$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: bh3p4Uj8XvwHr2bd7zlxYi5mA5PyCmLqHfdr/LVyU1k= Subject key identifier: 0D:DA:CC:54:24:A6:16:F1:17:EC:70:19:91:E2:11:98:A4:1E:58:3C Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 193B Signing time: Tue 22 Sep 2026 16:21:47 +0000 Manifest this update: Tue 22 Sep 2026 16:21:47 +0000 Manifest next update: Tue 29 Sep 2026 16:21:47 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: CeOB+dWI5dWN98gsgZuM31gKPRmNmMT2y6RW4pwZ18I=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6530 (0x1982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Sep 22 16:21:47 2026 GMT Not After : Sep 29 16:21:47 2026 GMT Subject: CN=6ab2ab1b-f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:45:89:16:c5:95:55:83:38:59:c8:7c:b3: 57:99:fa:fd:3e:92:fc:46:17:82:33:d2:02:2a:30: f1:2e:4a:92:e0:88:37:ec:40:68:22:70:c0:f8:6a: 11:a6:fc:8f:b0:72:c0:3b:6d:bf:ef:c4:bb:6e:c4: f3:82:86:8c:21:4d:78:88:80:0e:4d:69:20:0e:df: 14:36:73:27:51:90:08:91:84:c0:a0:a7:c3:e5:25: 7c:67:76:33:25:b6:cc:c5:4b:f6:5b:ae:fc:c5:ba: 96:b1:01:16:28:9e:c8:35:97:8c:67:e2:56:d1:32: 6b:01:58:64:94:a6:b1:86:be:ca:21:5e:a7:01:c3: e4:c6:6c:b9:bc:0f:34:bd:e1:18:8b:d6:24:78:6e: 63:ba:c3:c2:06:b2:96:94:e7:da:0d:cf:8d:8c:85: 9d:f6:1c:6f:7c:da:51:bf:02:a4:2c:ab:a2:b5:aa: e9:e9:1f:af:4d:8a:b0:b4:51:8e:1c:28:97:18:9f: 02:8e:d0:ca:27:94:a1:8b:60:e8:c3:b8:cc:96:3e: e4:72:23:51:41:be:70:ce:6f:a4:88:92:f1:63:63: 75:de:fb:ea:8d:ba:b7:ac:f7:ae:1b:c0:6c:cb:28: 29:bb:58:d7:c3:92:5a:0c:9b:43:11:60:63:57:79: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DA:CC:54:24:A6:16:F1:17:EC:70:19:91:E2:11:98:A4:1E:58:3C X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2d:f4:3c:10:f5:76:03:5e:79:6d:69:f2:0b:e2:4a:2e:5d: 24:29:db:fc:61:88:2a:80:ce:ab:14:a7:c7:eb:58:a1:e6:74: fc:00:a0:0e:3a:8e:f7:8d:3c:f5:32:31:05:e0:ed:4f:21:90: 4d:4f:22:30:99:be:90:57:33:29:a7:e5:f0:b0:3a:b9:bb:a6: 68:93:17:92:cc:6a:36:7a:cc:01:2c:74:56:88:bf:85:c8:69: ff:0c:41:e0:22:af:e3:f9:fe:8d:b6:cc:88:d2:fb:1e:e8:83: 3f:f6:9c:3c:4b:f3:85:01:1a:16:2a:dc:c9:1f:ed:ef:32:a4: 56:15:7f:d0:fb:8a:f1:a8:b5:d6:a6:a1:28:69:b1:b5:1c:a9: fd:fa:0f:05:03:53:fb:43:d5:4e:a9:54:70:72:e1:de:ae:aa: 8d:cd:ae:d4:b4:95:77:72:12:8a:78:83:52:b8:7e:a4:c3:5d: d7:db:37:a2:fd:b2:ed:f5:8e:e0:bd:a7:28:fd:df:ad:c2:ca: a8:9d:79:07:25:b2:bb:50:6e:f3:df:f6:e8:8c:e9:08:c1:09: 52:5d:43:4d:f2:62:6d:2c:2b:89:2d:95:82:78:a1:5d:5c:aa: 55:4d:9a:fe:98:2a:d8:d7:d1:d9:f7:c9:bd:73:71:f3:26:63: 37:7a:f7:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwOTIyMTYyMTQ3WhcNMjYwOTI5MTYyMTQ3WjAYMRYwFAYD VQQDEw02YWIyYWIxYi1mNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulNFiRbFlVWDOFnIfLNXmfr9PpL8RheCM9ICKjDxLkqS4Ig37EBoInDA+GoR pvyPsHLAO22/78S7bsTzgoaMIU14iIAOTWkgDt8UNnMnUZAIkYTAoKfD5SV8Z3Yz JbbMxUv2W678xbqWsQEWKJ7INZeMZ+JW0TJrAVhklKaxhr7KIV6nAcPkxmy5vA80 veEYi9YkeG5jusPCBrKWlOfaDc+NjIWd9hxvfNpRvwKkLKuitarp6R+vTYqwtFGO HCiXGJ8CjtDKJ5Shi2Dow7jMlj7kciNRQb5wzm+kiJLxY2N13vvqjbq3rPeuG8Bs yygpu1jXw5JaDJtDEWBjV3no9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3azFQk phbxF+xwGZHiEZikHlg8MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASS30PBD1dgNeeW1p8gviSi5dJCnb/GGIKoDOqxSnx+tYoeZ0/ACgDjqO9408 9TIxBeDtTyGQTU8iMJm+kFczKafl8LA6ubumaJMXksxqNnrMASx0Voi/hchp/wxB 4CKv4/n+jbbMiNL7HuiDP/acPEvzhQEaFircyR/t7zKkVhV/0PuK8ai11qahKGmx tRyp/foPBQNT+0PVTqlUcHLh3q6qjc2u1LSVd3ISiniDUrh+pMNd19s3ov2y7fWO 4L2nKP3frcLKqJ15ByWyu1Bu89/26IzpCMEJUl1DTfJibSwriS2VgnihXVyqVU2a /pgq2NfR2ffJvXNx8yZjN3r3HQ== -----END CERTIFICATE-----Generated at Thu Sep 24 01:34:02 2026 by rpki-client