$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: 3SUdr1MuWFEb65WLqWC28cI97F69X/AZb+2ri/JevDw= Subject key identifier: 3A:7A:A0:0D:AB:8F:2A:C8:65:8D:C4:17:53:9D:76:5D:9C:29:7A:07 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 190B Signing time: Sat 20 Jun 2026 16:22:36 +0000 Manifest this update: Sat 20 Jun 2026 16:22:35 +0000 Manifest next update: Sat 27 Jun 2026 16:22:35 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 0whF6LBddBbkn7SA3QLwI6arkYKed3DX5h1GgG+YFdU=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 16:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6482 (0x1952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jun 20 16:22:35 2026 GMT Not After : Jun 27 16:22:35 2026 GMT Subject: CN=6a36be4c-0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:51:65:eb:99:bb:64:03:e9:9b:9b:cf:93: ed:f4:6e:1b:2e:d6:fa:d8:5a:81:aa:ba:32:9b:7d: ca:c2:39:a1:f4:61:d4:ff:04:be:20:f7:a2:a0:7e: ab:e0:f1:f5:79:4f:e6:ba:32:82:83:33:59:c9:67: b7:a0:4a:ef:8c:30:ec:60:10:60:22:c7:e3:df:4c: 84:70:45:14:37:33:b5:d3:74:04:e5:2a:58:40:78: b0:7e:16:10:7d:68:56:49:90:d4:fc:7a:39:b4:5e: 1b:74:81:74:db:d1:ed:1f:92:ae:1a:5a:ef:76:c2: c5:44:e4:48:7e:7b:af:e6:8d:2e:9d:f7:43:ea:17: 80:ef:f8:cc:6a:32:44:66:c4:d2:58:e8:c7:77:9f: 31:6f:27:3b:d7:1b:9a:f2:7e:35:ca:c4:93:21:bd: 24:04:60:32:97:ea:c6:82:23:b4:e0:55:05:98:3e: ec:94:4e:84:e5:91:51:93:c9:1d:86:de:87:2e:57: 3b:77:ac:3a:0a:53:c1:5c:04:ae:bc:67:6c:88:6b: 4e:51:05:55:a1:95:45:9e:40:34:5f:cb:a6:b3:65: 7d:85:57:1a:5d:6e:e9:4c:96:92:64:2e:b0:2b:3a: ee:d0:67:36:d2:72:c9:8b:0f:87:35:3f:d5:20:51: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:A0:0D:AB:8F:2A:C8:65:8D:C4:17:53:9D:76:5D:9C:29:7A:07 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:77:16:b5:67:fa:8f:d8:6d:95:db:c6:2f:bc:c5:16:8f: 93:f1:7a:fb:9e:9a:4b:80:21:65:59:fd:79:f6:7c:95:df:a7: 55:e6:9a:2d:b7:55:25:9d:5b:4e:96:bb:bd:29:35:fe:51:86: 6e:af:65:4d:17:45:da:ad:03:32:ae:6d:b9:3d:16:a6:fb:05: 14:81:f4:b2:a2:f3:90:d5:8e:40:ef:16:fb:47:87:cc:cf:4b: 8f:01:d9:3b:1a:f2:a2:fd:53:61:a5:e8:ce:a2:46:94:7f:04: fc:b6:0d:7b:d9:e8:95:6e:d9:f1:bb:ae:29:2c:d4:3b:bb:07: 01:cd:35:13:f0:cd:50:ea:d6:6c:66:2e:fe:9c:fb:b2:68:99: f6:4f:0b:f1:27:2e:4f:92:3a:60:83:2e:4c:7c:81:e1:d8:3f: bc:0d:22:d2:07:cd:5c:7f:ed:8e:04:8e:e2:38:74:b0:5b:ba: 86:1d:5b:97:2a:a7:d8:d5:d9:b9:90:4f:76:6f:80:08:9a:a7: b4:dd:7b:c1:2f:3f:4d:f6:36:ab:a9:20:bd:2a:d7:63:f8:62: 23:5c:1c:f0:8c:c4:bf:6c:28:91:c0:86:7a:f9:fa:1b:b5:41: 14:a4:92:15:ab:ee:e8:d2:20:e4:86:d7:63:92:ba:d4:a0:c4: 84:8b:44:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwNjIwMTYyMjM1WhcNMjYwNjI3MTYyMjM1WjAYMRYwFAYD VQQDEw02YTM2YmU0Yy0wMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNdRZeuZu2QD6Zubz5Pt9G4bLtb62FqBqroym33Kwjmh9GHU/wS+IPeioH6r 4PH1eU/mujKCgzNZyWe3oErvjDDsYBBgIsfj30yEcEUUNzO103QE5SpYQHiwfhYQ fWhWSZDU/Ho5tF4bdIF029HtH5KuGlrvdsLFRORIfnuv5o0unfdD6heA7/jMajJE ZsTSWOjHd58xbyc71xua8n41ysSTIb0kBGAyl+rGgiO04FUFmD7slE6E5ZFRk8kd ht6HLlc7d6w6ClPBXASuvGdsiGtOUQVVoZVFnkA0X8ums2V9hVcaXW7pTJaSZC6w Kzru0Gc20nLJiw+HNT/VIFFOrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp6oA2r jyrIZY3EF1Oddl2cKXoHMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJe53FrVn+o/YbZXbxi+8xRaPk/F6+56aS4AhZVn9efZ8ld+nVeaaLbdVJZ1b Tpa7vSk1/lGGbq9lTRdF2q0DMq5tuT0WpvsFFIH0sqLzkNWOQO8W+0eHzM9LjwHZ Oxryov1TYaXozqJGlH8E/LYNe9nolW7Z8buuKSzUO7sHAc01E/DNUOrWbGYu/pz7 smiZ9k8L8ScuT5I6YIMuTHyB4dg/vA0i0gfNXH/tjgSO4jh0sFu6hh1blyqn2NXZ uZBPdm+ACJqntN17wS8/TfY2q6kgvSrXY/hiI1wc8IzEv2wokcCGevn6G7VBFKSS Favu6NIg5IbXY5K61KDEhItEWQ== -----END CERTIFICATE-----Generated at Mon Jun 22 11:49:10 2026 by rpki-client