$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: sHAcC5tu7XhKgDP0/cNxnvtNRZ8/mlswem7/3xtdFP0= Subject key identifier: BE:77:3E:6E:38:F9:27:12:0D:48:4B:1D:66:69:43:B0:5B:36:9A:D1 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A1C Signing time: Fri 08 May 2026 19:45:41 +0000 Manifest this update: Fri 08 May 2026 19:45:40 +0000 Manifest next update: Fri 15 May 2026 19:45:40 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: 3UNCEUVGg6OctY+fkKm24xrvJpihz96t7ag6cONFVB4=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 19:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 8 19:45:40 2026 GMT Not After : May 15 19:45:40 2026 GMT Subject: CN=69fe3d65-1c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:52:63:54:60:1e:3e:b3:70:5f:72:a6:1d: 79:5e:c4:b8:1d:d9:80:16:a7:fb:0b:ee:ad:9b:13: 09:6c:1e:88:0c:1e:66:ae:9f:1b:e2:bf:05:98:c4: 19:78:31:34:5d:ff:16:0f:f5:5b:5a:54:3d:2a:b7: fa:55:15:e6:2a:0e:4f:56:dd:c3:35:4c:3f:c2:6e: cd:f2:23:86:2f:65:20:b8:e3:35:cc:65:c0:57:10: 52:37:95:17:f2:9d:79:b9:ee:b1:aa:9d:b2:61:05: aa:fc:97:07:56:f6:d4:ac:ef:20:00:6f:46:20:4f: 63:96:80:b6:da:2d:f8:7b:ad:ed:fd:23:aa:5a:c3: 3d:6d:10:ac:6a:88:20:89:d1:f6:a1:d1:e2:54:ef: 30:09:26:d5:59:05:84:f0:d2:fb:8b:d6:bf:3b:24: bb:b1:a3:0e:f3:2a:74:71:ab:e7:df:00:8d:5e:a1: db:bf:3b:c3:cc:7a:59:98:0e:93:30:13:60:fe:4b: 73:65:dd:8c:c2:74:04:26:b4:e7:ee:5d:2f:20:9e: 8e:f0:99:37:5f:a3:89:77:ca:6d:c3:34:a2:32:fc: 14:ca:22:a4:38:04:fb:fa:95:8e:b8:c7:da:f9:1c: 6d:5d:15:63:62:2c:c8:40:5d:76:1d:11:dd:75:04: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:77:3E:6E:38:F9:27:12:0D:48:4B:1D:66:69:43:B0:5B:36:9A:D1 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:73:df:82:b3:8a:e2:13:10:59:8a:40:64:b2:b4:cd:dd:c3: 1a:56:e1:ce:5e:68:f1:33:68:8d:33:82:c0:00:75:68:41:e0: 36:1b:8c:56:b1:db:d9:8a:55:9f:17:f3:db:23:08:fa:4b:23: 1c:5b:27:5f:8a:02:04:e0:73:3e:4f:93:32:6b:1e:d5:9b:b4: 2f:83:0e:76:36:12:41:92:79:6e:80:4b:7c:66:97:ab:81:3a: 8e:84:33:15:b2:76:0c:79:05:16:1f:49:5f:ed:4b:fa:2e:19: fc:44:39:68:7b:fd:80:20:b5:21:d0:67:63:91:98:4f:4c:68: 51:d8:a9:90:e2:97:53:af:54:96:dc:46:79:30:6c:0b:f9:20: 95:fe:aa:75:0f:73:7d:df:fe:81:38:66:40:62:53:81:41:9e: 2f:47:60:7c:b8:ae:fa:3a:b3:b6:13:7d:43:28:d6:41:cb:83: fc:c7:dd:92:99:10:cd:aa:b6:01:78:2d:b1:e5:3f:fc:ed:ac: 45:59:7d:06:d0:6b:86:4d:de:8d:c0:73:f3:cc:c2:f8:9e:a6: fa:94:7c:9b:94:d0:dd:83:05:43:08:51:f3:20:b9:0d:77:03: 25:d5:6f:33:77:fd:1f:40:a9:51:5c:ac:d1:c0:1e:bc:a6:51: 8d:37:d2:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNTA4MTk0NTQwWhcNMjYwNTE1MTk0NTQwWjAYMRYwFAYD VQQDEw02OWZlM2Q2NS0xYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HhSY1RgHj6zcF9yph15XsS4HdmAFqf7C+6tmxMJbB6IDB5mrp8b4r8FmMQZ eDE0Xf8WD/VbWlQ9Krf6VRXmKg5PVt3DNUw/wm7N8iOGL2UguOM1zGXAVxBSN5UX 8p15ue6xqp2yYQWq/JcHVvbUrO8gAG9GIE9jloC22i34e63t/SOqWsM9bRCsaogg idH2odHiVO8wCSbVWQWE8NL7i9a/OyS7saMO8yp0cavn3wCNXqHbvzvDzHpZmA6T MBNg/ktzZd2MwnQEJrTn7l0vIJ6O8Jk3X6OJd8ptwzSiMvwUyiKkOAT7+pWOuMfa +RxtXRVjYizIQF12HRHddQSyGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL53Pm44 +ScSDUhLHWZpQ7BbNprRMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWnPfgrOK4hMQWYpAZLK0zd3DGlbhzl5o8TNojTOCwAB1aEHgNhuMVrHb2YpV nxfz2yMI+ksjHFsnX4oCBOBzPk+TMmse1Zu0L4MOdjYSQZJ5boBLfGaXq4E6joQz FbJ2DHkFFh9JX+1L+i4Z/EQ5aHv9gCC1IdBnY5GYT0xoUdipkOKXU69UltxGeTBs C/kglf6qdQ9zfd/+gThmQGJTgUGeL0dgfLiu+jqzthN9QyjWQcuD/MfdkpkQzaq2 AXgtseU//O2sRVl9BtBrhk3ejcBz88zC+J6m+pR8m5TQ3YMFQwhR8yC5DXcDJdVv M3f9H0CpUVys0cAevKZRjTfS+g== -----END CERTIFICATE-----Generated at Sat May 9 16:34:45 2026 by rpki-client