$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: BQX38W9URS9Nzf5qMh2SWz1Z5Upfiuo94mx4tdwI3NI= Subject key identifier: 74:0B:CF:BB:C3:F0:8B:DA:6A:93:8C:2D:7B:20:B5:2A:68:2B:00:6B Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 191E Signing time: Tue 28 Jul 2026 16:31:28 +0000 Manifest this update: Tue 28 Jul 2026 16:31:28 +0000 Manifest next update: Tue 04 Aug 2026 16:31:28 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: /ZuBJHkKBcAyKapswwIf0BxeaiQmkjA7lVIDxtPPX1E=) 2: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 3: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6501 (0x1965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Jul 28 16:31:28 2026 GMT Not After : Aug 4 16:31:28 2026 GMT Subject: CN=6a68d960-6ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:e9:2e:73:92:8d:5c:eb:2d:d0:91:96:6f: 4a:e8:07:db:3e:3a:17:d8:e7:95:4e:8e:01:ea:46: 66:9b:93:24:d4:28:b8:35:a2:4d:1e:46:d8:8b:da: 4c:9c:08:54:98:28:ff:93:30:b3:e0:24:1b:82:b3: b5:f6:f5:56:b2:f8:bf:f0:0e:a2:e0:56:2b:a7:16: 23:a9:0b:65:95:70:79:5a:90:b6:5a:e4:45:c7:68: f1:4f:0d:2f:1e:a6:f0:94:ba:06:e5:ce:fc:53:9c: 67:b0:ce:71:b1:b8:44:5f:b6:af:59:21:18:2d:13: 6c:75:1b:2d:0f:e2:cc:ae:3b:e8:09:d6:c9:21:8e: fd:d9:a8:d1:65:f5:ae:28:a9:1f:1c:46:17:ee:18: b3:f9:82:d6:61:b7:6f:b9:3c:fb:42:d0:4f:75:c3: f0:a8:fa:ef:20:26:f0:cc:29:e5:0e:c9:ed:31:96: 08:de:a9:0a:71:70:2b:d2:97:ba:20:08:19:01:8e: 4e:16:e8:b4:42:42:e9:08:bd:91:ce:a5:9d:d2:bf: 5b:b3:2b:57:0f:de:9e:65:c6:85:b1:88:3f:49:fa: 99:64:d4:04:fc:13:6f:b4:2f:d5:49:5a:88:d0:be: 19:17:d0:18:29:04:78:d2:2a:65:0f:41:b8:37:51: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:CF:BB:C3:F0:8B:DA:6A:93:8C:2D:7B:20:B5:2A:68:2B:00:6B X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:cb:e4:ce:8b:28:4e:d2:7f:09:5b:fc:7d:5d:ab:6e:af: bc:1a:6d:48:5f:af:4d:75:e6:47:1e:82:9d:88:0b:d7:ed:36: 29:6b:78:b2:1f:b0:c2:5a:fb:74:e2:33:ec:d6:42:45:ba:99: b7:55:77:36:61:41:97:c2:82:56:ae:8c:fa:22:91:fe:48:0a: 21:91:a6:51:63:80:95:77:e3:ba:17:30:62:3a:a6:68:ba:42: b5:1d:65:91:e8:08:5b:4c:3d:fa:a3:dd:e3:63:ca:83:63:36: 1c:db:1d:3e:a5:36:6e:20:ca:28:97:90:85:a8:84:75:0b:e7: 35:f4:a1:b2:d7:d7:85:24:92:01:b0:6f:1b:ac:e0:7e:36:fc: 82:d0:c7:e1:cd:ee:ef:8b:7d:8d:ee:f2:2c:50:bc:a5:a7:e6: cb:39:be:b9:5c:d5:25:8c:04:b0:f7:e4:b0:9a:d1:9f:58:b1: 95:eb:f9:14:96:e4:0d:14:4c:ba:e4:db:fd:09:50:56:f6:db: a3:af:67:c6:9e:8c:32:53:d1:91:37:fb:2d:29:88:88:e9:88: c9:ec:8e:16:d1:99:15:b2:f1:de:55:c2:7c:0b:8e:db:24:56: f4:4f:27:fd:54:30:db:4a:a8:1e:e4:95:fa:35:57:0c:cf:7b: 27:89:e9:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwNzI4MTYzMTI4WhcNMjYwODA0MTYzMTI4WjAYMRYwFAYD VQQDEw02YTY4ZDk2MC02Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmI/pLnOSjVzrLdCRlm9K6AfbPjoX2OeVTo4B6kZmm5Mk1Ci4NaJNHkbYi9pM nAhUmCj/kzCz4CQbgrO19vVWsvi/8A6i4FYrpxYjqQtllXB5WpC2WuRFx2jxTw0v HqbwlLoG5c78U5xnsM5xsbhEX7avWSEYLRNsdRstD+LMrjvoCdbJIY792ajRZfWu KKkfHEYX7hiz+YLWYbdvuTz7QtBPdcPwqPrvICbwzCnlDsntMZYI3qkKcXAr0pe6 IAgZAY5OFui0QkLpCL2RzqWd0r9bsytXD96eZcaFsYg/SfqZZNQE/BNvtC/VSVqI 0L4ZF9AYKQR40iplD0G4N1HwMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQLz7vD 8IvaapOMLXsgtSpoKwBrMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdJHL5M6LKE7Sfwlb/H1dq26vvBptSF+vTXXmRx6CnYgL1+02KWt4sh+wwlr7 dOIz7NZCRbqZt1V3NmFBl8KCVq6M+iKR/kgKIZGmUWOAlXfjuhcwYjqmaLpCtR1l kegIW0w9+qPd42PKg2M2HNsdPqU2biDKKJeQhaiEdQvnNfShstfXhSSSAbBvG6zg fjb8gtDH4c3u74t9je7yLFC8pafmyzm+uVzVJYwEsPfksJrRn1ixlev5FJbkDRRM uuTb/QlQVvbbo69nxp6MMlPRkTf7LSmIiOmIyeyOFtGZFbLx3lXCfAuO2yRW9E8n /VQw20qoHuSV+jVXDM97J4npWA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:38 2026 by rpki-client