$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: V6XIDvWBZrutFrO2G2vXAS9vj717LCSWPEioAveinKU= Subject key identifier: 54:1D:CD:88:CA:34:32:39:2D:34:CD:D5:C7:7E:B2:A7:7F:D5:A4:A4 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 18DE Signing time: Tue 24 Mar 2026 16:21:57 +0000 Manifest this update: Tue 24 Mar 2026 16:21:57 +0000 Manifest next update: Tue 31 Mar 2026 16:21:57 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: Np9ntH649Pk+8DYAgbFCp9Yy/O9xkwGvN35tULGtVDk=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6437 (0x1925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Mar 24 16:21:57 2026 GMT Not After : Mar 31 16:21:57 2026 GMT Subject: CN=69c2ba25-6a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:66:bb:d5:61:40:d1:fc:c3:39:4f:70:1b: 11:d4:f1:36:ef:a1:7e:2b:b0:2a:be:b4:38:99:22: 45:f0:9b:4a:e0:fe:dd:04:93:00:2a:f0:da:a6:a4: 50:6b:21:f1:0c:7e:4f:2a:89:a8:fc:a7:d1:d1:3e: 6d:52:42:35:77:db:f0:26:fe:85:73:4a:49:bc:16: 9c:d4:09:85:98:ba:c9:18:75:5a:32:45:e5:82:b4: fd:c6:9a:e7:8f:23:31:03:e0:9c:6e:eb:ec:e7:dc: f2:d6:7c:82:5d:7a:93:91:24:19:8f:9f:43:09:8d: 7c:17:3c:96:77:e0:2d:2b:79:17:c2:77:ab:89:86: d5:ed:ba:e6:5b:3c:0d:a1:1b:55:fe:40:08:d7:9b: 5a:db:44:8b:36:cb:60:23:0e:c7:2b:a3:91:3b:df: 72:e0:d9:ab:53:33:b0:71:e4:ab:10:ca:d7:d2:8e: 4a:a8:71:d4:d7:ae:4a:50:11:6d:74:c5:ec:4f:d0: d6:64:93:b2:33:ae:24:60:39:5a:6d:0c:1e:08:1e: aa:b6:7a:98:b5:b1:ee:f4:7b:e2:fb:cd:31:dd:64: d3:20:b6:68:3b:f6:14:2b:8f:1c:8e:5e:eb:2f:90: 3e:a5:af:c7:47:69:f1:dc:89:36:25:d0:e6:7c:0b: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:CD:88:CA:34:32:39:2D:34:CD:D5:C7:7E:B2:A7:7F:D5:A4:A4 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ca:80:0c:2b:8a:ac:48:35:ab:23:92:5b:68:06:00:87:c5: 63:98:91:e9:4b:96:32:a6:59:b7:d9:c3:9f:0a:5e:5c:05:f3: 2c:c7:c3:91:2a:20:3f:a4:5f:a8:a0:f4:02:4f:76:90:dc:28: 47:b6:9d:99:31:83:d4:94:61:e9:a9:df:e5:b9:18:8a:37:b2: 70:a1:b3:1b:b8:a8:3b:6f:97:bf:74:41:05:4d:73:28:3d:e0: ce:45:4a:08:87:e2:2f:e0:5c:05:4b:f0:34:cd:e1:42:2d:a7: 6e:28:b4:db:65:e3:34:a0:c2:09:15:5d:9b:59:36:22:9e:15: b6:62:2c:2e:37:cb:da:4e:0a:f8:9f:e5:9c:ff:a5:53:05:22: 4d:d0:18:3b:24:f9:c8:1f:48:94:93:c2:a1:4d:58:8e:4d:e9: 30:51:58:5f:dc:b7:64:88:e8:4a:86:26:69:b4:8b:ff:bd:f4: 36:a0:45:63:79:19:1c:78:ee:3b:d6:81:f3:1e:61:36:38:bf: d6:9f:88:30:ed:c2:bf:42:91:69:38:fa:b8:93:8a:f6:b7:95: 64:f9:98:3e:35:fc:12:96:4e:fd:b8:2e:3b:f7:e6:1d:f1:ea: 8d:81:63:c7:13:04:4d:04:e0:f7:e4:5f:02:ad:80:53:da:c9: 7c:cd:53:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwMzI0MTYyMTU3WhcNMjYwMzMxMTYyMTU3WjAYMRYwFAYD VQQDEw02OWMyYmEyNS02YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoupmu9VhQNH8wzlPcBsR1PE276F+K7AqvrQ4mSJF8JtK4P7dBJMAKvDapqRQ ayHxDH5PKomo/KfR0T5tUkI1d9vwJv6Fc0pJvBac1AmFmLrJGHVaMkXlgrT9xprn jyMxA+Ccbuvs59zy1nyCXXqTkSQZj59DCY18FzyWd+AtK3kXwneriYbV7brmWzwN oRtV/kAI15ta20SLNstgIw7HK6ORO99y4NmrUzOwceSrEMrX0o5KqHHU165KUBFt dMXsT9DWZJOyM64kYDlabQweCB6qtnqYtbHu9Hvi+80x3WTTILZoO/YUK48cjl7r L5A+pa/HR2nx3Ik2JdDmfAswPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQdzYjK NDI5LTTN1cd+sqd/1aSkMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE8qADCuKrEg1qyOSW2gGAIfFY5iR6UuWMqZZt9nDnwpeXAXzLMfDkSogP6Rf qKD0Ak92kNwoR7admTGD1JRh6anf5bkYijeycKGzG7ioO2+Xv3RBBU1zKD3gzkVK CIfiL+BcBUvwNM3hQi2nbii022XjNKDCCRVdm1k2Ip4VtmIsLjfL2k4K+J/lnP+l UwUiTdAYOyT5yB9IlJPCoU1Yjk3pMFFYX9y3ZIjoSoYmabSL/730NqBFY3kZHHju O9aB8x5hNji/1p+IMO3Cv0KRaTj6uJOK9reVZPmYPjX8EpZO/bguO/fmHfHqjYFj xxMETQTg9+RfAq2AU9rJfM1TPQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:26 2026 by rpki-client