$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: MONnSMbmp21ghtpJY1nCNlxfwq9ApdOh1khN4mthWb0= Subject key identifier: 89:42:7D:67:05:7E:59:53:5D:4C:2C:CC:15:69:15:21:81:BB:E7:FC Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: B9 Signing time: Sun 27 Sep 2026 07:36:26 +0000 Manifest this update: Sun 27 Sep 2026 07:36:25 +0000 Manifest next update: Sun 04 Oct 2026 07:36:25 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: 1so/9EnJsv3roVZg9G+hHZOADqdXYWUoUIauJhZzjTo=) 2: 53B7196A627611F187FA49308B47A888.roa (hash: /0+V+2mNbQO3yIRgng3bkOu+Q6a16sPfs1xG0zllPzQ=) 3: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Sep 27 07:36:25 2026 GMT Not After : Oct 4 07:36:25 2026 GMT Subject: CN=6ab8c779-ca86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:26:e7:2d:82:3f:db:fd:88:25:46:8d:64: d5:db:5c:f6:97:f5:d5:a0:51:fe:ec:66:45:fe:54: 51:db:ce:f0:92:ba:91:aa:6e:0c:6f:d9:50:f7:31: d2:cd:ef:4d:40:87:e1:c5:6f:d5:1e:20:13:d1:ea: 5c:71:c7:b5:f2:60:23:ac:92:08:3d:59:40:4d:54: 0a:a8:9b:28:fc:e2:68:81:a3:ab:d6:84:a9:dd:05: 72:fe:d4:e3:28:ee:38:cf:5f:60:0b:31:e9:9a:6d: 47:46:4a:e3:c3:2a:a8:b8:67:88:f5:86:8e:00:16: 2d:75:0f:98:57:ed:88:63:3b:00:3c:c3:76:d9:2f: ba:f6:fe:a6:00:37:ee:12:19:26:e1:32:71:41:87: 29:15:a1:1e:b5:0b:d2:70:61:bd:a6:d8:e2:20:a8: 24:55:75:dd:9e:10:a8:e8:34:55:94:fa:a0:09:6e: ec:2a:aa:39:7f:73:59:4b:0a:c6:82:6b:33:9e:51: 0e:d1:3e:de:19:ee:0b:3d:e5:92:40:ae:0d:d7:0c: 1c:98:c1:33:12:37:5e:0d:cf:29:44:9c:88:de:6f: fc:2d:37:bb:04:24:a6:45:ea:50:b9:64:73:19:ba: bb:c0:ed:af:c8:bd:07:9d:51:32:cc:0e:76:0b:ee: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:7D:67:05:7E:59:53:5D:4C:2C:CC:15:69:15:21:81:BB:E7:FC X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:0a:1d:e3:6b:d4:ac:ed:4b:ca:a7:90:55:3a:03:0b:6b:0a: 69:41:44:97:d5:1b:69:7d:ad:d2:23:b3:65:69:4f:45:7c:35: 37:06:a6:e9:2b:d9:54:e5:f7:22:9c:ed:09:9e:1a:c4:80:7d: fe:ec:fa:1c:fb:fa:3b:cf:5e:7e:97:ec:cf:b0:2e:23:a4:61: 3f:78:17:6e:9f:d9:b8:41:9f:5b:ac:2c:a9:0d:14:d2:72:68: 1f:78:4b:9e:21:cb:8a:64:71:dd:8a:a1:a6:ea:54:53:e1:5e: 02:83:a5:3b:11:7f:5a:21:45:33:8e:27:e1:ec:5b:5a:a7:21: a3:fe:de:13:9e:7e:b0:22:04:f3:1c:0c:fa:91:35:37:00:2a: ec:cc:84:d3:18:0e:f1:57:49:f1:55:64:1d:5e:cf:06:d6:a4: b7:e2:03:b8:83:42:40:de:f6:68:e3:d3:98:b2:3e:5c:bc:fb: 1b:3b:88:47:ef:ea:63:15:77:b0:96:f2:a3:37:9f:3e:dc:ca: 54:db:2d:46:35:43:b8:33:d6:e6:20:11:60:40:1d:a5:f0:d3: f3:96:2c:78:b9:79:0a:8f:7d:eb:8f:f6:53:61:9e:8d:f5:3f: ef:51:b6:95:f9:34:25:af:14:40:94:b7:0f:8c:4d:1d:61:ab: ab:6d:b6:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2NTYxMTAvBgNVBAUTKDE5RTA1QUZEMUU2QjM2MjU0QTVDQjE1MDM2MzkzODRC NkEyMkE4MjYwHhcNMjYwOTI3MDczNjI1WhcNMjYxMDA0MDczNjI1WjAYMRYwFAYD VQQDEw02YWI4Yzc3OS1jYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPEm5y2CP9v9iCVGjWTV21z2l/XVoFH+7GZF/lRR287wkrqRqm4Mb9lQ9zHS ze9NQIfhxW/VHiAT0epccce18mAjrJIIPVlATVQKqJso/OJogaOr1oSp3QVy/tTj KO44z19gCzHpmm1HRkrjwyqouGeI9YaOABYtdQ+YV+2IYzsAPMN22S+69v6mADfu Ehkm4TJxQYcpFaEetQvScGG9ptjiIKgkVXXdnhCo6DRVlPqgCW7sKqo5f3NZSwrG gmsznlEO0T7eGe4LPeWSQK4N1wwcmMEzEjdeDc8pRJyI3m/8LTe7BCSmRepQuWRz Gbq7wO2vyL0HnVEyzA52C+6MRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlCfWcF fllTXUwszBVpFSGBu+f8MB8GA1UdIwQYMBaAFBngWv0eazYlSlyxUDY5OEtqIqgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni80QTcwOTU2NEIw MEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5pVktYTEZRTmprNFMyb2lx Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5p VktYTEZRTmprNFMyb2lxQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwQod42vUrO1LyqeQVToDC2sKaUFEl9UbaX2t0iOzZWlPRXw1Nwam6SvZVOX3 IpztCZ4axIB9/uz6HPv6O89efpfsz7AuI6RhP3gXbp/ZuEGfW6wsqQ0U0nJoH3hL niHLimRx3YqhpupUU+FeAoOlOxF/WiFFM44n4exbWqcho/7eE55+sCIE8xwM+pE1 NwAq7MyE0xgO8VdJ8VVkHV7PBtakt+IDuINCQN72aOPTmLI+XLz7GzuIR+/qYxV3 sJbyozefPtzKVNstRjVDuDPW5iARYEAdpfDT85YseLl5Co9964/2U2GejfU/71G2 lfk0Ja8UQJS3D4xNHWGrq222TQ== -----END CERTIFICATE-----Generated at Mon Sep 28 12:53:59 2026 by rpki-client