$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: MB1A+yGabrq3zamd5U10GgKfYyWWDKqKO75g8LIKS+Q= Subject key identifier: C5:1F:85:95:98:CB:8A:A6:74:11:A6:5E:29:1E:81:EF:DA:7C:7F:8A Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: 58 Signing time: Wed 25 Mar 2026 07:24:00 +0000 Manifest this update: Wed 25 Mar 2026 07:23:59 +0000 Manifest next update: Wed 01 Apr 2026 07:23:59 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: i/IMuDC1exhiA88dsEDrY/eTm3TiGYpXWH18HzLWIY0=) 2: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=) 3: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: HwzcTj+6E2of2zeq8O1Ng/ngV7Rw888FF8/vBEBckro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Mar 25 07:23:59 2026 GMT Not After : Apr 1 07:23:59 2026 GMT Subject: CN=69c38d90-c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:c5:32:b2:95:e3:24:eb:bb:41:c4:df:13: 2d:4d:6d:9a:93:b7:23:7d:4d:d3:72:44:51:d7:7f: 31:00:fc:54:44:32:11:1a:6d:45:78:6b:58:0f:11: 9e:79:5f:68:80:6c:36:7d:ab:f3:82:ec:ef:15:6e: a2:32:d7:8f:0a:56:30:0d:99:54:07:77:90:09:8c: fd:1d:8c:42:f2:e1:5e:fa:c9:4b:c7:2d:fb:11:9e: 05:7e:26:08:63:fd:43:1a:92:bb:9d:02:ea:d3:49: f0:fd:d8:f8:38:8b:52:91:44:7a:d6:d4:e7:66:63: 8e:a2:de:93:a3:36:8a:8d:dc:8f:ae:f0:bf:e0:41: f9:a8:b8:8c:6f:a7:7f:4c:2d:09:84:a7:69:5f:bb: ff:77:39:f3:f5:49:0a:61:03:e2:de:9f:68:64:f6: 27:e0:34:63:99:21:2a:6a:16:47:8f:26:3a:d3:04: 5b:ef:07:01:9d:97:9f:79:b8:6c:e3:12:aa:55:54: cb:97:44:ab:80:07:a8:30:cd:a5:c9:30:0e:0d:b4: 62:9e:f7:92:67:eb:e7:93:f1:7a:57:2a:23:25:20: 6f:d3:16:60:9e:c6:d2:30:0e:f4:bb:db:35:73:33: 72:05:e0:c2:70:8d:40:d6:a3:ce:0c:95:4f:8a:d6: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:85:95:98:CB:8A:A6:74:11:A6:5E:29:1E:81:EF:DA:7C:7F:8A X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ac:01:72:51:7f:02:ef:3c:ac:11:8e:b4:f3:b4:ce:3c:87: 4f:e0:ed:59:fe:05:80:55:4f:95:85:33:15:26:53:81:96:90: 49:74:ae:f6:01:60:30:f6:aa:8c:90:98:a0:30:68:c0:c7:c7: 6e:a9:c1:ae:d1:4d:6b:e0:ed:a8:42:b4:bf:d6:d6:89:e4:59: 52:4f:ad:33:00:22:d0:cc:ea:43:d1:f2:b2:6c:f3:80:2a:05: fc:50:ae:1e:2c:07:92:9e:9d:d0:85:2e:93:f1:aa:3f:d4:8e: 1e:9e:46:ab:5a:1f:73:cf:89:27:fd:7c:d2:f8:57:04:3c:ed: 14:79:8e:61:d0:ff:f0:26:ec:76:56:36:21:10:04:ac:95:05: 84:52:19:81:4a:fd:df:f9:55:40:1e:b4:eb:8a:a9:8d:ca:8c: 46:e8:1f:98:7b:1c:fc:7b:07:52:f3:a7:d5:e2:64:f7:c1:fb: 49:e8:9a:af:63:c0:b9:50:5f:2e:0b:98:78:06:dc:fa:aa:7d: 4e:a4:d8:af:d9:20:0e:ab:b7:3b:99:fa:6b:0e:6d:34:7e:29: ac:0f:f4:e0:fd:86:0e:f7:c6:cf:53:66:51:fc:68:ee:45:83: 30:1b:8f:2d:a6:a8:2d:59:4e:b9:e9:d0:c5:7a:05:cc:62:92: 2a:17:93:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNjAzMjUwNzIzNTlaFw0yNjA0MDEwNzIzNTlaMBgxFjAUBgNV BAMTDTY5YzM4ZDkwLWM1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCru8UyspXjJOu7QcTfEy1NbZqTtyN9TdNyRFHXfzEA/FREMhEabUV4a1gPEZ55 X2iAbDZ9q/OC7O8VbqIy148KVjANmVQHd5AJjP0djELy4V76yUvHLfsRngV+Jghj /UMakrudAurTSfD92Pg4i1KRRHrW1OdmY46i3pOjNoqN3I+u8L/gQfmouIxvp39M LQmEp2lfu/93OfP1SQphA+Len2hk9ifgNGOZISpqFkePJjrTBFvvBwGdl595uGzj EqpVVMuXRKuAB6gwzaXJMA4NtGKe95Jn6+eT8XpXKiMlIG/TFmCextIwDvS72zVz M3IF4MJwjUDWo84MlU+K1q4RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxR+FlZjL iqZ0EaZeKR6B79p8f4owHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzRBNzA5NTY0QjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlW S1hMRlFOams0UzJvaXFDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJrAFyUX8C7zysEY6087TOPIdP4O1Z/gWAVU+VhTMVJlOBlpBJdK72AWAw9qqM kJigMGjAx8duqcGu0U1r4O2oQrS/1taJ5FlST60zACLQzOpD0fKybPOAKgX8UK4e LAeSnp3QhS6T8ao/1I4enkarWh9zz4kn/XzS+FcEPO0UeY5h0P/wJux2VjYhEASs lQWEUhmBSv3f+VVAHrTriqmNyoxG6B+Yexz8ewdS86fV4mT3wftJ6JqvY8C5UF8u C5h4Btz6qn1OpNiv2SAOq7c7mfprDm00fimsD/Tg/YYO98bPU2ZR/GjuRYMwG48t pqgtWU656dDFegXMYpIqF5PS -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:00 2026 by rpki-client