$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: /WWFiTbe9K0jBjdacQVbDFdQkPeBqGdpnIS5PcIK3lY= Subject key identifier: 0F:6D:8A:64:4E:BF:AA:0D:F9:35:5C:AE:32:73:4B:D0:BC:A5:D4:40 Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: 64 Signing time: Fri 17 Apr 2026 07:45:16 +0000 Manifest this update: Fri 17 Apr 2026 07:45:15 +0000 Manifest next update: Fri 24 Apr 2026 07:45:15 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: 57aefx07zIizGKnthwlNpcjqj8poOcBeZa8ZxWkapP4=) 2: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: HwzcTj+6E2of2zeq8O1Ng/ngV7Rw888FF8/vBEBckro=) 3: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: JcAxzRv81BEK8q/J7k6ROwCVG10hKzG1+sw20R/B8ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Apr 17 07:45:15 2026 GMT Not After : Apr 24 07:45:15 2026 GMT Subject: CN=69e1e50b-2be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:99:df:61:d0:37:95:bc:cf:54:97:9a:e5: 4f:06:01:b7:33:b3:ba:c7:4d:93:cf:ff:f7:af:90: 70:09:98:40:83:49:dd:86:78:c7:9c:80:be:0e:29: d3:cf:14:07:93:94:52:f0:e6:1c:6f:51:b8:9b:45: 7c:ac:70:04:dc:43:8e:22:1c:c2:93:5f:d1:64:e9: a9:19:20:7a:57:b0:93:77:52:98:94:f9:6b:39:51: 42:15:da:cc:47:66:8b:26:54:38:a3:7d:f5:57:0e: 68:af:42:f2:dc:1e:aa:82:44:a0:2c:28:76:5c:b7: dc:8b:cc:73:e2:ca:1d:e6:53:7c:1f:8f:30:57:83: 35:5c:07:92:17:20:f8:8a:48:96:aa:f7:3b:0d:22: f9:13:bf:de:05:a7:34:cd:5d:aa:b2:73:a7:c5:eb: bb:8b:03:a9:6d:1d:85:33:c8:53:4c:3a:2f:c5:2f: 66:07:d0:fe:74:bd:ac:87:0a:14:41:96:00:88:e7: 47:d0:0e:e5:2f:8c:29:1a:58:0f:67:38:99:92:92: 15:e9:e2:c5:6d:12:00:af:18:2f:f4:4a:c8:81:9d: d0:8f:bf:18:c4:2f:f2:28:e2:35:13:15:cc:87:fa: 6c:04:70:0c:70:f4:61:85:62:7d:1a:e7:cc:cd:48: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6D:8A:64:4E:BF:AA:0D:F9:35:5C:AE:32:73:4B:D0:BC:A5:D4:40 X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:27:31:af:7f:a7:83:84:30:ed:36:e9:42:7f:cc:6b:84: a6:dd:cd:80:dc:95:ef:a2:ee:43:45:03:03:9e:7e:f3:cb:f6: f4:4b:af:61:b9:7c:e8:29:a5:82:69:e3:f9:5c:04:e7:a5:6b: 0c:bb:0f:03:20:32:55:52:b5:5c:2c:88:54:a1:be:ad:59:ea: 39:fd:8b:e4:4b:88:e4:a1:a8:c8:c4:99:9e:78:28:77:5c:b6: 07:89:74:5f:06:ef:06:bb:dd:5c:49:9e:af:c9:97:6a:32:e1: 1f:7e:c1:3e:4e:80:70:e9:3b:3d:d8:2a:e5:00:a9:a4:03:9e: f5:75:e4:17:c1:68:b3:ed:5d:cf:69:14:d1:db:5b:4b:f4:62: 59:f0:c7:9d:24:88:f5:15:86:2d:05:94:80:98:b6:33:1f:0f: fe:26:99:e1:9b:34:ae:1d:50:c3:4b:74:0b:9a:86:a2:16:13: bf:e2:61:22:b6:ad:f6:44:68:04:93:93:69:48:ef:0a:a0:87: db:30:18:60:4f:e5:fe:87:ae:e7:01:ad:c7:46:ea:f6:dc:23: 82:0e:be:2f:ef:bd:52:5e:40:fd:43:0f:8e:0d:35:40:28:db: a1:4f:e2:4b:27:b2:06:e7:b9:17:c9:21:ed:94:47:6a:e2:22: 4d:5c:91:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNjA0MTcwNzQ1MTVaFw0yNjA0MjQwNzQ1MTVaMBgxFjAUBgNV BAMTDTY5ZTFlNTBiLTJiZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1D5nfYdA3lbzPVJea5U8GAbczs7rHTZPP//evkHAJmECDSd2GeMecgL4OKdPP FAeTlFLw5hxvUbibRXyscATcQ44iHMKTX9Fk6akZIHpXsJN3UpiU+Ws5UUIV2sxH ZosmVDijffVXDmivQvLcHqqCRKAsKHZct9yLzHPiyh3mU3wfjzBXgzVcB5IXIPiK SJaq9zsNIvkTv94FpzTNXaqyc6fF67uLA6ltHYUzyFNMOi/FL2YH0P50vayHChRB lgCI50fQDuUvjCkaWA9nOJmSkhXp4sVtEgCvGC/0SsiBndCPvxjEL/Io4jUTFcyH +mwEcAxw9GGFYn0a58zNSIn5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD22KZE6/ qg35NVyuMnNL0Lyl1EAwHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzRBNzA5NTY0QjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlW S1hMRlFOams0UzJvaXFDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjmycxr3+ng4Qw7TbpQn/Ma4Sm3c2A3JXvou5DRQMDnn7zy/b0S69huXzoKaWC aeP5XATnpWsMuw8DIDJVUrVcLIhUob6tWeo5/YvkS4jkoajIxJmeeCh3XLYHiXRf Bu8Gu91cSZ6vyZdqMuEffsE+ToBw6Ts92CrlAKmkA571deQXwWiz7V3PaRTR21tL 9GJZ8MedJIj1FYYtBZSAmLYzHw/+JpnhmzSuHVDDS3QLmoaiFhO/4mEitq32RGgE k5NpSO8KoIfbMBhgT+X+h67nAa3HRur23COCDr4v771SXkD9Qw+ODTVAKNuhT+JL J7IG57kXySHtlEdq4iJNXJHa -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:49 2026 by rpki-client