$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: Fas11x7DF4ctbUZkmDY2QEnWCkzikEU7MpYBGf7ceOM= Subject key identifier: 6C:50:58:01:2D:B4:E4:7F:6F:D1:CD:D1:36:17:EE:0E:CB:0E:6B:03 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A11 Signing time: Thu 16 Apr 2026 19:43:09 +0000 Manifest this update: Thu 16 Apr 2026 19:43:08 +0000 Manifest next update: Thu 23 Apr 2026 19:43:08 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: j+qVDq3xs/0Yfgu6reBWEr9GEnSzazQhUCTmpsGLXco=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Apr 16 19:43:08 2026 GMT Not After : Apr 23 19:43:08 2026 GMT Subject: CN=69e13bcd-bd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:85:e6:88:cd:d3:26:7c:c4:57:7e:7b:16: 30:c3:cc:f8:ed:d8:22:9b:ef:3a:62:24:f8:c6:42: 1e:9f:d8:85:70:d8:28:01:24:78:5f:aa:73:0c:65: d0:07:b8:24:a9:db:d6:a6:d8:ee:79:66:6f:c6:21: a8:c3:bc:80:53:55:cd:61:e4:a3:fe:a3:13:ae:41: cb:a7:c7:27:dc:b0:6e:7d:f3:1e:7c:04:d8:e0:f3: 3e:ae:82:ed:2a:ca:88:54:25:fa:8b:79:a4:a9:48: 11:da:49:67:43:7d:8d:f3:8a:1c:c8:f5:b3:8f:a2: dc:b7:f4:ee:e4:5e:a0:9d:1d:85:09:99:71:02:f3: 3c:d3:94:37:73:a2:7d:e4:92:74:de:dd:dc:a4:21: 44:7d:73:b0:1c:61:40:69:51:74:5e:7c:83:d8:c9: 00:9b:5a:81:97:a6:34:20:07:1b:19:01:52:b5:34: 89:f9:a7:d2:6a:52:8b:2e:89:6d:4c:89:f0:f5:2f: 5b:fd:2f:76:38:0c:da:cc:ac:14:ad:00:4a:a1:46: 99:34:92:5b:7c:87:06:2f:51:81:21:47:88:92:51: a0:a9:1a:3e:21:fc:d9:b7:b7:2e:74:72:92:e7:4a: c9:d8:50:54:fc:27:fe:99:41:bf:be:11:28:2e:ce: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:50:58:01:2D:B4:E4:7F:6F:D1:CD:D1:36:17:EE:0E:CB:0E:6B:03 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:65:ca:9b:b0:f7:ea:08:b9:63:d7:5d:f4:5f:4c:8b:c1:99: 6f:e1:46:1a:54:95:31:77:1f:5d:fa:81:66:78:85:bc:76:10: 0a:cd:4c:de:6c:5a:1c:fb:1e:ee:25:54:d9:34:af:06:88:c8: 08:13:d9:0b:1f:7d:15:de:f3:14:33:74:2a:5e:04:db:fc:c6: 4f:07:14:e9:e9:96:95:56:ba:3e:2a:58:bb:9c:9d:98:2f:58: 01:79:c0:4d:be:bc:12:c3:b3:8f:39:9f:af:0c:a0:c7:51:79: 6a:89:fd:dc:da:cf:2e:e3:cc:ca:5a:1c:b1:93:b2:52:34:25: 6e:e1:b8:f0:24:51:b9:9a:4d:9d:6b:3b:91:2e:31:10:ed:b3: 36:f4:7d:e2:92:88:fc:fd:0e:0d:e0:1c:3e:77:d9:d3:35:30: cb:40:00:6f:c8:40:dd:cd:bf:34:af:6f:a8:4c:d6:76:30:21: 82:7c:ca:43:18:d8:3f:4d:3b:99:bd:2c:c4:41:d2:d2:4a:5e: 6c:51:09:cb:7d:55:5a:2d:86:0c:7a:f4:b2:9c:ec:8e:da:d9: 88:fc:a3:3b:ae:11:52:bc:6c:16:b2:4d:41:1d:22:a2:95:09: 9a:5c:75:00:74:39:18:d6:62:00:66:aa:b7:30:a3:fd:2d:a6: fe:63:26:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNDE2MTk0MzA4WhcNMjYwNDIzMTk0MzA4WjAYMRYwFAYD VQQDEw02OWUxM2JjZC1iZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyOF5ojN0yZ8xFd+exYww8z47dgim+86YiT4xkIen9iFcNgoASR4X6pzDGXQ B7gkqdvWptjueWZvxiGow7yAU1XNYeSj/qMTrkHLp8cn3LBuffMefATY4PM+roLt KsqIVCX6i3mkqUgR2klnQ32N84ocyPWzj6Lct/Tu5F6gnR2FCZlxAvM805Q3c6J9 5JJ03t3cpCFEfXOwHGFAaVF0XnyD2MkAm1qBl6Y0IAcbGQFStTSJ+afSalKLLolt TInw9S9b/S92OAzazKwUrQBKoUaZNJJbfIcGL1GBIUeIklGgqRo+IfzZt7cudHKS 50rJ2FBU/Cf+mUG/vhEoLs7hRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxQWAEt tOR/b9HN0TYX7g7LDmsDMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIWXKm7D36gi5Y9dd9F9Mi8GZb+FGGlSVMXcfXfqBZniFvHYQCs1M3mxaHPse 7iVU2TSvBojICBPZCx99Fd7zFDN0Kl4E2/zGTwcU6emWlVa6PipYu5ydmC9YAXnA Tb68EsOzjzmfrwygx1F5aon93NrPLuPMylocsZOyUjQlbuG48CRRuZpNnWs7kS4x EO2zNvR94pKI/P0ODeAcPnfZ0zUwy0AAb8hA3c2/NK9vqEzWdjAhgnzKQxjYP007 mb0sxEHS0kpebFEJy31VWi2GDHr0spzsjtrZiPyjO64RUrxsFrJNQR0iopUJmlx1 AHQ5GNZiAGaqtzCj/S2m/mMmvg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:21 2026 by rpki-client