$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: GszQbycqlQvmFvuF75gZYLXDMkfkwvofBsqjo31R5aI= Subject key identifier: F3:31:93:0C:8A:ED:D1:6B:B0:D1:6B:A3:D9:A2:5C:62:BD:64:43:0B Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A69 Signing time: Tue 06 Oct 2026 19:45:17 +0000 Manifest this update: Tue 06 Oct 2026 19:45:17 +0000 Manifest next update: Tue 13 Oct 2026 19:45:17 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: QrIcHNOBKFdY+BGNJoFvY9oDUsKuqPrJ+9iepqKSgSs=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Oct 6 19:45:17 2026 GMT Not After : Oct 13 19:45:17 2026 GMT Subject: CN=6ac54fcd-d6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:b3:fd:57:bb:09:a6:3a:aa:ba:71:32:e6: 07:e3:00:49:58:26:f6:f7:e6:41:c4:a9:9e:27:2f: 19:1d:07:ef:ff:57:07:bc:96:aa:6d:cf:53:f3:9e: 2e:49:a6:64:d6:0b:87:24:93:14:f6:e8:a8:63:39: 3a:d5:53:8b:ef:18:e7:f0:0e:35:dc:10:50:f1:ae: d3:c2:e8:5d:9b:7e:d3:9b:61:99:66:60:d3:c5:c1: 85:20:a9:e6:af:cb:8e:43:7d:a4:73:f5:3f:d0:0a: 81:37:99:5a:4b:69:f0:10:f5:f1:a6:a9:da:93:25: e9:ca:b5:19:bc:64:c1:0c:fb:e8:1c:10:62:6a:53: ab:e1:af:42:8a:e1:62:b8:fc:fb:71:b9:ac:3d:8d: 13:a9:2d:3d:47:c5:c5:85:dd:22:5a:17:82:d6:f9: 2a:06:3d:ee:33:1b:15:61:cb:70:e6:6d:02:5c:fc: 44:85:fc:cb:98:4d:23:a9:9a:f4:e4:bd:bb:f4:22: 9b:fc:5e:44:1f:21:a2:a9:98:ba:cb:5c:bc:03:4e: b3:f9:54:05:f5:d2:1d:ee:8e:39:ab:04:a5:29:65: 5e:63:71:7d:10:8c:89:3c:5b:6d:d4:85:d0:e3:7e: f4:be:8f:0c:d2:0c:d0:84:0e:8d:0d:cd:17:f0:b1: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:93:0C:8A:ED:D1:6B:B0:D1:6B:A3:D9:A2:5C:62:BD:64:43:0B X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9b:bd:51:f7:b1:7d:04:42:d6:2b:08:6b:c2:2d:06:33:3e: 3a:a9:30:02:c0:51:08:80:ea:e2:77:1c:6b:51:18:3c:74:7e: aa:66:5b:ba:3a:a2:b3:f2:4a:1f:d7:7c:75:6c:23:11:58:32: 03:dc:21:2a:70:7a:8f:98:b1:e9:94:7d:55:e8:a7:0c:ef:00: bf:54:7a:55:8e:df:dc:95:00:e8:99:3a:12:c1:40:23:d5:fe: cc:4a:07:e9:cb:d5:81:57:bf:2f:18:f0:ea:b2:37:22:60:d9: 53:27:e1:aa:b0:91:68:24:ba:2b:c4:06:65:a3:97:6c:1a:66: 07:b3:90:0b:ab:52:c0:6e:e8:7a:c4:5e:e3:fe:8a:c6:fa:64: b1:93:e6:53:88:8a:7d:9b:84:f7:b9:e4:67:16:42:89:a2:fc: 07:ba:87:41:80:08:dd:37:34:43:d5:04:82:e4:45:d9:9a:a8: a2:d5:cf:18:5f:5b:cf:48:9d:86:08:1e:9f:c3:df:fa:99:8d: ad:be:da:0c:26:16:42:d3:71:d1:be:22:09:ab:c2:5b:ca:2c: e6:39:1d:e0:5f:ee:82:e5:50:4a:e8:3e:89:52:19:0d:77:52: 60:bd:79:d9:71:bd:65:88:75:c3:90:00:c9:6c:64:81:50:0b: bd:18:d7:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYxMDA2MTk0NTE3WhcNMjYxMDEzMTk0NTE3WjAYMRYwFAYD VQQDEw02YWM1NGZjZC1kNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FGz/Ve7CaY6qrpxMuYH4wBJWCb29+ZBxKmeJy8ZHQfv/1cHvJaqbc9T854u SaZk1guHJJMU9uioYzk61VOL7xjn8A413BBQ8a7Twuhdm37Tm2GZZmDTxcGFIKnm r8uOQ32kc/U/0AqBN5laS2nwEPXxpqnakyXpyrUZvGTBDPvoHBBialOr4a9CiuFi uPz7cbmsPY0TqS09R8XFhd0iWheC1vkqBj3uMxsVYctw5m0CXPxEhfzLmE0jqZr0 5L279CKb/F5EHyGiqZi6y1y8A06z+VQF9dId7o45qwSlKWVeY3F9EIyJPFtt1IXQ 4370vo8M0gzQhA6NDc0X8LEslQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMxkwyK 7dFrsNFro9miXGK9ZEMLMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5u9UfexfQRC1isIa8ItBjM+OqkwAsBRCIDq4ncca1EYPHR+qmZbujqis/JK H9d8dWwjEVgyA9whKnB6j5ix6ZR9VeinDO8Av1R6VY7f3JUA6Jk6EsFAI9X+zEoH 6cvVgVe/Lxjw6rI3ImDZUyfhqrCRaCS6K8QGZaOXbBpmB7OQC6tSwG7oesRe4/6K xvpksZPmU4iKfZuE97nkZxZCiaL8B7qHQYAI3Tc0Q9UEguRF2ZqootXPGF9bz0id hggen8Pf+pmNrb7aDCYWQtNx0b4iCavCW8os5jkd4F/uguVQSug+iVIZDXdSYL15 2XG9ZYh1w5AAyWxkgVALvRjXfQ== -----END CERTIFICATE-----Generated at Wed Oct 7 10:21:53 2026 by rpki-client