$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: iOiJKjr5EWkZqJKqeam+kSm0pgFm5RpnhNpDbvC5+4E= Subject key identifier: B0:60:8C:72:84:11:79:A0:11:49:39:AA:5F:B5:71:99:4C:48:2A:03 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 199D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1956 Signing time: Sat 14 Nov 2026 16:21:09 +0000 Manifest this update: Sat 14 Nov 2026 16:21:08 +0000 Manifest next update: Sat 21 Nov 2026 16:21:08 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: WmtDs7z4NTyP9w1SUu33O0o/DDIYhlO6dH9OL8sDRpI=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6557 (0x199d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 14 16:21:08 2026 GMT Not After : Nov 21 16:21:08 2026 GMT Subject: CN=6af88a75-49ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:26:f8:da:75:09:2a:02:89:31:97:55:41: bd:eb:84:66:ae:68:92:2d:e4:20:de:1b:36:6e:f1: d8:19:0b:3a:04:50:13:f7:e2:95:0a:97:73:f6:7b: ae:b5:81:84:e3:dd:74:bf:32:63:3c:fb:ed:60:89: b1:4a:cd:25:b3:85:67:70:59:33:b6:d8:5b:73:2f: ba:da:fa:8e:43:6b:8c:e0:65:cf:8f:0b:db:7d:19: 5c:df:dd:52:d4:4a:96:eb:b1:ad:90:c3:ad:40:dd: 96:a2:73:aa:27:ff:5e:72:99:79:32:72:7b:e1:73: 51:5d:c0:00:8b:18:e6:55:c4:49:8d:c7:ad:4a:00: a5:10:6a:9a:6f:44:77:7b:10:1c:01:71:13:c6:9e: 32:cc:cc:dc:b7:0d:b6:e0:f3:00:82:55:75:dd:e4: f6:b0:16:6b:65:cf:fc:6f:27:a3:3e:98:78:51:39: af:5e:53:8a:71:ae:64:64:9d:60:f3:4a:8f:95:eb: 3a:ac:37:8b:6b:98:5e:af:b4:66:ff:c3:fa:5f:70: 07:22:14:30:9c:0e:82:ab:15:b9:34:23:74:05:c9: 92:0b:89:d3:6e:db:8c:50:59:9b:f9:05:57:bd:76: 4b:8d:1d:44:d6:cb:58:67:43:9b:39:59:d7:fa:cd: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:8C:72:84:11:79:A0:11:49:39:AA:5F:B5:71:99:4C:48:2A:03 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:af:bf:e4:4d:a5:f5:f5:8e:b2:a5:c4:29:e6:d3:f8:3e: 02:e0:3b:b9:32:98:ff:8a:27:ec:5c:c4:f4:41:65:1d:6c:2c: 8c:02:5e:40:40:ab:77:49:f4:36:58:34:f2:fa:f8:9d:0f:f5: 90:3e:34:c6:30:69:a2:87:6a:42:b2:ab:92:ce:3d:db:ea:fd: 72:47:03:73:56:2d:63:24:79:48:1d:0f:29:c7:21:9e:81:93: 95:d4:64:65:fb:8e:f5:40:07:31:cb:89:7d:39:82:67:45:6d: 1d:e6:80:88:cb:de:a0:7f:ad:98:77:91:4e:bb:c6:45:b0:5d: ee:02:99:e4:3c:98:04:f0:e6:d8:80:5f:c8:f4:f2:09:3f:f4: c4:b3:d4:a3:70:ce:d3:93:16:cf:5b:97:a8:51:37:7c:ef:cb: 25:60:88:8d:dd:d0:a3:f1:86:2d:a7:01:99:43:af:3d:1e:9b: 2c:6e:b3:74:c1:c2:ab:e3:b0:b0:2d:06:fe:73:7c:6c:d2:26: 02:2e:b6:f7:45:2f:de:39:74:c0:82:4d:95:18:df:b7:0e:02: 34:2e:0d:fa:3b:5e:b0:42:89:39:fe:7e:c4:dd:9e:24:29:37: 63:32:8d:b3:f6:ac:ed:87:35:09:61:46:bc:69:93:d6:53:45: 8f:88:7d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYxMTE0MTYyMTA4WhcNMjYxMTIxMTYyMTA4WjAYMRYwFAYD VQQDEw02YWY4OGE3NS00OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9Qm+Np1CSoCiTGXVUG964RmrmiSLeQg3hs2bvHYGQs6BFAT9+KVCpdz9nuu tYGE4910vzJjPPvtYImxSs0ls4VncFkztthbcy+62vqOQ2uM4GXPjwvbfRlc391S 1EqW67GtkMOtQN2WonOqJ/9ecpl5MnJ74XNRXcAAixjmVcRJjcetSgClEGqab0R3 exAcAXETxp4yzMzctw224PMAglV13eT2sBZrZc/8byejPph4UTmvXlOKca5kZJ1g 80qPles6rDeLa5her7Rm/8P6X3AHIhQwnA6CqxW5NCN0BcmSC4nTbtuMUFmb+QVX vXZLjR1E1stYZ0ObOVnX+s0iYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBgjHKE EXmgEUk5ql+1cZlMSCoDMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhOvv+RNpfX1jrKlxCnm0/g+AuA7uTKY/4on7FzE9EFlHWwsjAJeQECrd0n0 Nlg08vr4nQ/1kD40xjBpoodqQrKrks492+r9ckcDc1YtYyR5SB0PKcchnoGTldRk ZfuO9UAHMcuJfTmCZ0VtHeaAiMveoH+tmHeRTrvGRbBd7gKZ5DyYBPDm2IBfyPTy CT/0xLPUo3DO05MWz1uXqFE3fO/LJWCIjd3Qo/GGLacBmUOvPR6bLG6zdMHCq+Ow sC0G/nN8bNImAi6290Uv3jl0wIJNlRjftw4CNC4N+jtesEKJOf5+xN2eJCk3YzKN s/as7Yc1CWFGvGmT1lNFj4h9yQ== -----END CERTIFICATE-----Generated at Sun Nov 15 17:21:23 2026 by rpki-client