$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: shW66xyGmvOaUbTNY8BxG0OWf9k6W0+HYE0yEP7Cu6E= Subject key identifier: AB:AE:0E:D3:2A:CC:8F:81:4A:3A:74:04:ED:72:43:F1:40:2D:0E:AE Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 18EA Signing time: Thu 16 Apr 2026 16:23:49 +0000 Manifest this update: Thu 16 Apr 2026 16:23:49 +0000 Manifest next update: Thu 23 Apr 2026 16:23:49 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 8b3aPV4SKdY7DevC1r/0rwwRBs/yi2Tue2K+nMSzuoA=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) 3: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 4: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6449 (0x1931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Apr 16 16:23:49 2026 GMT Not After : Apr 23 16:23:49 2026 GMT Subject: CN=69e10d15-644f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:7f:8d:ad:c4:e7:a3:ca:f6:0f:6b:2a:6c: 85:a0:33:69:04:1a:82:e1:4e:a3:79:e5:a0:17:07: b0:b8:53:cf:77:40:c1:12:d1:3c:99:c0:29:60:6f: d0:ca:c4:db:de:b6:c0:76:0c:8a:8d:6f:91:34:8b: 7d:1b:eb:84:d2:37:da:ba:5c:f1:d6:57:1e:67:f7: 1b:0f:33:99:29:b5:fc:4e:e7:38:be:3d:9f:b2:9b: d2:97:2f:03:02:ba:2f:fa:5f:64:b3:d5:2d:7e:24: 68:2f:57:eb:a6:5c:73:1d:cc:1f:92:b0:ad:97:a4: bb:55:d6:d9:68:0c:3b:15:38:aa:27:70:5e:7d:80: 20:83:ef:26:b2:d5:e6:d1:ae:f6:63:80:bc:c4:d7: 86:a7:0f:87:c7:b0:5b:08:c7:05:b3:fe:fd:56:6b: bb:31:ee:00:cd:b1:10:e3:ef:41:ba:0a:87:03:77: e6:9f:ad:76:38:d2:22:2b:f4:6a:03:cf:2a:c4:dc: 28:ec:b9:23:06:61:29:fe:33:e2:b0:1a:f0:9b:6b: 29:ea:72:5e:0b:ff:7f:ad:c6:26:56:8b:e1:de:cf: 30:01:fa:0f:c9:e4:b7:b4:b4:fd:72:ad:a0:ae:fc: 22:17:64:32:55:80:65:28:3c:c4:14:3e:05:25:30: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AE:0E:D3:2A:CC:8F:81:4A:3A:74:04:ED:72:43:F1:40:2D:0E:AE X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e9:e3:2c:c5:4f:9f:93:3e:fe:99:fa:7c:d4:ce:58:92:4b: 86:bc:25:bf:22:6c:86:75:9c:95:fe:e9:0b:5c:4d:79:15:3d: 76:c4:20:62:f0:1f:97:1a:29:37:3c:19:22:d4:5e:a7:7c:ac: 18:55:ab:f2:e1:5b:9f:b6:2b:3e:67:6f:2f:9e:fc:a2:cc:1f: 74:11:dd:5d:07:b5:77:9f:54:e1:92:8b:1a:82:6d:c4:43:c0: e2:cb:92:d1:0b:77:0f:6e:12:6a:f1:da:c0:47:74:10:fb:fc: 26:2b:b1:86:ea:02:1f:e5:19:76:cc:87:04:84:57:9c:76:c5: ad:2b:d6:ef:c5:aa:f2:3d:5a:8d:1b:f7:59:5c:11:f7:3a:c2: 71:64:5d:ef:cc:83:07:88:cd:07:59:e7:da:c7:c0:d7:da:b3: 3f:ae:5c:f3:a2:86:42:3a:d7:af:5e:e6:e8:e8:9c:7f:89:3a: a2:9d:29:9e:f1:37:1f:eb:2a:8a:a3:93:55:af:93:c3:06:6c: 3e:09:14:ae:a3:6d:9a:f4:cf:59:35:ce:6d:93:df:15:f6:82: 41:c7:e7:59:a5:d2:5c:e5:29:c7:46:c9:51:cc:b5:7a:ad:3b: 7b:5e:83:64:71:d7:b7:20:f8:57:40:0a:99:69:75:6d:5c:32: 4f:77:38:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwNDE2MTYyMzQ5WhcNMjYwNDIzMTYyMzQ5WjAYMRYwFAYD VQQDEw02OWUxMGQxNS02NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhmJ/ja3E56PK9g9rKmyFoDNpBBqC4U6jeeWgFwewuFPPd0DBEtE8mcApYG/Q ysTb3rbAdgyKjW+RNIt9G+uE0jfaulzx1lceZ/cbDzOZKbX8Tuc4vj2fspvSly8D Arov+l9ks9UtfiRoL1frplxzHcwfkrCtl6S7VdbZaAw7FTiqJ3BefYAgg+8mstXm 0a72Y4C8xNeGpw+Hx7BbCMcFs/79Vmu7Me4AzbEQ4+9BugqHA3fmn612ONIiK/Rq A88qxNwo7LkjBmEp/jPisBrwm2sp6nJeC/9/rcYmVovh3s8wAfoPyeS3tLT9cq2g rvwiF2QyVYBlKDzEFD4FJTAIuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuuDtMq zI+BSjp0BO1yQ/FALQ6uMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp+njLMVPn5M+/pn6fNTOWJJLhrwlvyJshnWclf7pC1xNeRU9dsQgYvAflxop NzwZItRep3ysGFWr8uFbn7YrPmdvL578oswfdBHdXQe1d59U4ZKLGoJtxEPA4suS 0Qt3D24SavHawEd0EPv8JiuxhuoCH+UZdsyHBIRXnHbFrSvW78Wq8j1ajRv3WVwR 9zrCcWRd78yDB4jNB1nn2sfA19qzP65c86KGQjrXr17m6Oicf4k6op0pnvE3H+sq iqOTVa+TwwZsPgkUrqNtmvTPWTXObZPfFfaCQcfnWaXSXOUpx0bJUcy1eq07e16D ZHHXtyD4V0AKmWl1bVwyT3c4CQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:51:55 2026 by rpki-client