$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: kH89UEuV6VdpywdMUc7E585mOnaMiRc7qRE+O+tQw4s= Subject key identifier: 82:1A:16:2F:1C:E6:9D:A8:A8:3E:61:74:3E:84:46:95:9F:EA:72:FF Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A04 Signing time: Sun 22 Mar 2026 19:32:13 +0000 Manifest this update: Sun 22 Mar 2026 19:32:12 +0000 Manifest next update: Sun 29 Mar 2026 19:32:12 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: ZetNg5/OOF5MeEbQHPxFV10yo6SCg1Kk7Nb4gzupAGo=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Mar 22 19:32:12 2026 GMT Not After : Mar 29 19:32:12 2026 GMT Subject: CN=69c043bc-5440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:3f:2f:05:e1:c1:a1:9c:36:f8:b6:f7:54: f5:c4:af:56:88:a6:2c:b7:ac:5a:0a:ad:33:67:9b: e9:f2:3c:eb:46:bf:68:c2:d9:af:49:c3:7e:2c:8b: d5:e1:6b:a5:88:9f:15:63:7b:ac:03:05:a1:6a:33: d2:94:09:42:f2:3d:21:2d:c4:06:06:b3:89:01:9c: 5d:c1:d7:12:2c:2a:3d:77:be:7b:a7:46:dc:65:b6: 22:04:31:31:bd:f3:f3:b1:52:31:f6:f8:25:ff:b8: 94:e0:71:78:70:70:c6:80:67:0d:28:50:5d:eb:a3: dc:ec:dc:70:ea:6e:bc:11:90:37:0c:ce:09:ff:ba: 6c:d4:40:98:49:81:00:14:bd:1d:8e:f6:40:24:be: ea:96:00:51:28:15:4a:9e:60:c8:e0:d8:fb:9c:60: 0f:4e:e8:5a:16:81:83:c3:af:82:96:f6:d1:cd:f0: e4:5a:4a:0f:b8:1d:19:82:92:f3:87:fc:56:53:48: e9:88:22:5f:73:a0:bd:ac:79:0f:8d:67:b8:e8:10: f7:c6:34:a6:00:2b:a2:90:34:28:0b:2a:72:cf:48: 08:12:44:95:a6:e0:76:b3:39:e7:19:c4:c8:15:b7: 61:7f:da:5b:ca:63:84:dc:36:64:b8:02:56:07:9b: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:16:2F:1C:E6:9D:A8:A8:3E:61:74:3E:84:46:95:9F:EA:72:FF X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a3:db:7f:95:22:d1:7e:38:10:d0:c1:b1:7c:91:2e:8e:46: 7e:75:97:ba:4a:89:2f:ae:74:8c:e0:ed:b2:1b:b8:ed:26:3f: ec:a5:0e:19:81:5c:cf:d2:98:3f:6a:dd:17:94:9d:64:a2:46: 97:a8:ef:e0:63:2a:c3:e4:e8:d0:b2:d9:9a:57:77:99:7d:1f: 73:9a:f2:b2:31:d1:1d:5e:57:07:09:8d:4e:ee:42:3b:94:33: 1e:20:fb:0b:10:3a:ac:ac:f9:f3:95:fc:d0:59:a1:3d:73:38: 40:ed:4d:15:cc:58:2d:ac:e0:39:2e:e5:ca:32:2f:06:ad:b9: b0:0f:29:60:7a:c1:81:80:4e:59:08:05:bb:e6:5d:ac:5c:3c: 46:24:37:6f:35:58:08:31:57:cf:80:97:70:9a:a6:0f:55:20: e7:f3:02:71:9f:9f:00:b3:06:ed:e1:b0:e2:60:6e:04:b7:f2: 14:ab:ce:12:4a:cd:2b:2d:85:25:c1:68:bb:bd:7f:16:1c:22: 07:86:d3:05:ce:bc:a4:6f:00:b6:3c:c7:ba:fc:c6:71:6e:ee: c7:8e:ed:ca:65:bf:09:93:3a:ec:8a:90:7c:a6:f4:1f:3c:fc: 93:a1:e6:72:73:e6:bc:d2:b6:5e:19:e3:6d:df:1a:1a:33:9f: ae:5c:c7:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwMzIyMTkzMjEyWhcNMjYwMzI5MTkzMjEyWjAYMRYwFAYD VQQDEw02OWMwNDNiYy01NDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhs0/LwXhwaGcNvi291T1xK9WiKYst6xaCq0zZ5vp8jzrRr9owtmvScN+LIvV 4WuliJ8VY3usAwWhajPSlAlC8j0hLcQGBrOJAZxdwdcSLCo9d757p0bcZbYiBDEx vfPzsVIx9vgl/7iU4HF4cHDGgGcNKFBd66Pc7Nxw6m68EZA3DM4J/7ps1ECYSYEA FL0djvZAJL7qlgBRKBVKnmDI4Nj7nGAPTuhaFoGDw6+ClvbRzfDkWkoPuB0ZgpLz h/xWU0jpiCJfc6C9rHkPjWe46BD3xjSmACuikDQoCypyz0gIEkSVpuB2sznnGcTI Fbdhf9pbymOE3DZkuAJWB5uYlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIaFi8c 5p2oqD5hdD6ERpWf6nL/MB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMaPbf5Ui0X44ENDBsXyRLo5GfnWXukqJL650jODtshu47SY/7KUOGYFcz9KY P2rdF5SdZKJGl6jv4GMqw+To0LLZmld3mX0fc5rysjHRHV5XBwmNTu5CO5QzHiD7 CxA6rKz585X80FmhPXM4QO1NFcxYLazgOS7lyjIvBq25sA8pYHrBgYBOWQgFu+Zd rFw8RiQ3bzVYCDFXz4CXcJqmD1Ug5/MCcZ+fALMG7eGw4mBuBLfyFKvOEkrNKy2F JcFou71/FhwiB4bTBc68pG8AtjzHuvzGcW7ux47tymW/CZM67IqQfKb0Hzz8k6Hm cnPmvNK2Xhnjbd8aGjOfrlzH3g== -----END CERTIFICATE-----Generated at Tue Mar 24 09:23:02 2026 by rpki-client