$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: eeMCL7qlx69ybsX6qyQcYlNM6U5AXKYzkAhKke59Fls= Subject key identifier: 75:69:1F:33:9D:08:89:DF:85:6C:8A:07:5C:36:FB:5C:F0:7D:E7:CA Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 08:02:03 +0000 Manifest this update: Mon 03 Nov 2025 08:02:03 +0000 Manifest next update: Mon 10 Nov 2025 08:02:03 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: Sfp2qpWa2AzwAkk/dyIf2FV9TbHbwZjaD5Lh/XJLQ5o=) 2: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: k70gEb/vQZKVsEmAPsgRGzBkI7JP9upXlyJ2H32aUps=) 3: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: OEUGMrYO6pAbSO+UePFCHSKCBYTSreP7y03ptjqbGzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Nov 3 08:02:03 2025 GMT Not After : Nov 10 08:02:03 2025 GMT Subject: CN=6908617b-478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:45:13:2c:07:1c:28:a0:b4:a3:7e:ba:dd:10: 23:41:7e:82:1a:8d:66:2c:f6:ed:ac:57:ad:2c:85: 2b:9a:7e:bd:53:fc:97:36:c9:fb:c3:fe:11:04:15: 80:da:0d:ea:11:16:e1:7b:75:a9:16:08:5c:8a:06: 67:a6:e5:97:ca:14:51:a6:5a:01:7e:bd:ed:f9:2e: 37:05:fd:7b:16:a3:e7:e2:54:28:c0:0b:dc:8b:bb: 46:c3:21:1c:39:49:c5:f7:6f:dd:f1:69:e1:05:ce: a3:15:a4:77:07:e0:e6:f8:51:a1:1c:9c:64:50:da: ea:2c:8f:9f:15:58:8b:7e:55:9d:32:55:08:c6:89: 5f:91:b6:ba:86:2f:04:30:53:ba:ea:82:b7:53:da: ae:84:bb:dd:99:95:d6:bb:0b:d2:77:bd:df:16:02: 25:fc:7a:bc:38:92:77:f1:30:74:2c:2a:f5:66:9d: 56:c6:39:e7:32:d8:1f:28:13:05:a1:86:06:a5:d2: d5:5a:6f:77:1d:55:0c:31:52:e2:d1:40:0b:e9:91: cb:20:16:dc:01:49:44:2a:a1:b8:c2:32:db:eb:db: 4c:cf:ea:c6:e8:88:d6:bd:1d:67:99:6a:0c:92:96: 8d:1f:e3:5d:36:fb:f2:78:1e:72:a3:82:a8:8b:29: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:1F:33:9D:08:89:DF:85:6C:8A:07:5C:36:FB:5C:F0:7D:E7:CA X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:42:40:c1:95:7b:4c:17:36:f6:33:1a:6a:ae:a6:c8:a8:41: cf:f5:82:06:9c:d6:41:49:6a:2e:9a:d0:56:7b:36:89:b4:34: b3:ee:9d:c6:b2:da:dd:8c:d8:9f:ec:97:1a:3f:50:05:ab:6b: 7a:b7:d6:e5:fa:ff:4c:17:42:79:75:3a:fd:91:dc:e7:44:40: 6f:a6:c3:35:81:f2:dd:93:e4:82:7b:b5:48:9b:bb:6c:2c:16: 53:66:63:e0:19:8d:3e:84:15:ad:60:2f:da:ea:08:c1:a6:8f: b0:97:78:16:90:63:f0:1b:a3:0d:9e:3b:6b:26:b1:8c:43:39: ab:10:97:f3:20:8e:72:52:10:f0:2b:40:79:83:14:9a:fd:81: 42:b5:a4:e8:ce:8a:d0:99:93:8d:4a:98:67:59:44:23:2d:ff: 64:77:31:0c:4e:92:39:0e:db:6b:ef:97:5c:ee:99:ef:3d:9e: fa:3f:f2:cd:90:70:65:a5:d3:c0:ea:75:ea:2d:0e:0c:c6:41: 5d:26:7a:bd:11:64:5e:72:e0:36:7d:dc:94:c4:18:fd:53:c2: ad:bd:ad:59:11:06:3a:23:74:84:58:ca:fa:29:23:98:9b:0b: 4a:d0:0b:c7:e6:27:b2:d9:ec:e4:3f:5e:9e:fd:ec:83:b1:a7: 5b:5e:a8:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNTExMDMwODAyMDNaFw0yNTExMTAwODAyMDNaMBgxFjAUBgNV BAMTDTY5MDg2MTdiLTQ3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1RRMsBxwooLSjfrrdECNBfoIajWYs9u2sV60shSuafr1T/Jc2yfvD/hEEFYDa DeoRFuF7dakWCFyKBmem5ZfKFFGmWgF+ve35LjcF/XsWo+fiVCjAC9yLu0bDIRw5 ScX3b93xaeEFzqMVpHcH4Ob4UaEcnGRQ2uosj58VWIt+VZ0yVQjGiV+RtrqGLwQw U7rqgrdT2q6Eu92Zlda7C9J3vd8WAiX8erw4knfxMHQsKvVmnVbGOecy2B8oEwWh hgal0tVab3cdVQwxUuLRQAvpkcsgFtwBSUQqobjCMtvr20zP6sboiNa9HWeZagyS lo0f4102+/J4HnKjgqiLKXD3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdWkfM50I id+FbIoHXDb7XPB958owHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzRBNzA5NTY0QjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlW S1hMRlFOams0UzJvaXFDWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANtCQMGVe0wXNvYzGmqupsioQc/1ggac1kFJai6a0FZ7Nom0NLPuncay 2t2M2J/slxo/UAWra3q31uX6/0wXQnl1Ov2R3OdEQG+mwzWB8t2T5IJ7tUibu2ws FlNmY+AZjT6EFa1gL9rqCMGmj7CXeBaQY/Abow2eO2smsYxDOasQl/MgjnJSEPAr QHmDFJr9gUK1pOjOitCZk41KmGdZRCMt/2R3MQxOkjkO22vvl1zume89nvo/8s2Q cGWl08DqdeotDgzGQV0mer0RZF5y4DZ93JTEGP1Twq29rVkRBjojdIRYyvopI5ib C0rQC8fmJ7LZ7OQ/Xp797IOxp1teqIc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:55 2025 by rpki-client