$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: ih8S0otSQMoOwYNb7M8Yfb90PjMJcc4Cy4WWduNRCuI= Subject key identifier: 49:CD:89:FB:05:4C:35:3C:9F:D8:49:2B:D5:57:BC:F1:5D:C0:86:99 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 193A Signing time: Sun 20 Sep 2026 16:23:20 +0000 Manifest this update: Sun 20 Sep 2026 16:23:19 +0000 Manifest next update: Sun 27 Sep 2026 16:23:19 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: clOqBJqvN+efwooP9efNOSZnGPd7vMEYIzpUi/RPKNs=) 2: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: RgXjb/3wdjxxFYUoIZCRdIJiherawNnAPpUhLQuHKPg=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: opW5wPBuNhAuRVkS5AxsUE3oeDI1EolWp41aFUC/CMs=) 4: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6529 (0x1981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Sep 20 16:23:19 2026 GMT Not After : Sep 27 16:23:19 2026 GMT Subject: CN=6ab00878-18ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:23:f6:4d:63:06:ac:ab:d7:52:cc:28:31: be:f3:43:b4:65:64:96:9f:68:76:9f:c7:35:38:48: f3:d1:32:86:ea:b5:6d:0d:c3:54:b6:2a:cc:6e:0d: 5a:a3:15:98:32:d4:81:b6:52:f2:ce:89:21:28:b4: 0e:e6:b6:78:8b:f4:a9:38:dc:d5:c2:68:e2:32:34: d8:8f:ac:4c:98:f5:a1:7d:50:35:64:d5:f7:97:1a: 09:a2:5d:f7:99:c5:6f:a6:f3:49:06:32:33:32:01: 87:77:98:54:55:4e:41:0f:34:06:e1:57:89:ff:cf: eb:74:02:5b:db:0d:20:4e:f9:b1:4e:2d:61:9f:ec: 65:0b:c6:c6:73:a1:14:0a:f3:c2:6d:a1:de:6b:b7: 6f:42:8b:50:bd:f9:eb:7c:52:29:0b:64:e5:f8:39: 13:e8:da:ec:43:b6:84:05:50:01:0f:18:53:ba:2b: 39:71:63:9a:1c:70:ff:e9:5f:8e:28:18:bc:ab:9e: a1:26:a1:e6:e9:26:9b:dc:e2:0f:58:52:b4:5b:55: f7:bc:a5:8b:ec:cb:1f:98:12:ea:f9:26:27:8c:a7: 90:f2:19:e7:b1:26:ea:3a:47:76:39:12:cd:fe:b0: f7:30:06:3e:0e:23:db:67:42:e3:16:71:82:42:78: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:89:FB:05:4C:35:3C:9F:D8:49:2B:D5:57:BC:F1:5D:C0:86:99 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:69:c6:a8:e8:fe:f2:0e:f2:85:71:32:74:e0:b9:f4:9d: bd:08:a2:d0:de:de:c7:c5:99:92:0c:6b:05:ba:b9:53:27:d9: 86:62:d5:e2:0c:49:0d:e5:91:0b:f4:1f:7e:eb:a1:5a:d0:ad: c2:fc:77:52:73:7e:ce:a2:2b:80:53:cb:81:6b:23:b2:c9:c4: fe:e9:2e:91:6e:8e:27:e0:a2:68:d4:c5:af:92:05:29:77:8d: ef:2c:c6:b3:b8:d8:eb:71:f0:15:66:10:66:64:34:f5:41:68: 7b:51:d3:fe:21:de:e6:65:8f:67:a8:e1:1a:81:fb:52:be:e7: 5c:4d:fc:ca:ef:e1:57:e9:e8:a7:12:d0:37:1c:22:ba:a8:3d: 25:00:1a:78:a1:8c:a6:d8:03:04:c3:03:75:03:4b:a0:6d:79: 64:cb:7d:3a:05:27:c4:bf:f0:f5:db:3e:7b:da:a1:f4:94:f5: 93:57:6d:76:bc:92:4e:50:60:96:94:62:75:fd:82:d1:81:27: 3c:51:40:30:7d:d5:a7:98:0e:cf:8f:c5:1b:bb:cd:c1:f9:fe: f3:d8:66:b3:b2:ed:2f:8e:cd:83:3a:1b:71:30:4b:58:29:f5: bf:2f:4c:2b:0a:ea:6c:6f:a5:56:5d:f8:c9:c3:46:bf:3b:b6: 91:de:38:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjYwOTIwMTYyMzE5WhcNMjYwOTI3MTYyMzE5WjAYMRYwFAYD VQQDEw02YWIwMDg3OC0xOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkMj9k1jBqyr11LMKDG+80O0ZWSWn2h2n8c1OEjz0TKG6rVtDcNUtirMbg1a oxWYMtSBtlLyzokhKLQO5rZ4i/SpONzVwmjiMjTYj6xMmPWhfVA1ZNX3lxoJol33 mcVvpvNJBjIzMgGHd5hUVU5BDzQG4VeJ/8/rdAJb2w0gTvmxTi1hn+xlC8bGc6EU CvPCbaHea7dvQotQvfnrfFIpC2Tl+DkT6NrsQ7aEBVABDxhTuis5cWOaHHD/6V+O KBi8q56hJqHm6Sab3OIPWFK0W1X3vKWL7MsfmBLq+SYnjKeQ8hnnsSbqOkd2ORLN /rD3MAY+DiPbZ0LjFnGCQngohQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnNifsF TDU8n9hJK9VXvPFdwIaZMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZh5pxqjo/vIO8oVxMnTgufSdvQii0N7ex8WZkgxrBbq5UyfZhmLV4gxJDeWR C/QffuuhWtCtwvx3UnN+zqIrgFPLgWsjssnE/ukukW6OJ+CiaNTFr5IFKXeN7yzG s7jY63HwFWYQZmQ09UFoe1HT/iHe5mWPZ6jhGoH7Ur7nXE38yu/hV+nopxLQNxwi uqg9JQAaeKGMptgDBMMDdQNLoG15ZMt9OgUnxL/w9ds+e9qh9JT1k1dtdrySTlBg lpRidf2C0YEnPFFAMH3Vp5gOz4/FG7vNwfn+89hms7LtL47NgzobcTBLWCn1vy9M KwrqbG+lVl34ycNGvzu2kd44MQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:47:43 2026 by rpki-client