$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json) Hash identifier: GT1OOOWeKbCT9lZMF5q9y810PKFxtcqGR1OKFJbl8cU= Subject key identifier: 83:60:30:F3:D9:CC:44:CE:F0:8F:CA:48:DF:A3:F7:AB:78:6B:27:9B Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft Manifest number: 1DF2 Signing time: Sun 20 Sep 2026 16:03:52 +0000 Manifest this update: Sun 20 Sep 2026 16:03:52 +0000 Manifest next update: Sun 27 Sep 2026 16:03:52 +0000 Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: cdpkLRmBmQffOtaJLhPUnNAThalu2AN6lWDYaN+EoMM=) 2: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=) 3: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=) 4: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=) 5: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=) 6: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=) 7: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=) 8: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7750 (0x1e46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Sep 20 16:03:52 2026 GMT Not After : Sep 27 16:03:52 2026 GMT Subject: CN=6ab003e8-0e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:4f:d8:d3:5e:63:4c:c9:0c:72:5a:3b:82: f1:75:aa:ad:f2:37:8d:20:7b:c3:81:73:f2:5e:67: 23:9f:3e:d8:3b:8a:f9:6d:66:ac:39:59:f4:77:36: 07:18:3f:ca:c0:c5:3f:62:75:19:c4:df:51:af:02: 35:36:25:55:11:63:cb:d4:f4:2d:cd:0d:aa:98:70: 5e:cd:c0:33:67:e2:db:a2:0c:ba:df:d5:76:d8:14: bf:43:81:f5:bc:75:15:2f:8a:ce:f2:36:6f:6b:2e: 9e:4d:e3:ac:bc:df:81:78:cf:27:5a:b0:69:2f:5e: 23:33:48:d4:b9:7c:4a:a7:3c:51:f9:42:a0:49:65: e9:7a:90:3e:37:4a:2a:23:b0:03:74:c5:f8:4c:ce: 33:3c:9e:7f:24:04:c2:e3:ff:79:5e:85:92:eb:a6: 39:be:01:d6:fd:0f:a8:56:f8:bf:9f:0e:3e:cf:bf: 78:d6:96:96:4f:25:da:a3:ab:5b:70:43:ca:35:40: 00:b2:01:fe:e5:8d:89:1c:4a:e3:3e:b0:d9:10:76: 82:6f:12:ee:6f:fe:4e:fe:4b:0e:1e:50:b9:d7:b4: c4:b9:6d:c0:92:62:76:43:95:4e:6b:30:49:b1:02: fe:80:ec:1e:70:49:bd:c6:f3:f1:0e:6b:ec:0e:30: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:30:F3:D9:CC:44:CE:F0:8F:CA:48:DF:A3:F7:AB:78:6B:27:9B X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:48:53:9b:45:5b:0d:8f:d7:38:75:68:a1:9e:88:16:61:c9: 69:75:9f:33:8a:12:ec:c7:18:94:90:fa:b4:02:eb:37:e9:d7: 6b:93:a5:5f:7a:4e:7c:bc:00:75:04:88:e4:81:34:f1:0d:41: 8b:0e:37:b8:2c:f5:72:8d:ce:e5:6d:90:9f:51:30:77:08:e8: 8f:6a:83:82:cb:75:61:f1:80:0d:73:99:1e:be:66:0b:d3:69: 95:3f:3a:d7:c4:f0:0b:65:86:70:e6:1a:2e:3f:39:69:ec:70: 6d:7e:a5:e4:6f:a6:1f:e5:f0:9d:be:c6:58:62:e0:12:e3:4a: ac:d4:cc:22:8d:43:23:6f:a8:10:f1:03:df:e9:37:03:82:0f: 76:fc:91:e0:8e:97:23:38:d8:20:6d:93:70:67:17:ea:10:41: 1f:0c:ea:32:be:fc:1c:f6:cf:39:3d:6b:c7:6e:fc:9a:90:0c: 04:50:a6:f6:eb:a3:8f:d0:55:88:d8:aa:a4:7f:bd:27:79:94: a8:c9:83:31:24:10:96:32:52:93:e6:8f:e9:fd:ed:15:76:ff: a8:de:39:c4:ff:94:ce:0f:d2:49:64:c3:c1:a5:36:5b:93:2b: c1:1f:d3:64:75:f2:7d:8e:3d:c8:df:a9:60:c1:02:c5:83:dd: d7:7f:bb:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjYwOTIwMTYwMzUyWhcNMjYwOTI3MTYwMzUyWjAYMRYwFAYD VQQDEw02YWIwMDNlOC0wZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3BP2NNeY0zJDHJaO4Lxdaqt8jeNIHvDgXPyXmcjnz7YO4r5bWasOVn0dzYH GD/KwMU/YnUZxN9RrwI1NiVVEWPL1PQtzQ2qmHBezcAzZ+Lbogy639V22BS/Q4H1 vHUVL4rO8jZvay6eTeOsvN+BeM8nWrBpL14jM0jUuXxKpzxR+UKgSWXpepA+N0oq I7ADdMX4TM4zPJ5/JATC4/95XoWS66Y5vgHW/Q+oVvi/nw4+z7941paWTyXao6tb cEPKNUAAsgH+5Y2JHErjPrDZEHaCbxLub/5O/ksOHlC517TEuW3AkmJ2Q5VOazBJ sQL+gOwecEm9xvPxDmvsDjDpBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINgMPPZ zETO8I/KSN+j96t4ayebMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q UlNVQ1B2MDJKLWtzMklSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm0hTm0VbDY/XOHVooZ6IFmHJaXWfM4oS7McYlJD6tALrN+nXa5OlX3pOfLwA dQSI5IE08Q1Biw43uCz1co3O5W2Qn1Ewdwjoj2qDgst1YfGADXOZHr5mC9NplT86 18TwC2WGcOYaLj85aexwbX6l5G+mH+Xwnb7GWGLgEuNKrNTMIo1DI2+oEPED3+k3 A4IPdvyR4I6XIzjYIG2TcGcX6hBBHwzqMr78HPbPOT1rx278mpAMBFCm9uujj9BV iNiqpH+9J3mUqMmDMSQQljJSk+aP6f3tFXb/qN45xP+Uzg/SSWTDwaU2W5MrwR/T ZHXyfY49yN+pYMECxYPd13+7HA== -----END CERTIFICATE-----Generated at Mon Sep 21 23:32:32 2026 by rpki-client