$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: Dng6BXDiVHrNgt7tdCJyMB0fi21nhCVQj1ODD2BJFyo= Subject key identifier: E6:58:A8:54:50:93:64:8A:44:11:83:E6:8C:D8:E2:13:B3:8C:AD:95 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 18EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 18CE Signing time: Sat 28 Feb 2026 16:31:09 +0000 Manifest this update: Sat 28 Feb 2026 16:31:09 +0000 Manifest next update: Sat 07 Mar 2026 16:31:09 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: pGhQNRozVN7/khudeVdM2aMtQ7rqVZ0MkO8v46IzBQs=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: QilVeNcrZMzdebQdu5lhKwqK5efz8FDEbIZ0Q0oTuqk=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: 2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6379 (0x18eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Feb 28 16:31:09 2026 GMT Not After : Mar 7 16:31:09 2026 GMT Subject: CN=69a3184d-5456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:4b:94:11:2c:8a:0f:7d:59:21:d6:4c:c8: a7:32:a5:b7:31:27:98:36:fc:94:8e:e2:10:9f:c4: af:76:ee:6b:1c:d8:a6:d1:a7:79:aa:46:c8:a5:d2: 26:f7:ca:95:1d:be:a8:e3:46:6b:97:ce:ea:3e:b1: 25:0f:74:c2:94:01:8a:a7:f5:46:12:86:9b:77:ec: d1:ad:91:41:95:1a:4a:a7:6c:8d:b3:b3:98:31:79: 10:4e:06:e3:5a:e7:7b:10:35:b0:de:80:47:6f:61: 2b:b3:e4:e7:72:6e:4d:94:9a:75:bd:d7:47:64:c2: 16:24:4a:4c:35:65:68:a2:15:ba:78:52:53:09:4f: 05:d3:c4:67:48:4a:b8:39:2e:20:a2:42:ff:2e:3a: 8a:18:e7:68:07:c7:35:ec:e5:c9:e7:51:52:cd:da: de:23:85:f1:0a:3e:44:72:9a:37:08:2f:79:9a:75: be:d3:44:71:73:9f:fa:e6:f8:f1:c8:fa:05:cb:8b: f5:d5:ca:7c:d4:2c:9e:6f:8a:23:12:1d:f5:b5:f5: 70:0c:9c:26:91:3c:57:c3:e5:d6:ff:c9:8e:ce:a1: ae:d9:e6:5a:2f:83:b0:61:11:2d:43:e6:53:ab:bb: 03:c9:bc:d3:00:28:23:25:00:6a:6c:4e:5f:5a:82: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:58:A8:54:50:93:64:8A:44:11:83:E6:8C:D8:E2:13:B3:8C:AD:95 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ca:0b:c6:39:42:c4:ff:62:85:c4:7b:7f:72:b5:7f:6c:d3: 5e:c3:a9:d6:b5:e9:11:2c:d1:f9:58:d8:0b:b4:b5:79:23:71: 67:80:cd:eb:fb:a3:2f:f9:0d:07:ce:8f:18:a9:dc:6c:12:2a: 0c:cf:b9:2e:c9:e3:55:9d:9c:da:cd:8a:2b:47:c0:97:d6:c8: 05:2e:df:d7:c9:43:95:e4:a0:fd:e0:81:dc:47:11:e4:fa:1e: d1:45:92:6f:89:a2:4b:a9:e8:5b:95:6a:47:85:56:3d:7b:68: 9f:f3:a3:4c:f2:e8:eb:e1:48:72:36:0f:73:c7:75:b9:3a:c9: 84:d7:5d:3c:dc:2f:e1:4d:74:4a:c3:1f:31:58:b5:96:4e:cf: 38:a5:7f:30:6d:9c:2c:07:38:fc:b5:8d:03:81:4b:3b:66:8d: ee:14:5a:1e:d2:89:0a:03:a5:1f:6c:a5:f8:20:87:4d:91:d1: e6:15:f7:06:52:09:25:25:1c:99:ad:28:58:a6:eb:05:c3:43: 91:02:b4:76:d2:05:90:ea:61:37:42:69:b9:d3:5d:0f:3b:b6: e7:61:3f:9f:29:e7:2a:2c:19:ad:da:1e:f4:1f:cd:03:67:2b: 2c:bc:ff:9a:30:78:57:fb:5b:c6:fe:72:a1:92:e9:6e:68:7e: 91:cd:24:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwMjI4MTYzMTA5WhcNMjYwMzA3MTYzMTA5WjAYMRYwFAYD VQQDDA02OWEzMTg0ZC01NDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19VLlBEsig99WSHWTMinMqW3MSeYNvyUjuIQn8Svdu5rHNim0ad5qkbIpdIm 98qVHb6o40Zrl87qPrElD3TClAGKp/VGEoabd+zRrZFBlRpKp2yNs7OYMXkQTgbj Wud7EDWw3oBHb2Ers+Tncm5NlJp1vddHZMIWJEpMNWVoohW6eFJTCU8F08RnSEq4 OS4gokL/LjqKGOdoB8c17OXJ51FSzdreI4XxCj5Ecpo3CC95mnW+00Rxc5/65vjx yPoFy4v11cp81Cyeb4ojEh31tfVwDJwmkTxXw+XW/8mOzqGu2eZaL4OwYREtQ+ZT q7sDybzTACgjJQBqbE5fWoIvnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZYqFRQ k2SKRBGD5ozY4hOzjK2VMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMoLxjlCxP9ihcR7f3K1f2zTXsOp1rXpESzR+VjYC7S1eSNxZ4DN6/ujL/kN B86PGKncbBIqDM+5LsnjVZ2c2s2KK0fAl9bIBS7f18lDleSg/eCB3EcR5Poe0UWS b4miS6noW5VqR4VWPXton/OjTPLo6+FIcjYPc8d1uTrJhNddPNwv4U10SsMfMVi1 lk7POKV/MG2cLAc4/LWNA4FLO2aN7hRaHtKJCgOlH2yl+CCHTZHR5hX3BlIJJSUc ma0oWKbrBcNDkQK0dtIFkOphN0JpudNdDzu252E/nynnKiwZrdoe9B/NA2crLLz/ mjB4V/tbxv5yoZLpbmh+kc0k8g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:41 2026 by rpki-client