$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: ST42ue7yFE47/AlngDURKcv/s7TwikbA2bOuZkYn8PU= Subject key identifier: 44:C1:32:95:31:5D:FE:09:5C:FE:F9:AC:D4:D3:46:AD:47:1C:CB:40 Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: CC Signing time: Tue 27 Oct 2026 11:06:17 +0000 Manifest this update: Tue 27 Oct 2026 11:06:17 +0000 Manifest next update: Tue 03 Nov 2026 11:06:17 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: 9XxSPKbyitqDNynZ0zqh54MBHh4iq07c9HlBFQUY+vU=) 2: 6BF8DC58D1F611F182338D510566CEF9.roa (hash: lOFIXolobDQa65+Ue+UZIKzlpVKZNIslwMuOjsNjlBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Oct 27 11:06:17 2026 GMT Not After : Nov 3 11:06:17 2026 GMT Subject: CN=6ae085a9-60c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:8c:fc:23:b3:8f:92:1f:85:08:48:ef:91: 4e:af:f0:ad:89:c9:99:37:7a:0b:2a:2b:38:21:99: f0:d7:46:61:6e:5e:92:ac:c9:27:2d:4b:1c:21:5f: d6:87:af:6d:50:94:db:a3:4b:b4:3a:c5:2e:ee:f4: f5:3e:5f:1e:d9:ad:19:49:36:27:53:3e:6c:d2:f6: 9c:48:e3:17:2e:60:e0:0d:b4:fb:52:d8:bb:47:6e: b8:48:f8:f3:a9:ec:a2:01:23:79:4c:6c:00:da:24: 9f:69:87:6b:bf:d2:11:67:36:f7:db:6d:a0:9c:bd: ad:ba:41:55:03:20:0e:e4:11:80:bc:0b:7b:60:9a: 7e:08:8d:f6:ca:0b:82:79:fd:e4:59:60:60:89:06: 6a:4f:07:0d:3f:ca:ec:c5:70:44:d9:96:0d:be:11: 95:54:79:fd:72:87:f3:bd:06:83:ab:35:5b:42:95: 1e:28:5a:1e:b7:72:5a:64:de:cc:8f:7b:64:38:8f: 2e:08:a4:69:a0:d6:3a:0f:b6:74:df:3a:db:51:05: 36:24:f5:92:cf:fc:6a:e6:4a:b2:51:f4:9e:4c:82: 85:60:35:3a:58:fd:cd:89:57:db:2f:ff:77:28:c4: b1:75:fa:71:70:46:f0:6e:e0:2f:9b:40:57:86:2b: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C1:32:95:31:5D:FE:09:5C:FE:F9:AC:D4:D3:46:AD:47:1C:CB:40 X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a2:2b:f6:a4:17:47:90:a0:2c:df:7a:fb:ce:6a:05:99:8d: 43:c7:32:ab:2c:0a:34:f8:5a:38:4c:52:36:1d:e0:46:e9:f6: 29:6f:e9:ed:40:87:61:ac:bc:d4:c4:0d:b8:ae:20:b7:16:4e: 6e:ca:16:fd:9f:b1:1b:5f:fe:ab:aa:9b:f8:1c:1a:a3:4a:aa: a4:d5:f2:34:e1:a1:a4:39:84:ec:bf:f7:5b:a9:52:83:bf:16: 13:2a:e9:ba:3d:5a:28:07:83:4a:03:d4:e3:ea:fb:de:d2:82: 59:99:71:f7:74:46:85:48:7c:19:3c:02:a3:36:73:b8:19:a3: ff:5e:a2:83:6a:be:e7:76:aa:c0:cb:52:90:7d:17:b6:0a:73: 49:3e:87:8c:34:c8:c8:47:05:91:66:31:dd:0c:c7:80:91:4c: c0:00:dc:59:10:89:42:cf:00:f6:99:fd:fa:b6:5a:50:bd:a5: 89:46:70:16:30:e3:87:5d:d5:ec:0c:48:cb:51:f9:5a:c0:8e: 9c:10:f7:89:52:3c:d2:50:5c:7f:7b:85:f9:f7:c0:5d:a5:f9: 7e:e4:71:0c:13:dd:22:a4:27:79:6e:62:85:88:24:27:a2:3b: 56:96:57:cc:dc:28:dc:e0:97:ee:c3:9a:32:35:e1:2b:7e:d5: c2:06:6a:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2NTYxMTAvBgNVBAUTKDE5RTA1QUZEMUU2QjM2MjU0QTVDQjE1MDM2MzkzODRC NkEyMkE4MjYwHhcNMjYxMDI3MTEwNjE3WhcNMjYxMTAzMTEwNjE3WjAYMRYwFAYD VQQDEw02YWUwODVhOS02MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4SM/COzj5IfhQhI75FOr/CticmZN3oLKis4IZnw10Zhbl6SrMknLUscIV/W h69tUJTbo0u0OsUu7vT1Pl8e2a0ZSTYnUz5s0vacSOMXLmDgDbT7Uti7R264SPjz qeyiASN5TGwA2iSfaYdrv9IRZzb3222gnL2tukFVAyAO5BGAvAt7YJp+CI32yguC ef3kWWBgiQZqTwcNP8rsxXBE2ZYNvhGVVHn9cofzvQaDqzVbQpUeKFoet3JaZN7M j3tkOI8uCKRpoNY6D7Z03zrbUQU2JPWSz/xq5kqyUfSeTIKFYDU6WP3NiVfbL/93 KMSxdfpxcEbwbuAvm0BXhitCTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETBMpUx Xf4JXP75rNTTRq1HHMtAMB8GA1UdIwQYMBaAFBngWv0eazYlSlyxUDY5OEtqIqgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni80QTcwOTU2NEIw MEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5pVktYTEZRTmprNFMyb2lx Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5p VktYTEZRTmprNFMyb2lxQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFaIr9qQXR5CgLN96+85qBZmNQ8cyqywKNPhaOExSNh3gRun2KW/p7UCHYay8 1MQNuK4gtxZObsoW/Z+xG1/+q6qb+Bwao0qqpNXyNOGhpDmE7L/3W6lSg78WEyrp uj1aKAeDSgPU4+r73tKCWZlx93RGhUh8GTwCozZzuBmj/16ig2q+53aqwMtSkH0X tgpzST6HjDTIyEcFkWYx3QzHgJFMwADcWRCJQs8A9pn9+rZaUL2liUZwFjDjh13V 7AxIy1H5WsCOnBD3iVI80lBcf3uF+ffAXaX5fuRxDBPdIqQneW5ihYgkJ6I7VpZX zNwo3OCX7sOaMjXhK37VwgZqfg== -----END CERTIFICATE-----Generated at Wed Oct 28 11:44:46 2026 by rpki-client