$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: BtwN+Vg3P5xskfb32+5HEFzjt0nEAZMKIGwU11pkrW4= Subject key identifier: BB:1F:75:4B:86:99:4B:E2:96:3C:A2:07:94:55:D1:82:8E:BD:91:D1 Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: 4B Signing time: Sun 01 Mar 2026 09:46:40 +0000 Manifest this update: Sun 01 Mar 2026 09:46:40 +0000 Manifest next update: Sun 08 Mar 2026 09:46:40 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: Ig6pJSVA991Fx6Bpo/kE6e4gGnTBnZuSynA/Kp+ZmJ4=) 2: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: OEUGMrYO6pAbSO+UePFCHSKCBYTSreP7y03ptjqbGzQ=) 3: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: k70gEb/vQZKVsEmAPsgRGzBkI7JP9upXlyJ2H32aUps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Mar 1 09:46:40 2026 GMT Not After : Mar 8 09:46:40 2026 GMT Subject: CN=69a40b00-7d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:0a:b9:18:5c:f5:fc:bf:db:92:4c:95:5e: 92:49:e5:83:9b:40:f4:ff:78:c5:c8:53:b0:87:c0: c2:57:5b:8e:9d:fe:dd:59:a7:bb:08:00:35:ae:23: 3e:28:39:65:b6:74:80:79:c1:42:10:52:a3:1d:e5: a4:1f:36:4b:d5:6a:d7:52:4c:94:8a:68:bd:66:ba: b2:85:b6:68:8c:9b:16:ea:f1:a8:cc:57:1b:dc:68: 49:1c:92:c3:4f:b9:8c:ad:87:39:54:62:aa:95:fe: 56:51:b4:8b:10:db:0a:c3:7b:42:a1:55:8f:29:71: 61:4c:14:1a:ca:16:19:5b:e0:cf:1d:4c:00:5c:b4: ed:e5:c5:30:8e:a6:c8:19:d9:63:bf:ce:63:1a:8d: 3f:b0:62:cc:df:a9:ee:b4:38:2d:0f:b1:74:e4:43: a9:43:99:64:a7:bb:ea:38:77:c3:e3:18:a4:39:de: 3b:f6:5c:e2:ca:3c:98:1c:ff:f5:b5:10:09:02:91: e1:c9:84:b6:da:85:43:60:b1:2d:9d:27:38:fe:d7: 51:b7:59:9f:6c:98:3c:69:61:e9:54:c8:a4:34:44: b8:64:0c:12:b7:05:69:cd:c5:3e:1b:98:76:c1:57: dd:49:7b:2d:d1:6b:59:30:d5:bd:12:8e:86:47:25: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1F:75:4B:86:99:4B:E2:96:3C:A2:07:94:55:D1:82:8E:BD:91:D1 X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:25:e2:37:45:98:eb:fa:f9:1c:3a:22:be:9e:41:e9:a1:f7: 8c:b8:bc:b4:31:f0:b2:2a:9b:57:0e:f7:5c:29:63:14:2a:ae: f6:f1:44:6c:66:7a:b0:b9:1a:ed:8b:49:18:ef:87:0e:84:c7: 0c:05:1a:ed:7c:59:8c:62:8e:06:14:d5:3d:7a:da:fa:93:53: 67:dd:c7:bf:2f:04:43:b0:a9:6c:47:f3:7a:b9:2d:41:da:09: 74:94:ee:80:d8:78:db:f1:e5:dc:27:94:1d:ee:f3:62:b6:5c: 15:81:98:81:09:66:fe:7f:e2:e3:b5:87:ec:ed:0d:3d:f4:73: ba:df:86:df:1c:f1:16:e1:89:bf:2b:b5:cc:53:01:0b:2b:3f: 83:bb:c1:72:3a:fa:22:9c:30:ee:fc:58:e5:9f:d1:9b:81:98: b6:40:a3:d0:a6:e9:2b:1f:a1:f2:20:82:ca:e1:ad:ab:2e:12: d2:f2:dd:e3:32:8b:8f:3e:b4:7a:79:88:9b:14:dc:7b:44:ce: c6:eb:48:66:cd:96:35:5e:9a:6e:dc:4e:64:46:43:92:65:bb: 0d:a3:6c:db:1c:f8:23:49:28:cd:51:37:44:17:df:fa:0f:98: 72:9c:d5:58:95:93:95:4d:26:cb:1a:65:2d:98:b0:17:52:f5: cc:62:de:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNjAzMDEwOTQ2NDBaFw0yNjAzMDgwOTQ2NDBaMBgxFjAUBgNV BAMTDTY5YTQwYjAwLTdkNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKYgq5GFz1/L/bkkyVXpJJ5YObQPT/eMXIU7CHwMJXW46d/t1Zp7sIADWuIz4o OWW2dIB5wUIQUqMd5aQfNkvVatdSTJSKaL1murKFtmiMmxbq8ajMVxvcaEkcksNP uYythzlUYqqV/lZRtIsQ2wrDe0KhVY8pcWFMFBrKFhlb4M8dTABctO3lxTCOpsgZ 2WO/zmMajT+wYszfqe60OC0PsXTkQ6lDmWSnu+o4d8PjGKQ53jv2XOLKPJgc//W1 EAkCkeHJhLbahUNgsS2dJzj+11G3WZ9smDxpYelUyKQ0RLhkDBK3BWnNxT4bmHbB V91Jey3Ra1kw1b0SjoZHJbyxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUux91S4aZ S+KWPKIHlFXRgo69kdEwHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzRBNzA5NTY0QjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlW S1hMRlFOams0UzJvaXFDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/JeI3RZjr+vkcOiK+nkHpofeMuLy0MfCyKptXDvdcKWMUKq728URsZnqwuRrt i0kY74cOhMcMBRrtfFmMYo4GFNU9etr6k1Nn3ce/LwRDsKlsR/N6uS1B2gl0lO6A 2Hjb8eXcJ5Qd7vNitlwVgZiBCWb+f+LjtYfs7Q099HO634bfHPEW4Ym/K7XMUwEL Kz+Du8FyOvoinDDu/Fjln9GbgZi2QKPQpukrH6HyIILK4a2rLhLS8t3jMouPPrR6 eYibFNx7RM7G60hmzZY1Xppu3E5kRkOSZbsNo2zbHPgjSSjNUTdEF9/6D5hynNVY lZOVTSbLGmUtmLAXUvXMYt5c -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:17 2026 by rpki-client