$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json) Hash identifier: kr/olS9AOj56WFBt86/pv/t36fZ1wZUS0zdntZfxOu0= Subject key identifier: 56:EC:8F:3C:30:51:24:FA:4B:15:C5:78:6D:C7:69:ED:49:93:97:52 Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft Manifest number: 1DD6 Signing time: Tue 28 Jul 2026 16:12:03 +0000 Manifest this update: Tue 28 Jul 2026 16:12:03 +0000 Manifest next update: Tue 04 Aug 2026 16:12:03 +0000 Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: boApqkyrqQU54z6NRmtEtY28qMc3ixp8b98xV4kwORQ=) 2: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=) 3: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=) 4: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=) 5: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=) 6: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=) 7: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=) 8: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7722 (0x1e2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Jul 28 16:12:03 2026 GMT Not After : Aug 4 16:12:03 2026 GMT Subject: CN=6a68d4d3-ef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:84:ad:3b:7a:d0:d6:b7:68:9d:b5:e9:3c: 36:b5:e2:e0:32:2d:eb:ac:db:be:4e:bb:86:d9:3a: 0b:2b:23:46:7b:be:eb:2d:b5:1a:da:95:b7:d8:44: d1:06:4a:3b:38:d2:6f:74:39:a2:ae:ff:9c:88:62: 58:69:12:c5:41:f6:80:aa:31:1e:7b:5a:9c:9a:41: 5d:00:58:78:9e:10:cd:bd:fa:48:0e:a8:cd:a4:72: e9:93:bf:36:50:ba:b9:28:d7:f6:a1:65:47:b0:48: 1f:89:bd:c3:46:4b:d7:f5:e2:e6:b1:bb:29:38:7b: a0:8a:1e:47:78:a1:bc:0a:14:97:17:85:e1:e8:7c: 21:ae:c3:23:8a:a6:05:1f:e0:cc:77:9c:fd:70:b4: 40:49:32:1d:35:97:c6:9f:3b:25:9c:45:b0:9b:88: 49:1d:66:14:29:3d:4a:b2:69:a2:2a:1e:48:27:80: 85:5d:d7:e9:7b:be:25:2a:41:c5:ae:2a:63:42:5d: da:fe:c8:b5:7a:02:c9:81:eb:bf:2d:c2:7e:05:b0: 07:2b:4e:29:a1:61:75:20:af:ee:a4:1e:1a:b5:3d: c1:ba:23:ce:4b:2e:53:a7:03:60:43:da:31:87:e8: e0:48:13:33:6e:d1:3d:53:c9:8d:f2:6d:45:79:ca: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EC:8F:3C:30:51:24:FA:4B:15:C5:78:6D:C7:69:ED:49:93:97:52 X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0a:f5:b8:b9:20:91:47:13:f3:80:cb:54:49:26:d6:a9:7c: 1e:50:ff:b5:16:9a:a3:6c:c2:bb:8b:ce:c2:64:2c:2d:93:43: de:d2:15:d2:8c:22:94:c9:2b:3b:5a:06:b8:a8:66:de:75:37: f7:aa:9e:24:87:ba:3f:ef:5f:29:5c:57:ad:c1:16:8e:33:a6: 84:c8:4f:95:0d:75:4f:1c:f5:0a:a7:d5:54:32:1e:29:2c:1d: d6:3a:04:7e:79:21:7a:be:22:a3:9f:35:95:de:47:a4:97:ed: a3:4a:8c:79:a4:1d:c0:1a:ff:dd:78:cc:49:ea:21:1c:ab:08: 96:8f:d9:b3:ec:c5:f4:71:15:c2:12:80:23:b3:b4:b3:61:7b: 7f:07:30:c7:d8:c5:1f:5d:fb:ae:16:24:a9:4a:1e:41:4f:77: 18:74:a2:32:37:3c:1f:2e:27:01:48:93:47:20:8b:c4:d6:60: cd:06:44:f7:e0:29:92:30:22:d6:f9:ab:70:c1:dd:b8:39:ab: b9:a1:71:80:ca:4e:f2:e7:33:e3:20:65:ef:78:41:20:fa:74: 1c:14:5e:fa:d7:e0:df:07:3d:84:31:30:fe:51:e1:f4:b4:dc: 34:a6:e8:24:10:38:86:4b:5b:0b:8a:e7:ef:02:c9:4c:41:52: 36:28:e9:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjYwNzI4MTYxMjAzWhcNMjYwODA0MTYxMjAzWjAYMRYwFAYD VQQDEw02YTY4ZDRkMy1lZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCuErTt60Na3aJ216Tw2teLgMi3rrNu+TruG2ToLKyNGe77rLbUa2pW32ETR Bko7ONJvdDmirv+ciGJYaRLFQfaAqjEee1qcmkFdAFh4nhDNvfpIDqjNpHLpk782 ULq5KNf2oWVHsEgfib3DRkvX9eLmsbspOHugih5HeKG8ChSXF4Xh6HwhrsMjiqYF H+DMd5z9cLRASTIdNZfGnzslnEWwm4hJHWYUKT1KsmmiKh5IJ4CFXdfpe74lKkHF ripjQl3a/si1egLJgeu/LcJ+BbAHK04poWF1IK/upB4atT3BuiPOSy5TpwNgQ9ox h+jgSBMzbtE9U8mN8m1FecpLKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbsjzww UST6SxXFeG3Hae1Jk5dSMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q UlNVQ1B2MDJKLWtzMklSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQr1uLkgkUcT84DLVEkm1ql8HlD/tRaao2zCu4vOwmQsLZND3tIV0owilMkr O1oGuKhm3nU396qeJIe6P+9fKVxXrcEWjjOmhMhPlQ11Txz1CqfVVDIeKSwd1joE fnkher4io581ld5HpJfto0qMeaQdwBr/3XjMSeohHKsIlo/Zs+zF9HEVwhKAI7O0 s2F7fwcwx9jFH137rhYkqUoeQU93GHSiMjc8Hy4nAUiTRyCLxNZgzQZE9+ApkjAi 1vmrcMHduDmruaFxgMpO8ucz4yBl73hBIPp0HBRe+tfg3wc9hDEw/lHh9LTcNKbo JBA4hktbC4rn7wLJTEFSNijpSQ== -----END CERTIFICATE-----Generated at Wed Jul 29 01:41:46 2026 by rpki-client