$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: S+l9qyCrGBHckFDwtfSjYKwXR0q75RpmCS7qgl23g/o= Subject key identifier: 9B:B3:CB:EC:CA:45:71:C9:0B:AA:76:7B:8A:1C:75:E1:D6:4A:8C:8C Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0981 Signing time: Fri 18 Jul 2025 20:21:24 +0000 Manifest this update: Fri 18 Jul 2025 20:21:24 +0000 Manifest next update: Fri 25 Jul 2025 20:21:24 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: rSS9566fH1OiM0BpPjO5eSDfCCxbmXy6xM5DQNHYTuQ=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Jul 18 20:21:24 2025 GMT Not After : Jul 25 20:21:24 2025 GMT Subject: CN=687aacc4-8342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:07:79:80:2f:28:dd:a7:c1:5d:a6:d0:18: fc:d6:ec:9b:70:4c:12:f3:c4:9e:69:ff:cc:84:33: 5b:fa:43:e3:f4:f7:bc:0f:18:70:f7:f9:33:d5:79: df:a2:f3:4c:12:44:52:03:a1:04:93:ea:0a:93:08: 8b:13:95:f6:dd:f7:50:62:61:94:10:38:b9:61:5e: 0a:40:5f:04:c3:60:d5:31:44:79:7a:59:26:e1:a0: e7:e8:e1:cc:f6:e8:4f:a3:8f:f6:3a:7e:fd:00:c9: be:55:f2:12:f9:e5:fe:1f:6d:b0:5a:5c:d4:7c:c3: 02:83:b7:96:66:c4:68:27:09:37:ec:ce:ed:3a:72: a1:dc:81:ab:03:4f:32:69:42:10:bc:3c:64:68:37: 6e:b2:6b:ea:cf:ce:79:7b:cc:6a:18:02:84:b5:45: 5d:d4:ba:c8:82:89:84:e4:ee:c2:33:38:cc:9d:29: f0:4e:95:bd:0e:f5:7f:be:4d:fe:60:10:6d:6a:52: 1a:22:d7:ae:a3:f7:07:3d:5b:51:45:8a:3c:1f:83: ad:a5:c8:74:ce:1f:a3:3f:b8:05:ec:53:34:2f:17: 0b:6e:e1:05:ae:72:91:cc:e0:33:45:b8:4e:cd:c1: 1b:80:06:fc:c2:4e:3b:58:01:27:06:0a:20:de:fd: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:CB:EC:CA:45:71:C9:0B:AA:76:7B:8A:1C:75:E1:D6:4A:8C:8C X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b3:dc:42:68:a8:b0:55:fe:2a:e8:77:86:63:e2:37:c1:df: 0e:7a:95:35:f8:87:83:80:5a:74:31:64:d8:e1:c3:02:99:12: 99:1d:6b:39:62:64:0d:9b:39:f6:0d:40:8d:99:a3:b0:3d:2c: 6d:ea:99:8f:c8:9a:d8:4c:67:ff:ee:69:21:b3:d5:f8:2c:c5: 23:ed:e1:e7:7f:c1:33:a5:46:33:eb:7b:d2:62:1b:a4:f2:57: 92:33:72:56:6b:f9:28:ec:a1:49:bd:9c:92:2a:4c:8d:c3:95: 44:09:4f:e3:d3:9f:8c:72:33:8f:87:8d:bd:1a:b8:cd:29:54: be:b4:05:0b:aa:73:dd:80:cb:7f:ac:86:e4:9b:4d:f3:04:8c: c1:19:c0:c8:be:9a:8f:cc:7c:4f:6d:f1:95:fc:2a:de:63:de: 4c:10:a0:ca:a5:0c:cd:7e:1a:81:d8:20:a2:5c:5f:dd:30:93: f9:c6:9d:e3:7a:15:1e:14:b4:21:9e:93:e8:aa:b7:fa:17:58: 8c:dc:05:18:b7:1f:80:0e:c2:26:82:5c:b7:c4:24:9b:8c:d8: 3e:5d:ba:9e:ee:a7:d3:ec:c4:d6:e7:27:d1:90:7d:58:ad:3e: a1:20:0b:17:ec:36:3f:bc:21:f3:8b:a4:85:d2:8b:57:d8:5e: 81:12:ab:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwNzE4MjAyMTI0WhcNMjUwNzI1MjAyMTI0WjAYMRYwFAYD VQQDEw02ODdhYWNjNC04MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyacHeYAvKN2nwV2m0Bj81uybcEwS88Seaf/MhDNb+kPj9Pe8Dxhw9/kz1Xnf ovNMEkRSA6EEk+oKkwiLE5X23fdQYmGUEDi5YV4KQF8Ew2DVMUR5elkm4aDn6OHM 9uhPo4/2On79AMm+VfIS+eX+H22wWlzUfMMCg7eWZsRoJwk37M7tOnKh3IGrA08y aUIQvDxkaDdusmvqz855e8xqGAKEtUVd1LrIgomE5O7CMzjMnSnwTpW9DvV/vk3+ YBBtalIaIteuo/cHPVtRRYo8H4Otpch0zh+jP7gF7FM0LxcLbuEFrnKRzOAzRbhO zcEbgAb8wk47WAEnBgog3v2zBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuzy+zK RXHJC6p2e4ocdeHWSoyMMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXs9xCaKiwVf4q6HeGY+I3wd8OepU1+IeDgFp0MWTY4cMCmRKZHWs5 YmQNmzn2DUCNmaOwPSxt6pmPyJrYTGf/7mkhs9X4LMUj7eHnf8EzpUYz63vSYhuk 8leSM3JWa/ko7KFJvZySKkyNw5VECU/j05+McjOPh429GrjNKVS+tAULqnPdgMt/ rIbkm03zBIzBGcDIvpqPzHxPbfGV/CreY95MEKDKpQzNfhqB2CCiXF/dMJP5xp3j ehUeFLQhnpPoqrf6F1iM3AUYtx+ADsImgly3xCSbjNg+Xbqe7qfT7MTW5yfRkH1Y rT6hIAsX7DY/vCHzi6SF0otX2F6BEqtV -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:45 2025 by rpki-client