$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: JNB7HkpAG54xYDQU1C6m+qtvs9II7+lVROLQNXKI9bA= Subject key identifier: 2A:AC:36:93:27:06:9B:2B:88:AE:A6:53:66:27:E8:F5:52:30:02:B4 Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 07:11:50 +0000 Manifest this update: Fri 11 Sep 2026 07:11:50 +0000 Manifest next update: Fri 18 Sep 2026 07:11:50 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: Djlm5rVlfA1S7tvS8ZdLYeexGUgDFlGiyVHbhDhihOU=) 2: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=) 3: 53B7196A627611F187FA49308B47A888.roa (hash: /0+V+2mNbQO3yIRgng3bkOu+Q6a16sPfs1xG0zllPzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Sep 11 07:11:50 2026 GMT Not After : Sep 18 07:11:50 2026 GMT Subject: CN=6aa3a9b6-c9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:55:61:c1:4b:e1:55:6c:2e:31:f6:d5:ba: 63:48:31:4b:62:ed:32:2f:36:f3:f8:44:b2:a7:e3: 0f:5b:d3:af:d4:40:9c:47:78:4a:30:85:63:70:80: 3a:a5:6f:4a:ce:32:a0:9f:36:dd:e9:5f:89:05:52: 15:9b:ed:7a:c6:c5:37:42:99:02:71:93:ed:70:7f: b6:f0:a7:c6:32:04:f0:13:99:f9:f0:69:9b:65:21: 26:14:43:a2:43:17:57:a6:f9:d4:b4:be:a7:47:5b: 85:9c:6f:94:96:10:6b:ba:e1:dd:0f:d4:ca:7a:b9: 8f:6a:04:b3:d0:8f:83:b3:eb:45:36:86:9b:1c:61: 5b:70:91:0a:62:39:b8:9a:26:fb:89:12:11:b4:d5: 94:56:d2:08:1a:98:24:59:c4:36:07:22:6a:14:93: 5f:ef:e1:51:5e:0f:2e:fe:ed:73:0f:f8:4c:0e:f0: d1:66:29:29:2f:62:b6:45:79:5f:3b:47:c6:cc:98: 82:7d:31:91:b1:d0:2e:8b:ea:ab:74:56:7e:2b:a5: 0f:f4:2f:2a:15:75:33:b1:63:8d:de:b7:81:9e:1b: 1f:68:a5:39:00:8f:2a:04:63:16:82:5b:21:87:49: 48:b4:10:2c:7f:52:39:7a:fe:87:97:6a:74:c3:30: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:36:93:27:06:9B:2B:88:AE:A6:53:66:27:E8:F5:52:30:02:B4 X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:42:a5:d1:16:0b:cd:da:76:89:3c:66:2c:19:d1:21:06:d6: bb:24:b4:c7:b0:48:45:a9:54:59:66:13:6e:97:66:f3:56:f0: ae:6f:6a:f2:cb:fb:4c:d8:67:dd:ff:80:00:0c:3a:ce:2f:5a: 75:e2:98:57:74:bb:dc:49:8a:e2:c5:33:c4:8a:bc:21:93:96: 20:24:71:72:35:6b:89:1a:52:a2:a1:4a:ad:e7:56:c7:b1:35: 8f:63:e1:1a:f9:04:74:3d:c4:cd:43:ed:3d:6f:c8:24:27:22: 29:8c:91:3d:a5:13:f8:d9:d5:4d:27:4e:c6:bc:73:de:fa:43: ab:72:79:4e:93:67:48:53:db:ab:b8:35:7c:84:08:1d:db:66: 8d:6a:23:d8:96:ec:a0:ff:aa:9d:2c:e1:e3:96:58:19:fc:a4: 3a:07:50:ec:df:55:bc:0e:2a:cc:17:6f:ee:be:30:aa:c4:fd: d7:33:cf:59:6a:2f:5e:df:e1:b6:25:c3:1a:46:29:7e:8e:20: c9:d6:1d:53:e8:c2:1d:77:10:2f:5c:e9:2c:4a:7e:b0:9c:0e: f7:c9:22:65:1f:44:8f:f4:20:b8:20:d6:6d:82:d1:69:d1:6c: 0b:98:21:be:ba:b2:be:c2:60:42:1f:37:d9:23:be:21:55:b7: 98:48:c2:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2NTYxMTAvBgNVBAUTKDE5RTA1QUZEMUU2QjM2MjU0QTVDQjE1MDM2MzkzODRC NkEyMkE4MjYwHhcNMjYwOTExMDcxMTUwWhcNMjYwOTE4MDcxMTUwWjAYMRYwFAYD VQQDEw02YWEzYTliNi1jOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjpVYcFL4VVsLjH21bpjSDFLYu0yLzbz+ESyp+MPW9Ov1ECcR3hKMIVjcIA6 pW9KzjKgnzbd6V+JBVIVm+16xsU3QpkCcZPtcH+28KfGMgTwE5n58GmbZSEmFEOi QxdXpvnUtL6nR1uFnG+UlhBruuHdD9TKermPagSz0I+Ds+tFNoabHGFbcJEKYjm4 mib7iRIRtNWUVtIIGpgkWcQ2ByJqFJNf7+FRXg8u/u1zD/hMDvDRZikpL2K2RXlf O0fGzJiCfTGRsdAui+qrdFZ+K6UP9C8qFXUzsWON3reBnhsfaKU5AI8qBGMWglsh h0lItBAsf1I5ev6Hl2p0wzCbOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqsNpMn BpsriK6mU2Yn6PVSMAK0MB8GA1UdIwQYMBaAFBngWv0eazYlSlyxUDY5OEtqIqgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni80QTcwOTU2NEIw MEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5pVktYTEZRTmprNFMyb2lx Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5p VktYTEZRTmprNFMyb2lxQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlkKl0RYLzdp2iTxmLBnRIQbWuyS0x7BIRalUWWYTbpdm81bwrm9q8sv7TNhn 3f+AAAw6zi9adeKYV3S73EmK4sUzxIq8IZOWICRxcjVriRpSoqFKredWx7E1j2Ph GvkEdD3EzUPtPW/IJCciKYyRPaUT+NnVTSdOxrxz3vpDq3J5TpNnSFPbq7g1fIQI HdtmjWoj2JbsoP+qnSzh45ZYGfykOgdQ7N9VvA4qzBdv7r4wqsT91zPPWWovXt/h tiXDGkYpfo4gydYdU+jCHXcQL1zpLEp+sJwO98kiZR9Ej/QguCDWbYLRadFsC5gh vrqyvsJgQh832SO+IVW3mEjC1A== -----END CERTIFICATE-----Generated at Fri Sep 11 12:29:45 2026 by rpki-client