$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: InLGYndO46nYeYheWf4P/OrD3WRU/Lxig481HOeHLf8= Subject key identifier: F5:20:2E:2B:6D:CA:AD:A6:F6:29:2B:69:68:A8:68:8A:46:B1:42:8E Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A45 Signing time: Tue 28 Jul 2026 20:01:38 +0000 Manifest this update: Tue 28 Jul 2026 20:01:38 +0000 Manifest next update: Tue 04 Aug 2026 20:01:38 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: zNt0+yKu4ZNEmPvnYsWF/BojZmGaMu4HPuhnmlX3jcI=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Jul 28 20:01:38 2026 GMT Not After : Aug 4 20:01:38 2026 GMT Subject: CN=6a690aa2-0ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:eb:8e:94:85:d4:c2:f1:74:1d:f1:10:0b: 4c:38:bd:66:39:ac:c6:b6:22:69:b1:c6:88:cc:58: 85:31:98:00:a9:06:8d:aa:4e:7a:2a:15:b3:6a:6d: b4:ff:7f:38:e1:70:7c:06:71:d2:05:19:3f:07:48: 3d:2d:7d:e6:c2:51:b1:33:35:61:cb:9e:eb:1b:d0: 8f:86:91:7b:5d:c5:cc:fb:3c:32:17:f7:6e:a5:71: df:7d:38:82:86:06:e7:01:d5:59:93:41:d6:e7:17: 24:57:1e:7f:36:1e:f4:a3:02:a4:23:04:f6:52:73: 90:47:ed:13:4d:14:66:18:56:c4:7f:05:68:2d:a7: 45:3a:4c:70:0e:58:fc:fc:2a:71:3f:44:09:dc:af: 57:f7:8a:47:09:e2:41:7e:76:f2:b0:7b:f7:01:de: 63:b8:8a:b7:9d:50:bc:d9:db:6e:d4:a1:25:58:36: bc:d0:7b:29:7e:aa:db:e1:25:92:cb:ed:a2:75:05: a6:7e:42:10:a1:00:bc:8c:02:ea:a9:75:23:ec:c7: 27:8b:8a:45:34:c5:61:03:f5:69:95:58:cc:c8:42: de:fa:c9:55:2a:fc:5e:cd:b1:bf:4e:a0:70:ef:b3: 1e:a6:7c:11:4a:4c:d6:15:77:6c:23:09:63:fa:be: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:2E:2B:6D:CA:AD:A6:F6:29:2B:69:68:A8:68:8A:46:B1:42:8E X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6d:55:df:1e:89:67:36:33:ca:61:f5:09:cc:7e:16:80:5f: b7:cb:23:ac:7c:6d:cd:16:af:e4:29:6c:f7:01:f2:2e:d9:12: f5:32:3e:d6:ae:77:a2:b4:07:37:b2:2a:aa:dd:a9:03:0b:60: 0f:3c:fb:82:d0:95:09:23:95:af:79:de:9e:93:7b:7e:7a:cd: 5f:0b:c6:0f:12:20:15:bf:a9:90:cc:c9:29:ec:b2:71:20:c4: 26:c1:44:ca:c8:46:c5:d2:5b:da:06:2f:c7:9e:fb:e6:c9:75: 05:8b:38:d4:9c:87:a2:ef:0e:78:d5:1a:74:e6:ce:49:b5:be: 54:ce:d4:3b:1d:86:8a:7e:ad:02:ef:99:db:e3:40:51:27:79: ef:db:90:40:33:78:19:be:d2:68:a2:cd:31:23:45:d2:60:f0: 02:f4:b2:ae:7e:b8:ad:9b:c0:43:53:b1:3c:e9:1e:0b:a8:04: 29:b9:f1:bc:8e:3a:03:e4:05:b3:9b:96:8a:91:0e:b2:8f:cc: 97:ea:a6:f6:36:b8:4b:25:5f:9b:e1:93:73:fc:25:4c:36:e0: 0d:99:f6:ba:f2:62:ea:79:c6:87:41:28:ad:cd:d4:1d:5e:c9: bb:45:ac:15:c1:1b:07:41:c5:92:25:04:d0:17:73:ea:2b:e2: f8:92:fb:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNzI4MjAwMTM4WhcNMjYwODA0MjAwMTM4WjAYMRYwFAYD VQQDEw02YTY5MGFhMi0wZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpjrjpSF1MLxdB3xEAtMOL1mOazGtiJpscaIzFiFMZgAqQaNqk56KhWzam20 /3844XB8BnHSBRk/B0g9LX3mwlGxMzVhy57rG9CPhpF7XcXM+zwyF/dupXHffTiC hgbnAdVZk0HW5xckVx5/Nh70owKkIwT2UnOQR+0TTRRmGFbEfwVoLadFOkxwDlj8 /CpxP0QJ3K9X94pHCeJBfnbysHv3Ad5juIq3nVC82dtu1KElWDa80Hspfqrb4SWS y+2idQWmfkIQoQC8jALqqXUj7Mcni4pFNMVhA/VplVjMyELe+slVKvxezbG/TqBw 77MepnwRSkzWFXdsIwlj+r6JfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUgLitt yq2m9ikraWioaIpGsUKOMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiG1V3x6JZzYzymH1Ccx+FoBft8sjrHxtzRav5Cls9wHyLtkS9TI+1q53orQH N7Iqqt2pAwtgDzz7gtCVCSOVr3nenpN7fnrNXwvGDxIgFb+pkMzJKeyycSDEJsFE yshGxdJb2gYvx5775sl1BYs41JyHou8OeNUadObOSbW+VM7UOx2Gin6tAu+Z2+NA USd579uQQDN4Gb7SaKLNMSNF0mDwAvSyrn64rZvAQ1OxPOkeC6gEKbnxvI46A+QF s5uWipEOso/Ml+qm9ja4SyVfm+GTc/wlTDbgDZn2uvJi6nnGh0Eorc3UHV7Ju0Ws FcEbB0HFkiUE0Bdz6ivi+JL76A== -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:11 2026 by rpki-client