$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: /hvftSo7svwl9uLGxBWDHf1FonfGkcXG/Y3n5omnymM= Subject key identifier: 97:8E:85:1C:BF:C9:64:D5:B7:53:B0:01:63:6B:79:52:FD:84:74:EC Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A62 Signing time: Tue 22 Sep 2026 19:28:37 +0000 Manifest this update: Tue 22 Sep 2026 19:28:37 +0000 Manifest next update: Tue 29 Sep 2026 19:28:37 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: e50S/wUVgLMNfh6hTUDpZioU64asGJ73OP/sJAb5YH0=) 2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) 3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2678 (0xa76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Sep 22 19:28:37 2026 GMT Not After : Sep 29 19:28:37 2026 GMT Subject: CN=6ab2d6e5-efd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:0c:8b:97:ad:9b:0e:54:b2:0e:7f:13:43: 26:f1:45:89:4f:94:fc:97:1a:98:13:72:ec:6d:5a: fb:97:31:f3:78:3f:2b:20:1e:ea:fa:37:3f:53:a3: f3:eb:9c:5c:57:7b:76:96:9a:80:78:f8:63:eb:e9: c9:fb:d9:bd:f4:45:5d:dd:50:2f:45:a1:9f:30:9b: 6c:0d:74:6d:42:ba:50:17:81:44:91:0c:9f:2b:36: 00:37:a3:bc:d8:16:43:d5:a1:3d:76:52:10:6e:cd: 50:89:45:a4:f8:60:0a:17:dd:8d:2b:38:07:00:ea: 00:15:c6:05:04:28:e4:71:e7:1e:e5:37:71:8f:96: 6d:fb:6c:4b:2a:1d:eb:7f:96:e1:2d:e3:bb:cf:f3: a2:c1:1c:20:77:ec:4c:d1:28:d9:d1:a3:dd:77:69: 82:94:95:34:aa:bb:95:2c:b4:be:51:20:cd:f5:5e: d7:af:9a:e1:dc:57:27:72:29:95:5f:25:f5:74:9f: 50:d1:0b:e2:0f:7d:fb:df:06:08:a0:31:0c:b2:15: 17:bd:bb:b1:44:a6:82:64:2e:42:c0:0d:30:f5:22: 28:93:df:f9:c1:de:45:1e:53:ea:8e:46:1e:5a:85: 00:74:eb:ea:dd:76:3e:1b:7d:fb:3b:84:3f:a3:7a: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:85:1C:BF:C9:64:D5:B7:53:B0:01:63:6B:79:52:FD:84:74:EC X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:88:18:2a:bc:cd:ca:19:2a:48:f0:4a:dd:b9:df:80:9b: 52:3e:b4:9e:43:44:27:7e:ef:66:a4:00:93:b2:ba:82:70:a6: 38:e9:d1:91:ac:9e:a5:3e:fa:b5:8a:8a:4c:7b:af:ac:e8:61: 87:9b:cb:8b:76:d2:9c:88:17:0b:4b:17:8f:22:c9:40:b9:4d: 2c:13:ef:bb:6d:6f:fc:cc:5e:07:23:d6:22:0e:9f:15:99:f9: b7:14:59:a1:bc:29:8e:9a:81:31:e5:b8:41:b8:28:24:ba:c1: bc:f4:ae:2a:57:b6:76:ea:ee:f7:d0:fc:48:5e:2b:2e:04:ac: 8c:6b:7e:f7:f3:11:10:67:a1:fd:7a:95:fe:bd:5c:c9:6d:f3: ad:14:61:4e:60:a1:d1:bc:c9:92:a4:86:82:46:cd:51:00:63: 44:5e:b8:eb:4e:cf:4d:4b:ea:8e:21:10:25:1e:08:20:ba:24: a7:b3:01:f4:58:d4:5e:af:6f:f6:79:33:d5:24:45:3f:bc:41: 5c:9e:70:7c:c8:b1:3e:2f:f9:33:e1:1c:92:c8:aa:67:4f:b0: 5b:10:d5:8c:82:16:c6:ac:cb:a7:be:90:f4:e5:1b:c3:e0:6e: 36:4d:d4:56:5b:51:eb:c9:7d:14:db:8e:88:78:0e:4e:ea:1f: ea:27:ad:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwOTIyMTkyODM3WhcNMjYwOTI5MTkyODM3WjAYMRYwFAYD VQQDEw02YWIyZDZlNS1lZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MsMi5etmw5Usg5/E0Mm8UWJT5T8lxqYE3LsbVr7lzHzeD8rIB7q+jc/U6Pz 65xcV3t2lpqAePhj6+nJ+9m99EVd3VAvRaGfMJtsDXRtQrpQF4FEkQyfKzYAN6O8 2BZD1aE9dlIQbs1QiUWk+GAKF92NKzgHAOoAFcYFBCjkcece5Tdxj5Zt+2xLKh3r f5bhLeO7z/OiwRwgd+xM0SjZ0aPdd2mClJU0qruVLLS+USDN9V7Xr5rh3FcncimV XyX1dJ9Q0QviD3373wYIoDEMshUXvbuxRKaCZC5CwA0w9SIok9/5wd5FHlPqjkYe WoUAdOvq3XY+G337O4Q/o3rtzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeOhRy/ yWTVt1OwAWNreVL9hHTsMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATTyIGCq8zcoZKkjwSt2534CbUj60nkNEJ37vZqQAk7K6gnCmOOnRkayepT76 tYqKTHuvrOhhh5vLi3bSnIgXC0sXjyLJQLlNLBPvu21v/MxeByPWIg6fFZn5txRZ obwpjpqBMeW4QbgoJLrBvPSuKle2duru99D8SF4rLgSsjGt+9/MREGeh/XqV/r1c yW3zrRRhTmCh0bzJkqSGgkbNUQBjRF64607PTUvqjiEQJR4IILokp7MB9FjUXq9v 9nkz1SRFP7xBXJ5wfMixPi/5M+EcksiqZ0+wWxDVjIIWxqzLp76Q9OUbw+BuNk3U VltR68l9FNuOiHgOTuof6iet9w== -----END CERTIFICATE-----Generated at Wed Sep 23 07:34:55 2026 by rpki-client