$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: ZgFLx9d5Jlmq9Wh66fo1kch1ZkeaqfO1d75Iy8Xo1e8= Subject key identifier: 04:89:C6:49:56:01:1C:E3:DD:69:3D:B1:CB:74:CE:14:88:1D:0B:3D Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1983 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 193C Signing time: Thu 24 Sep 2026 16:23:56 +0000 Manifest this update: Thu 24 Sep 2026 16:23:56 +0000 Manifest next update: Thu 01 Oct 2026 16:23:56 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: ArDrdTbKy4RLxIObmKtCTq0faIOiAsjlCv8A58xaMwI=) 2: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 4: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6531 (0x1983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Sep 24 16:23:56 2026 GMT Not After : Oct 1 16:23:56 2026 GMT Subject: CN=6ab54e9c-52f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:2a:d2:13:02:5e:74:7a:aa:5c:71:87:1f: ec:7d:2b:25:f9:44:f4:cd:b4:3a:a5:80:c9:28:da: f8:dd:2b:79:a2:48:db:ee:5f:3b:a5:12:7c:1b:17: 09:b1:3d:ed:2d:d4:c3:b3:4d:8a:2c:44:22:cb:73: 63:1b:fb:ca:46:bb:45:43:f0:5b:4e:09:63:79:2c: 4e:b8:3d:a5:03:b4:2f:f2:cd:bc:9a:66:4e:e4:5d: b6:f5:dd:ca:bc:00:d3:f8:b2:b6:00:d0:94:67:62: 21:0c:2a:6f:86:53:ed:25:95:5f:21:8f:cb:94:aa: 89:b3:53:61:b7:8e:fc:0f:9a:d7:56:cf:83:29:d8: ea:f0:67:c0:e4:15:38:76:f3:cb:4f:fa:97:ba:55: 83:b0:c8:23:d5:8f:84:f0:58:30:7d:b4:57:0e:d0: 98:f1:1b:d1:2a:dc:e5:2d:de:1a:df:3f:86:4e:6d: 47:ae:61:de:d9:1d:e0:8c:d8:42:6a:d4:07:aa:f9: 29:de:41:91:68:84:3b:f8:85:b5:09:0d:92:69:91: 9c:bd:3e:64:57:37:b5:37:a9:f5:c3:d1:42:0b:55: a2:ac:33:83:1b:89:72:ac:00:2c:50:38:ff:4f:a7: 1a:c7:51:b3:56:d6:0d:a4:28:7a:60:f7:dc:c3:0c: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:89:C6:49:56:01:1C:E3:DD:69:3D:B1:CB:74:CE:14:88:1D:0B:3D X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:42:92:d7:de:99:be:68:f0:bf:67:c5:5b:1d:88:3f:7e:25: 9a:da:56:81:12:07:61:7f:c1:05:fb:d8:f7:58:b3:c4:02:71: 64:b9:3c:3b:7c:53:cf:46:a3:eb:c0:af:dd:5d:94:1f:fa:67: c2:41:e8:f7:58:98:b0:af:2b:3b:92:a7:e4:df:9c:32:4e:77: 7a:8d:27:6c:2e:22:2d:5b:31:ed:b1:e8:00:9e:ea:8d:12:47: 28:90:80:5d:16:20:54:59:2f:ce:ea:7e:32:33:52:d7:c3:0b: 23:13:14:2b:d8:0f:0e:2d:36:eb:e6:57:d5:d6:2d:21:08:46: c6:1d:f3:ca:81:4e:e4:7e:3a:e7:41:5d:ce:8d:e1:3f:33:61: aa:db:6f:f4:ce:cd:7e:79:d2:4d:08:18:1d:4a:fd:00:76:ac: ad:e6:bc:54:38:82:80:c4:b8:be:78:db:f1:53:7e:38:cd:d6: c9:d4:6b:f0:1f:10:fd:fa:ba:3e:c9:d3:15:c2:c6:3a:8e:c0: d8:85:d7:d0:24:1c:de:7e:c2:09:d1:12:92:31:47:81:a7:c8: b4:35:85:f5:68:29:91:91:ad:01:6d:ae:f6:75:53:35:17:df: e3:cc:60:b5:09:72:72:c8:83:55:7d:89:f5:77:b4:36:6c:40: 3c:8c:c8:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwOTI0MTYyMzU2WhcNMjYxMDAxMTYyMzU2WjAYMRYwFAYD VQQDEw02YWI1NGU5Yy01MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYIq0hMCXnR6qlxxhx/sfSsl+UT0zbQ6pYDJKNr43St5okjb7l87pRJ8GxcJ sT3tLdTDs02KLEQiy3NjG/vKRrtFQ/BbTgljeSxOuD2lA7Qv8s28mmZO5F229d3K vADT+LK2ANCUZ2IhDCpvhlPtJZVfIY/LlKqJs1Nht478D5rXVs+DKdjq8GfA5BU4 dvPLT/qXulWDsMgj1Y+E8FgwfbRXDtCY8RvRKtzlLd4a3z+GTm1HrmHe2R3gjNhC atQHqvkp3kGRaIQ7+IW1CQ2SaZGcvT5kVze1N6n1w9FCC1WirDODG4lyrAAsUDj/ T6cax1GzVtYNpCh6YPfcwwz2NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASJxklW ARzj3Wk9sct0zhSIHQs9MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlkKS196Zvmjwv2fFWx2IP34lmtpWgRIHYX/BBfvY91izxAJxZLk8O3xTz0aj 68Cv3V2UH/pnwkHo91iYsK8rO5Kn5N+cMk53eo0nbC4iLVsx7bHoAJ7qjRJHKJCA XRYgVFkvzup+MjNS18MLIxMUK9gPDi026+ZX1dYtIQhGxh3zyoFO5H4650Fdzo3h PzNhqttv9M7NfnnSTQgYHUr9AHasrea8VDiCgMS4vnjb8VN+OM3WydRr8B8Q/fq6 PsnTFcLGOo7A2IXX0CQc3n7CCdESkjFHgafItDWF9WgpkZGtAW2u9nVTNRff48xg tQlycsiDVX2J9Xe0NmxAPIzIHw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:22:21 2026 by rpki-client