$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: jD0+hS0vDpHBgRdTqJ5hx+m18ONzKkvoOlLFaQ/7Cqo= Subject key identifier: B8:1B:11:96:CC:E6:B6:DC:10:91:22:5C:10:9E:CC:A4:91:C0:E4:2D Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 191B Signing time: Wed 22 Jul 2026 16:31:33 +0000 Manifest this update: Wed 22 Jul 2026 16:31:32 +0000 Manifest next update: Wed 29 Jul 2026 16:31:32 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 5Hbikv27qSdSnk+yE1sTdJ39vaTLp8vvT/CMmWGiVvw=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6498 (0x1962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jul 22 16:31:32 2026 GMT Not After : Jul 29 16:31:32 2026 GMT Subject: CN=6a60f065-be10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:a6:c9:d7:9a:39:e7:c6:bb:c4:c5:bc:c8: 02:57:1f:85:f8:db:33:34:e8:79:87:18:18:06:79: a6:f7:e5:fb:e4:5c:65:1b:e7:7e:97:21:d8:6c:bd: 23:3a:7d:38:90:aa:a1:0f:2f:94:a7:0c:bc:13:a1: 59:3d:4d:7d:76:90:00:bc:0d:a3:df:6b:ac:34:bb: dc:bb:1a:86:da:a2:a5:7e:0f:6e:6e:26:8e:0a:41: ca:4b:e5:2d:2c:93:a1:ca:9d:05:6f:50:43:33:2e: e1:fa:25:5d:e2:55:50:5b:7a:e0:07:20:9d:69:a2: ea:ea:ec:38:f9:a2:18:14:ba:79:dd:39:ce:15:6a: aa:c8:93:16:c6:39:0c:04:b7:7b:9b:5a:47:b9:e2: 32:49:98:db:d6:e9:1a:ca:09:6a:22:82:92:76:c1: e7:47:57:1c:53:07:e0:70:bd:49:41:e2:a7:b9:b3: 02:c4:6c:6c:0f:01:64:f5:45:88:5a:51:a4:c9:2b: 48:88:a7:ad:90:42:fe:e9:94:c7:62:f4:cc:57:17: bf:bf:06:75:38:1b:ad:23:bd:d6:37:61:6c:cf:db: fa:fd:0d:4c:93:3b:eb:9a:da:75:62:e7:2e:51:1a: 70:72:19:bd:78:5a:e6:d0:74:6b:81:02:6a:58:35: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:11:96:CC:E6:B6:DC:10:91:22:5C:10:9E:CC:A4:91:C0:E4:2D X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1d:93:70:5b:00:ca:7e:31:57:20:2e:4b:d5:58:4b:07:d9: 8c:9b:19:d6:88:bf:c4:88:9c:7d:a6:83:48:2b:0b:b1:e3:06: 1c:11:10:68:f0:be:33:a8:bb:b6:5d:38:62:0c:c1:ed:43:26: 44:22:1e:cb:f6:1b:23:ef:ad:d2:1a:1a:8c:02:19:4c:a3:ff: ef:84:57:e7:25:b7:75:c1:e1:56:45:8d:c4:23:98:a3:d7:8d: b0:c9:70:1e:b9:b4:87:52:99:c7:91:87:a6:61:03:c2:43:e0: de:ee:83:40:7c:b4:a6:8d:b5:b3:7e:d3:f4:56:9c:ca:46:1d: 3d:9f:57:3e:e1:89:01:7f:6b:aa:71:47:bf:80:05:7b:49:2a: 9c:83:7f:d9:69:e2:bf:4a:89:ec:4a:bf:f0:17:02:4d:08:ab: ff:5e:a8:02:6b:76:4b:28:24:7f:47:06:b9:00:51:c5:9b:96: e1:62:8f:c2:41:69:a9:34:b0:d3:e5:01:db:96:d2:3c:1b:72: fe:82:44:4d:89:b2:43:e6:8b:86:04:03:aa:c4:75:73:e0:07: 7a:5f:1b:cd:d5:0b:40:1e:8f:d5:d4:8b:17:52:d6:c6:8a:e8: e8:4c:3e:4f:0a:21:30:83:6c:32:0b:c4:56:c0:03:e8:22:cb: 70:f2:df:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwNzIyMTYzMTMyWhcNMjYwNzI5MTYzMTMyWjAYMRYwFAYD VQQDEw02YTYwZjA2NS1iZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUSmydeaOefGu8TFvMgCVx+F+NszNOh5hxgYBnmm9+X75FxlG+d+lyHYbL0j On04kKqhDy+Upwy8E6FZPU19dpAAvA2j32usNLvcuxqG2qKlfg9ubiaOCkHKS+Ut LJOhyp0Fb1BDMy7h+iVd4lVQW3rgByCdaaLq6uw4+aIYFLp53TnOFWqqyJMWxjkM BLd7m1pHueIySZjb1ukayglqIoKSdsHnR1ccUwfgcL1JQeKnubMCxGxsDwFk9UWI WlGkyStIiKetkEL+6ZTHYvTMVxe/vwZ1OButI73WN2Fsz9v6/Q1Mkzvrmtp1Yucu URpwchm9eFrm0HRrgQJqWDVunQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgbEZbM 5rbcEJEiXBCezKSRwOQtMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfB2TcFsAyn4xVyAuS9VYSwfZjJsZ1oi/xIicfaaDSCsLseMGHBEQaPC+M6i7 tl04YgzB7UMmRCIey/YbI++t0hoajAIZTKP/74RX5yW3dcHhVkWNxCOYo9eNsMlw Hrm0h1KZx5GHpmEDwkPg3u6DQHy0po21s37T9FacykYdPZ9XPuGJAX9rqnFHv4AF e0kqnIN/2Wniv0qJ7Eq/8BcCTQir/16oAmt2Sygkf0cGuQBRxZuW4WKPwkFpqTSw 0+UB25bSPBty/oJETYmyQ+aLhgQDqsR1c+AHel8bzdULQB6P1dSLF1LWxoro6Ew+ TwohMINsMgvEVsAD6CLLcPLfFA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:02 2026 by rpki-client