$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: DAZKlpOZ/+BIc06pxIEj/4Kdm0HAEiFQIlVJUFUeTVI= Subject key identifier: BD:00:C5:CA:1F:51:45:68:89:A4:EB:A8:78:30:7B:94:F0:5B:C3:6C Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 18DD Signing time: Sun 22 Mar 2026 16:19:17 +0000 Manifest this update: Sun 22 Mar 2026 16:19:16 +0000 Manifest next update: Sun 29 Mar 2026 16:19:16 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: mwOIDBkeMcjEga+IU/7CxAwJA11ST07+6yV0dCzdFSI=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6436 (0x1924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Mar 22 16:19:16 2026 GMT Not After : Mar 29 16:19:16 2026 GMT Subject: CN=69c01685-12b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:a3:6f:9d:b0:e0:a2:3d:73:f8:b3:95:ce: 69:df:20:2c:e7:98:5f:02:6a:16:2c:a3:90:cf:f6: 3e:3e:2c:c0:1d:39:4d:0a:e1:6a:c3:31:12:49:7f: 6e:2c:b7:22:9c:80:4b:e6:89:90:3d:c3:92:cb:2d: f7:ff:07:4b:fd:15:38:5b:ed:d4:92:ab:cd:09:c7: 87:2a:6d:aa:fd:8b:c0:ed:95:e0:7f:90:ef:62:95: 72:90:de:ae:46:af:e0:27:b2:98:21:4a:04:cc:44: 1c:90:ff:43:99:01:87:66:af:0d:23:f5:e4:ed:4b: bf:b9:a7:06:ff:94:5d:d4:6b:49:6a:9d:70:cf:06: 6c:56:22:7d:29:3f:36:28:66:e2:b2:79:9c:75:fe: d2:4e:12:4c:86:38:82:8f:9e:e0:c2:3f:51:7b:a8: f7:b2:db:79:1d:6f:49:b5:06:ca:9c:73:4b:27:a5: e3:76:6d:fb:24:99:b2:b7:51:1a:56:01:05:38:94: ad:33:14:e0:98:c5:69:08:1d:87:1a:65:a4:ca:ac: cd:b3:10:8b:fa:c2:36:02:b4:90:82:20:07:69:cd: 99:2a:3f:37:cf:d0:01:2e:f4:6b:fe:8a:c1:3e:da: 79:2c:18:34:26:c1:a6:06:22:ad:7e:83:df:bd:cc: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:C5:CA:1F:51:45:68:89:A4:EB:A8:78:30:7B:94:F0:5B:C3:6C X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:e7:36:91:f5:7a:0c:ab:c5:36:82:11:83:e4:c1:80:8a: a7:07:ec:e1:28:40:83:59:32:49:51:bf:1e:e7:b8:05:f1:17: d8:26:21:18:87:2f:39:67:b9:7c:2f:ff:4f:10:14:6b:61:dc: c9:13:92:39:19:99:eb:be:b8:63:d9:ba:47:51:30:57:66:95: 42:65:55:ef:13:e2:f7:30:92:d6:d7:42:5e:1a:5c:68:00:49: 54:7a:9c:f5:c8:ae:d2:75:e6:9f:63:af:74:2e:b3:2c:78:36: fd:44:80:82:e5:b9:b3:69:47:8a:ba:6f:97:f8:5c:23:7b:8a: db:4e:cc:04:83:8e:7a:80:b4:22:bf:c5:b7:02:2f:4e:8d:b8: 25:9a:04:fa:97:b4:1f:8a:22:79:3a:38:ab:60:f0:4f:36:05: 3b:94:3f:0e:48:b0:43:da:cc:39:02:df:91:ea:16:45:e8:2c: 42:06:88:a0:ac:77:65:f5:99:17:d4:b5:32:39:47:71:6d:79: 61:6c:2d:9a:3b:f8:60:6e:4e:ba:4c:1f:40:30:46:03:f3:bb: 13:1b:94:40:02:6a:5c:6f:15:34:cd:1f:2f:04:c5:94:53:da: b7:df:98:1d:28:61:a5:16:32:28:ec:78:45:f8:5c:c9:b4:dc: da:31:6f:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwMzIyMTYxOTE2WhcNMjYwMzI5MTYxOTE2WjAYMRYwFAYD VQQDEw02OWMwMTY4NS0xMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Kyjb52w4KI9c/izlc5p3yAs55hfAmoWLKOQz/Y+PizAHTlNCuFqwzESSX9u LLcinIBL5omQPcOSyy33/wdL/RU4W+3UkqvNCceHKm2q/YvA7ZXgf5DvYpVykN6u Rq/gJ7KYIUoEzEQckP9DmQGHZq8NI/Xk7Uu/uacG/5Rd1GtJap1wzwZsViJ9KT82 KGbisnmcdf7SThJMhjiCj57gwj9Re6j3stt5HW9JtQbKnHNLJ6Xjdm37JJmyt1Ea VgEFOJStMxTgmMVpCB2HGmWkyqzNsxCL+sI2ArSQgiAHac2ZKj83z9ABLvRr/orB Ptp5LBg0JsGmBiKtfoPfvcxRawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0Axcof UUVoiaTrqHgwe5TwW8NsMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg0XnNpH1egyrxTaCEYPkwYCKpwfs4ShAg1kySVG/Hue4BfEX2CYhGIcvOWe5 fC//TxAUa2HcyROSORmZ6764Y9m6R1EwV2aVQmVV7xPi9zCS1tdCXhpcaABJVHqc 9ciu0nXmn2OvdC6zLHg2/USAguW5s2lHirpvl/hcI3uK207MBIOOeoC0Ir/FtwIv To24JZoE+pe0H4oieTo4q2DwTzYFO5Q/DkiwQ9rMOQLfkeoWRegsQgaIoKx3ZfWZ F9S1MjlHcW15YWwtmjv4YG5OukwfQDBGA/O7ExuUQAJqXG8VNM0fLwTFlFPat9+Y HShhpRYyKOx4RfhcybTc2jFvHw== -----END CERTIFICATE-----Generated at Sun Mar 22 18:57:49 2026 by rpki-client