:db:32:5e:a9:a6:41:be:0f:09:
9c:83:60:4a:38:9d:e8:57:ef:b1:7d:e4:e9:29:ba:1d:58:2c:
c3:17:c0:f4:83:04:4a:5d:70:fc:db:e7:c2:69:19:4a:f2:3b:
4e:98:27:1d:01:26:aa:b9:e9:04:3d:dc:0b:58:04:08:3c:ce:
7f:b9:48:6b:61:fb:5e:ce:a0:e3:93:1a:c9:89:be:13:d2:62:
f9:de:25:25:43:bf:cd:41:97:eb:e7:db:5f:ea:2d:ec:f7:34:
15:e3:95:c7:e2:7a:b7:0c:fc:c9:87:22:31:6f:3b:5d:21:36:
59:3e:9c:48:46:97:ab:c3:93:ae:f8:6c:85:98:e2:71:14:aa:
af:69:6b:fd:d4:59:b4:40:8d:3f:35:d7:ec:32:68:cb:32:22:
5d:b9:d7:72:f7:8b:3a:52:ad:02:36:1d:ab:93:1b:10:ae:e1:
d3:65:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client