$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: MhkIyv5T6U9mgUhm+lt4ANPuR75n9GdempeXkYKSEKI= Subject key identifier: D3:2B:C0:DA:85:E9:79:9F:2A:A5:53:6E:5B:B8:35:6B:FF:13:9B:E9 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1922 Signing time: Tue 04 Aug 2026 16:28:43 +0000 Manifest this update: Tue 04 Aug 2026 16:28:43 +0000 Manifest next update: Tue 11 Aug 2026 16:28:43 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: VzSIxfenvaSiBr6FiU1akPMr0Rom1TC8NHdVpvKNCJE=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 16:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6505 (0x1969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Aug 4 16:28:43 2026 GMT Not After : Aug 11 16:28:43 2026 GMT Subject: CN=6a72133b-24ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:29:9f:33:f4:c5:87:a2:07:10:61:d0:32: 56:83:83:46:6f:ad:80:8e:12:f0:cc:60:39:ed:fa: 20:a3:6a:1c:85:00:32:12:d5:9f:43:f6:94:f9:89: b6:1c:fe:07:53:15:eb:e9:fa:74:29:08:cb:a7:a3: fd:c4:59:70:45:5e:9d:05:4f:7b:c0:dc:5f:98:9d: 20:65:da:82:b3:1c:c7:fa:0d:d9:83:68:2b:06:ff: a7:f7:90:8c:12:a0:3d:31:e8:ba:88:42:94:c8:b7: f0:d6:b6:67:e1:1d:4a:9b:9f:3e:c9:0a:4c:f6:2b: 2f:9a:cd:e2:79:52:74:68:0f:e6:69:fb:d7:e4:84: 38:b2:d1:70:c0:93:46:e7:78:ca:ec:09:e4:17:d1: e4:fb:78:bd:72:32:cb:b8:29:4c:60:2b:b9:56:dd: aa:63:f3:34:bf:04:e0:58:ea:f5:d7:bc:38:d3:d1: a0:ba:37:f7:33:80:88:83:35:9b:72:8c:1f:f0:c9: 42:de:38:54:21:22:f5:90:24:40:df:ba:27:c5:4d: 2c:fc:35:e3:40:37:dc:43:b1:b0:af:e7:c6:65:8e: c0:4b:c0:7d:b1:32:15:5f:80:75:f4:c8:1b:ee:e9: 9f:26:e6:7d:12:25:19:c7:bb:6a:41:d9:49:ae:ed: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:C0:DA:85:E9:79:9F:2A:A5:53:6E:5B:B8:35:6B:FF:13:9B:E9 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:77:ab:eb:04:83:ae:77:e3:a8:c9:10:08:fb:70:24:10:21: 1f:08:92:23:73:af:b2:03:5e:b4:84:e0:80:4f:fd:35:57:bd: e5:6f:9c:2f:17:eb:3c:1c:05:ca:b3:ed:79:96:cc:4f:5c:09: 8f:0a:66:cd:a6:89:30:01:e5:e9:c3:43:2a:08:ee:24:f3:96: b0:1e:c3:fd:8b:8f:cd:b7:43:67:63:77:a4:fd:9d:88:13:37: ba:c1:75:75:c9:41:5c:d3:96:60:68:21:2a:3b:04:87:dc:7d: 98:d4:2c:ac:2f:ce:64:dd:b3:74:f9:d4:cd:08:00:ec:3f:21: ab:e0:6b:50:de:fb:bd:97:80:11:09:20:af:f1:f1:a7:16:b6: bc:68:04:af:bd:66:17:6d:86:ef:74:51:9c:11:54:41:f2:29: 98:a0:a3:7c:27:80:0a:8e:19:e1:f0:63:ae:aa:68:b5:37:a4: f6:d6:91:16:dd:69:d9:f8:1d:d6:bb:ae:77:09:fa:20:96:dd: 4d:53:26:74:7c:a0:3e:f9:ae:fb:2f:d0:26:4a:17:ab:a6:63: 19:76:54:c3:46:31:d4:3d:cc:b0:ce:ad:16:bb:0b:9c:3c:67: 52:67:b0:99:2d:01:07:ad:46:61:b6:26:83:77:71:f7:5f:9c: 60:0a:92:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwODA0MTYyODQzWhcNMjYwODExMTYyODQzWjAYMRYwFAYD VQQDEw02YTcyMTMzYi0yNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojcpnzP0xYeiBxBh0DJWg4NGb62AjhLwzGA57fogo2ochQAyEtWfQ/aU+Ym2 HP4HUxXr6fp0KQjLp6P9xFlwRV6dBU97wNxfmJ0gZdqCsxzH+g3Zg2grBv+n95CM EqA9Mei6iEKUyLfw1rZn4R1Km58+yQpM9isvms3ieVJ0aA/mafvX5IQ4stFwwJNG 53jK7AnkF9Hk+3i9cjLLuClMYCu5Vt2qY/M0vwTgWOr117w409Ggujf3M4CIgzWb cowf8MlC3jhUISL1kCRA37onxU0s/DXjQDfcQ7Gwr+fGZY7AS8B9sTIVX4B19Mgb 7umfJuZ9EiUZx7tqQdlJru14rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMrwNqF 6XmfKqVTblu4NWv/E5vpMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHer6wSDrnfjqMkQCPtwJBAhHwiSI3OvsgNetITggE/9NVe95W+cLxfrPBwF yrPteZbMT1wJjwpmzaaJMAHl6cNDKgjuJPOWsB7D/YuPzbdDZ2N3pP2diBM3usF1 dclBXNOWYGghKjsEh9x9mNQsrC/OZN2zdPnUzQgA7D8hq+BrUN77vZeAEQkgr/Hx pxa2vGgEr71mF22G73RRnBFUQfIpmKCjfCeACo4Z4fBjrqpotTek9taRFt1p2fgd 1ruudwn6IJbdTVMmdHygPvmu+y/QJkoXq6ZjGXZUw0Yx1D3MsM6tFrsLnDxnUmew mS0BB61GYbYmg3dx91+cYAqSag== -----END CERTIFICATE-----Generated at Thu Aug 6 17:31:55 2026 by rpki-client