$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: 2A/xvcpgeiOJSPKazGwpqN6RUEtm3Ue36pyX3yDmhYc= Subject key identifier: 52:FF:A9:5A:CE:B7:14:CC:ED:F6:1C:C5:A8:D5:4F:5C:4A:0D:B2:E0 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A1E Signing time: Tue 12 May 2026 19:50:22 +0000 Manifest this update: Tue 12 May 2026 19:50:21 +0000 Manifest next update: Tue 19 May 2026 19:50:21 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: bud7oFhSvypY2itGFHSUjcGPOzVFgYZSPqu2JtMhFhU=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: May 12 19:50:21 2026 GMT Not After : May 19 19:50:21 2026 GMT Subject: CN=6a03847e-b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:99:fd:03:f2:b4:69:a4:73:02:44:6c:ca: 44:fe:80:b3:11:d4:2c:1a:c8:f7:1a:de:16:fe:3e: 91:69:60:63:be:47:25:b6:a6:d2:50:17:25:33:ea: 86:04:1f:6a:8e:05:36:e8:0b:87:72:5f:ef:d8:16: 35:7d:44:b7:f2:40:58:9c:46:95:af:99:db:cf:d5: 7d:f5:e4:cc:53:fd:79:0c:aa:a2:48:16:af:4e:fa: b2:8a:d6:87:d6:70:39:10:f3:ec:84:b2:db:fd:40: ee:e9:1d:de:af:4e:70:a8:a8:e9:a2:05:22:c4:94: b0:4a:55:4b:11:3c:50:f2:aa:3b:fb:1c:45:ea:f4: dc:92:fe:fb:44:2c:e5:16:f2:47:01:3d:09:5c:c9: e0:e8:f8:e1:d5:3e:24:8a:cc:fa:d6:2b:d1:ee:97: 90:9d:83:3b:03:01:7b:a0:48:80:1e:b6:7c:af:c4: 78:31:ce:e8:26:f0:c7:e1:12:81:77:cd:21:68:7a: 58:fe:76:ab:c3:56:81:34:bf:a2:4b:d9:1c:19:12: a9:dd:50:88:c9:df:3e:02:e5:de:02:96:f7:75:bf: c9:7e:56:ee:2e:63:99:15:64:2c:41:08:cb:01:43: 40:1d:69:b6:cd:e5:02:b6:e3:eb:e0:40:66:f6:0d: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:A9:5A:CE:B7:14:CC:ED:F6:1C:C5:A8:D5:4F:5C:4A:0D:B2:E0 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8c:9e:5f:81:a0:90:4c:00:9b:9c:fa:94:9e:20:fe:ed:36: 5c:88:0c:bb:32:70:13:63:d1:59:d3:ab:09:bd:a3:6c:0f:72: 6d:50:e0:a2:ce:22:46:de:53:1a:0c:8a:44:c1:3c:f4:0b:2e: be:ea:6f:5f:f5:3b:62:73:f7:45:63:22:c9:14:79:ea:5a:4f: da:b6:be:f6:69:11:d5:dd:41:b4:56:2b:44:1b:d8:81:4a:02: d6:05:21:e1:3f:ba:b5:b3:9f:28:63:55:f7:1d:ec:a9:83:66: 81:c1:d2:8f:a5:8f:a8:bf:f4:0f:b3:29:1f:af:d6:57:c0:0b: 31:05:c2:38:66:86:c4:d2:3e:bc:6f:72:d0:08:32:79:18:28: 7e:98:7b:a9:36:2f:72:b0:14:ce:18:d9:d0:ea:13:a8:f6:12: a2:aa:1c:02:8c:00:25:71:33:b4:fa:37:e5:69:03:a3:f6:cc: bf:55:eb:4e:7d:77:07:e1:58:d4:0c:da:92:c2:d1:0a:93:3d: 7f:67:ad:3a:f9:94:75:24:10:7a:e3:3b:cf:30:f9:40:f4:39: fe:91:2e:18:c3:5e:f6:49:3c:b2:26:9d:29:66:68:57:2b:c1: 0a:e8:c6:72:b5:c8:03:6a:67:29:62:d7:e2:e5:a2:ba:94:e4: 27:a1:2e:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNTEyMTk1MDIxWhcNMjYwNTE5MTk1MDIxWjAYMRYwFAYD VQQDEw02YTAzODQ3ZS1iNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9WZ/QPytGmkcwJEbMpE/oCzEdQsGsj3Gt4W/j6RaWBjvkcltqbSUBclM+qG BB9qjgU26AuHcl/v2BY1fUS38kBYnEaVr5nbz9V99eTMU/15DKqiSBavTvqyitaH 1nA5EPPshLLb/UDu6R3er05wqKjpogUixJSwSlVLETxQ8qo7+xxF6vTckv77RCzl FvJHAT0JXMng6Pjh1T4kisz61ivR7peQnYM7AwF7oEiAHrZ8r8R4Mc7oJvDH4RKB d80haHpY/narw1aBNL+iS9kcGRKp3VCIyd8+AuXeApb3db/JflbuLmOZFWQsQQjL AUNAHWm2zeUCtuPr4EBm9g2yIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL/qVrO txTM7fYcxajVT1xKDbLgMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoyeX4GgkEwAm5z6lJ4g/u02XIgMuzJwE2PRWdOrCb2jbA9ybVDgos4iRt5T GgyKRME89AsuvupvX/U7YnP3RWMiyRR56lpP2ra+9mkR1d1BtFYrRBvYgUoC1gUh 4T+6tbOfKGNV9x3sqYNmgcHSj6WPqL/0D7MpH6/WV8ALMQXCOGaGxNI+vG9y0Agy eRgofph7qTYvcrAUzhjZ0OoTqPYSoqocAowAJXEztPo35WkDo/bMv1XrTn13B+FY 1AzaksLRCpM9f2etOvmUdSQQeuM7zzD5QPQ5/pEuGMNe9kk8siadKWZoVyvBCujG crXIA2pnKWLX4uWiupTkJ6EuQg== -----END CERTIFICATE-----Generated at Wed May 13 01:26:48 2026 by rpki-client