$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: vvO/Xyin/OMIYYucPidIIQ7XabbvYfey16jU3epiZD8= Subject key identifier: 18:D7:56:24:38:B3:4C:6F:66:11:1E:ED:88:E1:55:AB:B1:2A:F4:98 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 09B7 Signing time: Tue 28 Oct 2025 19:54:03 +0000 Manifest this update: Tue 28 Oct 2025 19:54:03 +0000 Manifest next update: Tue 04 Nov 2025 19:54:03 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: FfIZNT7K51FNzxlbcZOFSONcvjZX2fbjKeEBaG/gxAk=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 19:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Oct 28 19:54:03 2025 GMT Not After : Nov 4 19:54:03 2025 GMT Subject: CN=69011f5b-f7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:d3:f7:d0:ac:b0:fa:c4:78:5c:39:10:d6: ee:bd:8d:ac:71:45:bf:e7:c0:be:8c:26:e1:fe:60: 1e:0c:19:60:3d:9d:ac:b3:e2:33:0e:34:71:57:79: 9a:29:a0:64:36:cc:31:db:cd:f3:73:50:20:10:9a: b2:50:b4:a9:f7:40:45:9a:81:33:70:12:ae:0f:33: 8f:0c:4a:c5:da:16:3d:48:fa:05:48:6f:f7:02:4b: c0:05:3b:06:1e:d9:70:43:08:2c:b9:72:16:b0:75: 50:a8:8c:52:1a:e9:e4:c2:d0:8a:ac:53:08:8c:0b: 46:c6:4e:30:47:45:ef:2e:11:7f:da:71:75:4e:cd: b6:30:9c:31:da:77:5a:68:27:0e:8a:40:b1:99:69: 0e:c4:68:66:5a:f0:34:44:39:52:cc:94:6b:44:bd: 04:6f:69:f3:ba:d0:8e:1f:d0:97:7d:58:95:1e:04: 5d:25:86:01:98:19:7b:ea:c1:a4:44:5c:1b:d9:1f: 5c:32:2c:8e:5b:0b:40:c5:a6:67:3d:31:e7:31:f0: f7:2c:67:15:29:44:39:30:d2:d0:cf:4f:1c:c1:74: 18:7d:b1:c3:f5:9d:33:f3:d5:3f:a4:85:7d:9a:67: 08:49:89:93:75:33:1c:53:26:00:de:2c:52:86:37: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D7:56:24:38:B3:4C:6F:66:11:1E:ED:88:E1:55:AB:B1:2A:F4:98 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:76:b0:39:d7:c9:4c:23:a3:c9:01:dc:4e:eb:58:e1:37: a8:a3:d9:b6:48:1c:5c:4a:71:2a:4d:9b:ee:32:9d:81:85:4a: c9:a0:75:78:01:3b:b3:5d:c8:fd:a0:34:a6:79:e1:c7:3b:6e: da:66:8e:aa:07:92:bc:70:ed:66:66:11:a6:9c:2a:ed:72:17: 06:eb:9d:a3:7d:70:07:67:35:18:e9:80:22:ae:55:93:e7:50: 04:13:42:42:8e:e6:8a:b2:ea:ce:a2:0e:41:31:fd:e5:47:c8: 9c:2c:e9:86:31:2c:91:35:d1:86:1a:6c:6f:3e:04:e9:d0:20: 38:6e:e4:d1:19:a0:66:c0:96:34:72:e9:8c:d6:18:18:53:d6: f0:72:33:29:81:79:bf:c9:21:19:06:e7:8b:db:30:1a:cd:e6: 9c:2b:86:7d:5c:e2:54:03:3c:75:ad:03:b9:ac:98:62:2a:2c: 27:b3:7d:76:6b:0d:eb:8e:65:b9:86:90:e8:1f:38:80:f5:22: b9:bc:6c:7a:63:7d:88:a4:bc:17:65:ba:42:01:54:c2:45:1e: 41:7c:6c:38:5e:ab:b7:ae:84:f2:68:74:32:25:bf:8a:86:3c: cb:1b:19:53:01:ae:e3:b2:9c:5a:a0:0a:14:cc:e1:53:e4:83: ac:0a:49:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUxMDI4MTk1NDAzWhcNMjUxMTA0MTk1NDAzWjAYMRYwFAYD VQQDEw02OTAxMWY1Yi1mN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIfT99CssPrEeFw5ENbuvY2scUW/58C+jCbh/mAeDBlgPZ2ss+IzDjRxV3ma KaBkNswx283zc1AgEJqyULSp90BFmoEzcBKuDzOPDErF2hY9SPoFSG/3AkvABTsG HtlwQwgsuXIWsHVQqIxSGunkwtCKrFMIjAtGxk4wR0XvLhF/2nF1Ts22MJwx2nda aCcOikCxmWkOxGhmWvA0RDlSzJRrRL0Eb2nzutCOH9CXfViVHgRdJYYBmBl76sGk RFwb2R9cMiyOWwtAxaZnPTHnMfD3LGcVKUQ5MNLQz08cwXQYfbHD9Z0z89U/pIV9 mmcISYmTdTMcUyYA3ixShjdBbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjXViQ4 s0xvZhEe7YjhVauxKvSYMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCanawOdfJTCOjyQHcTutY4Teoo9m2SBxcSnEqTZvuMp2BhUrJoHV4 ATuzXcj9oDSmeeHHO27aZo6qB5K8cO1mZhGmnCrtchcG652jfXAHZzUY6YAirlWT 51AEE0JCjuaKsurOog5BMf3lR8icLOmGMSyRNdGGGmxvPgTp0CA4buTRGaBmwJY0 cumM1hgYU9bwcjMpgXm/ySEZBueL2zAazeacK4Z9XOJUAzx1rQO5rJhiKiwns312 aw3rjmW5hpDoHziA9SK5vGx6Y32IpLwXZbpCAVTCRR5BfGw4Xqu3roTyaHQyJb+K hjzLGxlTAa7jspxaoAoUzOFT5IOsCkkj -----END CERTIFICATE-----Generated at Thu Oct 30 19:39:17 2025 by rpki-client