$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft File: GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json) Hash identifier: HWWFJi1Ap1r5Gne3+i56Hrh6Yk9syIrrW+mkk5QGRrA= Subject key identifier: A5:48:71:23:AA:66:82:C4:3B:27:DF:92:CC:F7:D8:4F:B8:CB:4F:82 Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1E27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft Manifest number: 1DD3 Signing time: Wed 22 Jul 2026 16:11:25 +0000 Manifest this update: Wed 22 Jul 2026 16:11:24 +0000 Manifest next update: Wed 29 Jul 2026 16:11:24 +0000 Files and hashes: 1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: fIlZ8mQMtNoQFF34/MHraHMeD1afjiPNsKeKVZOU33g=) 2: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=) 3: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=) 4: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=) 5: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=) 6: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=) 7: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=) 8: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7719 (0x1e27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Jul 22 16:11:24 2026 GMT Not After : Jul 29 16:11:24 2026 GMT Subject: CN=6a60ebad-a7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:bb:0a:dc:73:a1:d7:2e:b6:57:6b:a5:6a: 73:95:4d:d8:4e:4d:a5:6d:1e:f1:78:e9:ae:ae:a8: 00:0a:82:b1:9b:91:d2:9c:c3:b4:08:5c:67:44:80: 51:e1:e3:0f:0d:13:e1:f9:85:49:ac:bf:91:fb:d8: 2c:a4:48:aa:dd:ee:04:a6:86:d7:76:7a:ee:7e:4b: 2f:63:3c:85:e9:a9:cb:dc:52:da:65:8a:4d:65:4f: aa:ac:d8:4d:e3:5d:fb:61:2a:89:bd:a9:e2:20:2a: cf:20:79:ba:7e:f5:0f:68:bf:ad:f2:a0:78:0f:1a: 4c:3a:fb:16:b4:8c:41:9a:d7:98:b6:5f:ad:d1:37: d4:cf:ea:9c:a6:93:0e:bd:66:8f:f0:ee:7b:98:7f: 78:15:22:72:a6:7e:45:1c:ce:b3:9b:e0:d0:b0:c0: 83:cc:08:01:c1:2b:c6:e8:b1:a4:b3:0e:62:e3:fb: e9:89:53:70:b1:5c:2c:ba:12:bf:7c:60:36:3e:41: b4:6d:d0:8b:e1:39:0f:e0:47:0d:09:b7:ee:ad:72: 9a:8e:f9:90:ef:09:ba:ef:b8:d8:8b:74:1f:94:c8: 7a:c8:dd:b9:4d:62:e1:f6:de:1a:d5:01:da:8d:91: 49:e8:bc:06:15:31:c3:bc:3a:6c:fc:35:e9:ac:ce: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:71:23:AA:66:82:C4:3B:27:DF:92:CC:F7:D8:4F:B8:CB:4F:82 X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e5:fa:b8:3d:7e:eb:a5:ae:2a:82:0b:27:97:62:d7:4a:e6: c1:15:a8:82:68:1a:01:2b:19:3e:55:52:12:17:01:5c:9d:94: a3:c8:bc:63:cb:c2:fe:1e:f2:b9:b6:ff:4e:4e:58:99:b3:42: 7d:48:ef:de:d2:c5:50:75:9f:73:4f:64:fc:7f:fd:9e:96:a1: d9:e9:1d:e3:37:be:49:23:b0:c1:71:94:fb:4a:a6:c2:9c:b5: 97:fa:ab:0c:ec:07:da:be:2e:17:80:60:52:5d:50:38:2b:e5: e3:7d:a9:f6:63:e8:26:0a:f9:3f:f8:d2:b0:0b:4b:8f:20:00: df:f7:1d:fe:6f:ff:e5:65:b8:78:3d:a4:30:b7:cc:be:da:9f: c3:52:f0:78:47:2c:5c:63:75:84:92:35:2e:ee:62:7b:cd:d1: bb:04:86:d6:4f:1d:8b:43:3a:d3:7c:aa:9c:ca:4f:a8:8d:9a: bf:60:7e:af:74:d6:fd:4f:46:c0:99:21:29:56:61:7c:86:45: f1:c9:4a:fb:dc:e6:33:5a:8a:89:68:ad:8f:d3:1c:e3:c7:ed: 5e:a7:3d:c8:6f:16:b1:47:3e:7b:2f:6e:3f:e1:63:d9:61:92: d1:df:09:70:d1:89:aa:4d:ef:d4:f8:dd:56:55:e8:c3:0c:a2: 30:69:eb:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjYwNzIyMTYxMTI0WhcNMjYwNzI5MTYxMTI0WjAYMRYwFAYD VQQDEw02YTYwZWJhZC1hN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGu7CtxzodcutldrpWpzlU3YTk2lbR7xeOmurqgACoKxm5HSnMO0CFxnRIBR 4eMPDRPh+YVJrL+R+9gspEiq3e4EpobXdnrufksvYzyF6anL3FLaZYpNZU+qrNhN 4137YSqJvaniICrPIHm6fvUPaL+t8qB4DxpMOvsWtIxBmteYtl+t0TfUz+qcppMO vWaP8O57mH94FSJypn5FHM6zm+DQsMCDzAgBwSvG6LGksw5i4/vpiVNwsVwsuhK/ fGA2PkG0bdCL4TkP4EcNCbfurXKajvmQ7wm677jYi3QflMh6yN25TWLh9t4a1QHa jZFJ6LwGFTHDvDps/DXprM5kxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVIcSOq ZoLEOyffksz32E+4y0+CMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REJGMi9FMzQ0NTAxNkMyRjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29q UlNVQ1B2MDJKLWtzMklSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFeX6uD1+66WuKoILJ5di10rmwRWogmgaASsZPlVSEhcBXJ2Uo8i8Y8vC/h7y ubb/Tk5YmbNCfUjv3tLFUHWfc09k/H/9npah2ekd4ze+SSOwwXGU+0qmwpy1l/qr DOwH2r4uF4BgUl1QOCvl432p9mPoJgr5P/jSsAtLjyAA3/cd/m//5WW4eD2kMLfM vtqfw1LweEcsXGN1hJI1Lu5ie83RuwSG1k8di0M603yqnMpPqI2av2B+r3TW/U9G wJkhKVZhfIZF8clK+9zmM1qKiWitj9Mc48ftXqc9yG8WsUc+ey9uP+Fj2WGS0d8J cNGJqk3v1PjdVlXowwyiMGnrvw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:08 2026 by rpki-client