$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: gz9bx+7DppSF0sPdH0qW1nGjnTM20Z5j4iYC38EiPrY= Subject key identifier: 25:F6:D8:D1:0D:2B:0A:DB:C8:27:DB:6A:E2:42:EC:A4:EA:42:FA:89 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A33 Signing time: Mon 22 Jun 2026 19:45:50 +0000 Manifest this update: Mon 22 Jun 2026 19:45:50 +0000 Manifest next update: Mon 29 Jun 2026 19:45:50 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: y99x7c11j7jKnDKjIMbtrMianUz4L+1ITis4MmLMyzU=) 2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) 3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Jun 22 19:45:50 2026 GMT Not After : Jun 29 19:45:50 2026 GMT Subject: CN=6a3990ee-f979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:b0:a6:c2:56:1c:13:e7:dd:ae:09:60:bf: 97:97:bc:34:35:74:bc:6e:ed:17:5d:c0:35:f9:d8: b1:31:14:27:f6:d4:5f:68:96:be:58:99:ee:d7:47: 8b:7c:de:18:2b:01:e3:67:c2:d7:6c:73:76:b9:09: 52:58:9f:00:0c:18:ee:50:e3:bb:22:2d:bf:ce:77: 0f:23:21:12:c4:05:cd:f9:86:83:48:69:2f:f5:16: 44:f6:be:fd:7b:48:97:43:77:c3:73:b7:c4:a6:72: 48:07:53:c7:16:20:85:ec:07:1a:1d:b0:10:4d:1b: 04:dd:57:e7:ac:a0:26:df:d0:44:ca:f1:42:29:e5: 17:7f:9e:35:30:12:2c:f1:da:b4:45:4c:aa:d9:25: a9:f2:3b:db:13:b3:9a:7d:af:00:74:47:2f:6f:cc: ea:de:56:82:d6:56:45:b4:48:00:45:de:3d:27:b6: 11:f7:0f:59:b3:a4:94:df:77:70:b7:bc:c7:50:5a: 15:11:56:06:35:68:31:ed:71:f2:31:c7:35:0d:04: 21:98:09:ef:91:b9:54:ac:ae:a8:fc:b7:8f:b1:50: 08:fe:ed:b1:93:ee:78:81:38:7c:59:c6:2b:58:f7: 55:f7:73:7f:2e:36:f0:7f:34:0a:50:d1:f1:5b:12: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F6:D8:D1:0D:2B:0A:DB:C8:27:DB:6A:E2:42:EC:A4:EA:42:FA:89 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:df:18:c0:3a:99:fd:d8:85:b1:d3:61:27:7f:c1:85:3a:4a: c9:00:d6:86:cf:04:0a:31:78:c2:54:b5:0c:fb:2c:73:74:2c: da:b9:07:ef:85:89:99:6d:c4:cb:53:b4:e9:ba:f5:0b:98:91: 01:02:10:7f:dc:ca:a5:7f:8f:30:cb:2b:bd:41:6e:c5:bb:7b: 61:ed:88:82:aa:4e:a3:1c:9b:ef:d6:3f:9c:cc:9a:e0:aa:f8: 8c:0b:43:91:4a:c7:05:f2:f9:9a:c4:3d:d1:96:7f:68:1c:8b: dd:6a:08:17:40:7d:e9:ca:12:e0:95:e2:f8:0c:57:e4:15:08: f1:0a:50:15:c5:93:1f:8d:ee:4c:4c:a4:38:a0:be:47:2a:c5: d9:d8:30:a2:cd:ff:eb:1c:09:50:87:e9:da:7e:a5:f9:d3:4a: 98:ed:20:27:7a:02:17:2f:67:c2:41:33:d2:43:3c:10:8d:06: ae:71:f9:bf:f4:67:96:79:32:b1:f5:fc:4a:fb:44:24:1c:4f: 35:0d:9b:66:e5:e2:55:4d:59:a9:1c:8e:ed:e7:6d:5a:5f:07: a7:99:aa:91:46:36:36:14:6d:40:31:a3:82:f4:fd:62:79:90: a3:62:d1:fe:f8:aa:2c:d7:63:cd:e3:b0:c7:c8:53:eb:fb:a5: 91:51:d5:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNjIyMTk0NTUwWhcNMjYwNjI5MTk0NTUwWjAYMRYwFAYD VQQDEw02YTM5OTBlZS1mOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLWwpsJWHBPn3a4JYL+Xl7w0NXS8bu0XXcA1+dixMRQn9tRfaJa+WJnu10eL fN4YKwHjZ8LXbHN2uQlSWJ8ADBjuUOO7Ii2/zncPIyESxAXN+YaDSGkv9RZE9r79 e0iXQ3fDc7fEpnJIB1PHFiCF7AcaHbAQTRsE3VfnrKAm39BEyvFCKeUXf541MBIs 8dq0RUyq2SWp8jvbE7Oafa8AdEcvb8zq3laC1lZFtEgARd49J7YR9w9Zs6SU33dw t7zHUFoVEVYGNWgx7XHyMcc1DQQhmAnvkblUrK6o/LePsVAI/u2xk+54gTh8WcYr WPdV93N/LjbwfzQKUNHxWxLjPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCX22NEN KwrbyCfbauJC7KTqQvqJMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhN8YwDqZ/diFsdNhJ3/BhTpKyQDWhs8ECjF4wlS1DPssc3Qs2rkH74WJmW3E y1O06br1C5iRAQIQf9zKpX+PMMsrvUFuxbt7Ye2IgqpOoxyb79Y/nMya4Kr4jAtD kUrHBfL5msQ90ZZ/aByL3WoIF0B96coS4JXi+AxX5BUI8QpQFcWTH43uTEykOKC+ RyrF2dgwos3/6xwJUIfp2n6l+dNKmO0gJ3oCFy9nwkEz0kM8EI0GrnH5v/Rnlnky sfX8SvtEJBxPNQ2bZuXiVU1ZqRyO7edtWl8Hp5mqkUY2NhRtQDGjgvT9YnmQo2LR /viqLNdjzeOwx8hT6/ulkVHVQA== -----END CERTIFICATE-----Generated at Wed Jun 24 05:58:58 2026 by rpki-client