$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: Sfx7xTTZR+glOCDOjwXA4tdrY3RMWNFUUYPiVJBrj1g= Subject key identifier: 43:EA:9A:51:23:93:DE:28:0F:83:7D:90:6F:66:21:77:30:9A:6B:4A Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: BF Signing time: Fri 09 Oct 2026 07:39:29 +0000 Manifest this update: Fri 09 Oct 2026 07:39:28 +0000 Manifest next update: Fri 16 Oct 2026 07:39:28 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: SLWCC86ZOo3daoHe6xZZ+2yK78vlf53JOzokhYVHIjI=) 2: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=) 3: 53B7196A627611F187FA49308B47A888.roa (hash: /0+V+2mNbQO3yIRgng3bkOu+Q6a16sPfs1xG0zllPzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 07:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Oct 9 07:39:28 2026 GMT Not After : Oct 16 07:39:28 2026 GMT Subject: CN=6ac89a31-845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:4a:00:fa:5a:6f:c2:cf:c3:94:90:b7:15: dd:e3:7f:04:2b:3c:87:1a:9e:49:59:d5:cc:47:16: 5b:d3:b7:74:99:de:ad:8d:df:ad:27:27:be:49:36: a6:b3:c0:8e:a6:c5:a3:b4:bd:eb:8a:c7:5f:55:02: 81:b0:17:b7:71:7e:a8:52:52:93:cf:9c:2a:e6:88: c9:28:da:6b:92:97:31:18:f9:e5:ac:ec:3c:eb:e8: b7:46:13:0a:bc:16:78:76:3e:26:80:f8:10:33:56: 38:6d:92:be:b4:4f:40:39:e5:05:ad:0a:d4:6d:db: 99:6c:09:d5:4b:f5:07:eb:da:99:63:ea:be:f1:4d: b7:37:d4:82:df:bb:39:bb:51:31:da:7a:a2:4a:c9: ad:b0:f6:1b:96:47:0a:20:74:4e:6c:6e:79:30:36: 39:4f:6f:07:e3:89:68:05:19:4a:00:eb:50:c1:b3: a8:15:25:68:af:49:bf:15:d4:d9:8b:f2:fc:f9:58: 89:58:47:40:eb:91:4d:c2:51:e7:e9:00:3e:04:66: 09:12:34:7f:d3:c2:cd:5a:21:02:84:96:23:7d:c4: 38:b4:63:61:cf:3f:5e:93:e1:cb:9a:93:73:b7:73: 3b:6b:80:7f:c8:e2:d1:6a:d4:10:0a:88:d9:23:05: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:9A:51:23:93:DE:28:0F:83:7D:90:6F:66:21:77:30:9A:6B:4A X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:45:35:fa:bb:a3:02:49:27:27:32:ad:61:9e:d8:78:fe:26: 0e:91:f0:fc:c7:4f:d5:f9:fc:68:b5:67:31:14:1b:22:0c:6a: d3:a6:4c:28:23:b4:15:bb:f0:75:3d:42:cb:85:7c:0f:e9:43: 00:13:8f:e6:39:12:10:4d:c5:8b:c8:12:c5:9b:d7:2e:9f:0a: 99:fe:05:e9:ea:b9:e9:5f:68:5e:a6:f4:24:fa:80:cf:ba:46: 43:e7:dd:79:c7:3a:ae:4b:42:0e:31:87:c0:11:37:8f:35:3e: 45:d9:a3:9f:90:da:8a:81:48:41:2c:b6:91:cd:a2:8f:2a:a1: 1b:24:44:c7:e9:9a:ee:ff:e8:08:8c:77:2e:df:50:e4:96:55: 0d:08:e2:d9:52:0e:a8:de:d7:0a:ab:d1:90:40:df:1f:ba:72: 73:ec:79:25:13:9b:ab:14:3d:f7:51:46:47:6b:75:67:6b:f5: ef:84:0f:81:56:37:55:e2:7c:3a:99:77:01:3f:9b:dd:9b:dc: 5f:c5:2b:3c:8c:a9:80:bc:65:87:70:19:3c:93:6c:8d:d0:a4: a5:3d:63:92:a9:86:a9:43:66:5c:93:a8:f2:3c:d9:7d:01:fd: 49:19:9c:c1:c9:7a:a4:33:65:0f:09:2d:13:00:a6:a8:8a:24: d7:27:dc:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2NTYxMTAvBgNVBAUTKDE5RTA1QUZEMUU2QjM2MjU0QTVDQjE1MDM2MzkzODRC NkEyMkE4MjYwHhcNMjYxMDA5MDczOTI4WhcNMjYxMDE2MDczOTI4WjAYMRYwFAYD VQQDEw02YWM4OWEzMS04NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhlZKAPpab8LPw5SQtxXd438EKzyHGp5JWdXMRxZb07d0md6tjd+tJye+STam s8COpsWjtL3risdfVQKBsBe3cX6oUlKTz5wq5ojJKNprkpcxGPnlrOw86+i3RhMK vBZ4dj4mgPgQM1Y4bZK+tE9AOeUFrQrUbduZbAnVS/UH69qZY+q+8U23N9SC37s5 u1Ex2nqiSsmtsPYblkcKIHRObG55MDY5T28H44loBRlKAOtQwbOoFSVor0m/FdTZ i/L8+ViJWEdA65FNwlHn6QA+BGYJEjR/08LNWiEChJYjfcQ4tGNhzz9ek+HLmpNz t3M7a4B/yOLRatQQCojZIwUulQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPqmlEj k94oD4N9kG9mIXcwmmtKMB8GA1UdIwQYMBaAFBngWv0eazYlSlyxUDY5OEtqIqgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDY1Ni80QTcwOTU2NEIw MEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5pVktYTEZRTmprNFMyb2lx Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi9HZUJhX1I1ck5p VktYTEZRTmprNFMyb2lxQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxUU1+rujAkknJzKtYZ7YeP4mDpHw/MdP1fn8aLVnMRQbIgxq06ZMKCO0Fbvw dT1Cy4V8D+lDABOP5jkSEE3Fi8gSxZvXLp8Kmf4F6eq56V9oXqb0JPqAz7pGQ+fd ecc6rktCDjGHwBE3jzU+Rdmjn5DaioFIQSy2kc2ijyqhGyREx+ma7v/oCIx3Lt9Q 5JZVDQji2VIOqN7XCqvRkEDfH7pyc+x5JRObqxQ991FGR2t1Z2v174QPgVY3VeJ8 Opl3AT+b3ZvcX8UrPIypgLxlh3AZPJNsjdCkpT1jkqmGqUNmXJOo8jzZfQH9SRmc wcl6pDNlDwktEwCmqIok1yfcrQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:56:44 2026 by rpki-client