
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json)
Hash identifier: WvsJ2l0eV8W635yb7drR7F/DwG0aBCtLltMjeYQtdEQ=
Subject key identifier: 04:D6:2D:2B:1C:FA:C0:C6:73:4D:3D:DF:4F:47:4F:D6:75:9B:41:A3
Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
Manifest number: 97
Signing time: Thu 23 Jul 2026 09:22:04 +0000
Manifest this update: Thu 23 Jul 2026 09:22:03 +0000
Manifest next update: Thu 30 Jul 2026 09:22:03 +0000
Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: 8iX6T3qy/VHKs3XngfHW4TvI3RLVObZHFV2212TMCY0=)
2: 53B7196A627611F187FA49308B47A888.roa (hash: /0+V+2mNbQO3yIRgng3bkOu+Q6a16sPfs1xG0zllPzQ=)
3: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Validity
Not Before: Jul 23 09:22:03 2026 GMT
Not After : Jul 30 09:22:03 2026 GMT
Subject: CN=6a61dd3b-7667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:27:9e:03:f5:ff:fc:fd:66:4c:4e:9a:48:07:
1e:f8:b2:42:0f:f8:95:48:12:0a:e0:db:c8:1c:ea:
b6:08:6b:7c:b1:6e:1e:c9:38:08:6e:76:68:14:df:
20:36:6b:35:5e:29:71:1c:fe:66:05:85:3e:f4:e7:
31:58:70:2e:7d:9a:26:18:2d:d2:4b:6b:50:50:27:
04:67:19:14:c9:98:13:8b:a2:bb:21:9c:d3:be:8c:
d6:b6:95:13:14:58:50:be:52:b0:fb:89:d0:3d:1c:
ba:69:d6:63:78:ef:b4:30:f4:5b:35:c1:4e:f9:1a:
65:09:e0:4f:fd:40:0d:61:9f:cd:07:d7:89:71:90:
23:28:12:2a:f1:68:09:e5:9b:cd:df:33:e7:58:c9:
64:30:e8:bf:ac:1e:3e:f2:c0:a4:5a:59:79:58:b9:
c8:6b:a0:fb:9d:82:d4:2e:e8:4c:2b:29:b1:9f:a5:
e4:41:23:81:6f:79:41:e8:4c:2e:6d:39:81:5d:ea:
16:ad:39:98:0d:22:04:9f:f0:37:5c:ec:7a:9d:c5:
13:fc:c7:0e:05:a6:c9:57:ce:f6:a4:02:71:73:d9:
af:cd:1a:75:d5:23:44:7d:fe:a5:85:2a:a5:26:cc:
0b:18:71:bd:ec:af:dc:c8:20:4d:d2:66:97:15:03:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:2D:2B:1C:FA:C0:C6:73:4D:3D:DF:4F:47:4F:D6:75:9B:41:A3
X509v3 Authority Key Identifier:
keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:e6:b7:c9:98:b7:13:e8:84:4a:ff:36:f4:39:42:3f:f4:
65:58:42:e5:63:74:81:6b:08:94:7d:99:19:e6:cc:cd:2a:b3:
b2:6a:8f:de:fb:f8:b6:17:f5:a3:d3:8d:6a:b9:9c:70:24:db:
87:34:f9:b0:17:63:d3:01:ea:33:cb:ac:fa:7a:4a:a1:25:d4:
0a:e7:80:e4:4b:13:87:8e:39:7b:95:cb:0a:ff:ff:2d:39:68:
83:3e:4c:9e:01:5f:1d:74:90:61:05:dc:47:c2:26:3d:e1:98:
be:9b:2f:90:a6:52:4c:8c:8f:26:81:dc:66:8b:b0:f4:fd:2e:
8a:aa:35:b8:f0:2f:10:5d:4a:f8:40:b1:6a:03:e0:10:b2:37:
59:af:68:db:a8:2f:e0:db:ef:93:2b:0c:62:98:44:d2:06:b5:
c3:31:79:5b:90:e8:ed:94:81:5f:f9:20:ab:73:6c:64:21:8e:
b5:23:43:5b:c9:3e:59:c1:1e:5e:23:16:6d:f7:1b:25:75:60:
87:41:c9:a1:18:7b:bf:4b:cd:f2:95:63:2b:2b:ea:8b:1e:4a:
f1:e0:1c:5a:a4:5a:00:0a:03:d6:d6:5a:72:d5:3d:82:55:7c:
84:a5:71:fc:2a:86:08:7a:28:08:a8:a5:36:f8:51:dc:34:9e:
92:0c:75:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA2NTYxMTAvBgNVBAUTKDE5RTA1QUZEMUU2QjM2MjU0QTVDQjE1MDM2MzkzODRC
NkEyMkE4MjYwHhcNMjYwNzIzMDkyMjAzWhcNMjYwNzMwMDkyMjAzWjAYMRYwFAYD
VQQDEw02YTYxZGQzYi03NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/yeeA/X//P1mTE6aSAce+LJCD/iVSBIK4NvIHOq2CGt8sW4eyTgIbnZoFN8g
Nms1XilxHP5mBYU+9OcxWHAufZomGC3SS2tQUCcEZxkUyZgTi6K7IZzTvozWtpUT
FFhQvlKw+4nQPRy6adZjeO+0MPRbNcFO+RplCeBP/UANYZ/NB9eJcZAjKBIq8WgJ
5ZvN3zPnWMlkMOi/rB4+8sCkWll5WLnIa6D7nYLULuhMKymxn6XkQSOBb3lB6Ewu
bTmBXeoWrTmYDSIEn/A3XOx6ncUT/McOBabJV872pAJxc9mvzRp11SNEff6lhSql
JswLGHG97K/cyCBN0maXFQNXzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATWLSsc
+sDGc009309HT9Z1m0GjMB8GA1UdIwQYMBaAFBngWv0eazYlSlyxUDY5OEtqIqgm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni80QTcwOTU2NEIw
MEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5pVktYTEZRTmprNFMyb2lx
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5p
VktYTEZRTmprNFMyb2lxQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYgjmt8mYtxPohEr/NvQ5Qj/0ZVhC5WN0gWsIlH2ZGebMzSqzsmqP3vv4thf1
o9ONarmccCTbhzT5sBdj0wHqM8us+npKoSXUCueA5EsTh445e5XLCv//LTlogz5M
ngFfHXSQYQXcR8ImPeGYvpsvkKZSTIyPJoHcZouw9P0uiqo1uPAvEF1K+ECxagPg
ELI3Wa9o26gv4NvvkysMYphE0ga1wzF5W5Do7ZSBX/kgq3NsZCGOtSNDW8k+WcEe
XiMWbfcbJXVgh0HJoRh7v0vN8pVjKyvqix5K8eAcWqRaAAoD1tZactU9glV8hKVx
/CqGCHooCKilNvhR3DSekgx1xA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:41 2026 by rpki-client