$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: XulA5WiRGr6xzT0yOvomonSOnttbx6JdV9frwMlwNak= Subject key identifier: B1:DF:5C:3D:3F:78:02:BD:45:3F:87:0C:D7:F7:7A:45:6D:A6:48:6B Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0A42 Signing time: Wed 22 Jul 2026 20:07:14 +0000 Manifest this update: Wed 22 Jul 2026 20:07:13 +0000 Manifest next update: Wed 29 Jul 2026 20:07:13 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: WqhL9RvGnCVYRD8F6PfxfhUmxeKhyRsvTS3rs+bCNm0=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Jul 22 20:07:13 2026 GMT Not After : Jul 29 20:07:13 2026 GMT Subject: CN=6a6122f2-b31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:ed:7a:fd:08:25:24:7f:c5:cd:78:e7:7e: 23:7d:dc:4d:71:9d:f8:be:9c:0e:a2:64:bf:ba:c4: 1b:5f:c8:e7:ed:04:fd:c8:f9:21:ca:d0:58:96:89: 0e:3d:78:e1:61:3a:76:eb:62:73:d7:13:e9:86:cb: 54:1e:4f:8a:ed:0f:29:41:d0:60:de:b8:34:1e:fc: a6:59:fb:02:91:fb:e8:28:51:0d:07:f1:a6:81:f8: 5e:5d:31:fd:88:bc:37:13:de:5d:c6:e6:fc:ab:6e: cc:b8:7d:21:0a:d0:8a:88:fe:1c:b0:b7:d6:97:6b: 19:b9:75:90:06:58:f8:33:54:ec:41:9d:70:39:e3: 9a:f3:99:85:89:2d:b0:38:2d:57:62:1b:57:99:fa: 89:bc:d8:e5:4d:3f:27:24:51:27:9e:e2:39:b7:fd: f0:e6:4a:73:d6:16:6d:67:9a:49:94:49:0c:c3:4d: c5:d0:60:1d:93:22:c6:da:7a:c4:08:58:df:75:b1: 0e:6e:a8:85:56:89:d7:ab:01:58:69:cc:46:75:73: 39:33:3b:6d:f4:c1:cf:06:4a:7a:dd:0d:ee:ce:d8: 3f:dc:58:e8:2a:33:9f:46:87:86:36:3e:3e:0d:33: fd:6d:e0:53:27:d1:04:51:91:5a:6e:8d:9e:0e:66: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DF:5C:3D:3F:78:02:BD:45:3F:87:0C:D7:F7:7A:45:6D:A6:48:6B X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:87:2a:bb:25:76:84:3f:41:e4:fa:3d:a6:7e:6a:81:e4:85: 25:01:48:7a:62:a1:c3:1f:9f:2f:9d:c5:de:9b:4a:d3:a8:94: 0f:0f:91:b9:26:9f:19:80:46:55:b5:94:ab:39:69:62:be:d1: a1:22:44:5a:1f:06:b2:bf:3b:e5:eb:6a:71:1c:6b:42:ef:9c: a3:62:0d:49:47:a4:88:f5:a1:b1:e9:f3:30:23:b7:1d:26:9a: c0:69:1a:ca:c1:91:99:57:17:b7:8d:62:87:e7:62:9f:98:fd: fc:8c:6b:bf:fb:7e:3e:d0:b0:72:f6:4a:ab:e4:e8:9c:a4:9b: f0:75:71:d0:ac:f5:23:d2:71:b9:5b:fa:8b:1c:54:78:0c:46: f9:e7:dc:e5:a6:ca:b8:d9:ae:5d:7e:60:f5:f5:2c:4a:f7:ac: 5e:cb:ac:1e:c4:8f:15:9d:10:dd:78:45:16:00:fa:68:96:90: 52:0c:f5:40:32:c8:49:31:05:56:f9:cb:6b:b2:05:3c:12:0b: 98:43:77:ab:d1:ae:64:e6:51:77:29:7d:92:8b:1e:70:64:22: 8b:1c:68:11:42:9c:d3:91:90:36:aa:37:25:b3:66:7f:64:26: 84:d0:69:ec:21:01:59:39:c5:36:50:05:1d:1f:04:ed:69:ee: 2d:7f:60:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjYwNzIyMjAwNzEzWhcNMjYwNzI5MjAwNzEzWjAYMRYwFAYD VQQDEw02YTYxMjJmMi1iMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArijtev0IJSR/xc14534jfdxNcZ34vpwOomS/usQbX8jn7QT9yPkhytBYlokO PXjhYTp262Jz1xPphstUHk+K7Q8pQdBg3rg0HvymWfsCkfvoKFENB/GmgfheXTH9 iLw3E95dxub8q27MuH0hCtCKiP4csLfWl2sZuXWQBlj4M1TsQZ1wOeOa85mFiS2w OC1XYhtXmfqJvNjlTT8nJFEnnuI5t/3w5kpz1hZtZ5pJlEkMw03F0GAdkyLG2nrE CFjfdbEObqiFVonXqwFYacxGdXM5Mztt9MHPBkp63Q3uztg/3FjoKjOfRoeGNj4+ DTP9beBTJ9EEUZFabo2eDmY3jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHfXD0/ eAK9RT+HDNf3ekVtpkhrMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhYcquyV2hD9B5Po9pn5qgeSFJQFIemKhwx+fL53F3ptK06iUDw+RuSafGYBG VbWUqzlpYr7RoSJEWh8Gsr875etqcRxrQu+co2INSUekiPWhsenzMCO3HSaawGka ysGRmVcXt41ih+din5j9/Ixrv/t+PtCwcvZKq+TonKSb8HVx0Kz1I9JxuVv6ixxU eAxG+efc5abKuNmuXX5g9fUsSvesXsusHsSPFZ0Q3XhFFgD6aJaQUgz1QDLISTEF VvnLa7IFPBILmEN3q9GuZOZRdyl9kosecGQiixxoEUKc05GQNqo3JbNmf2QmhNBp 7CEBWTnFNlAFHR8E7WnuLX9g+w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:55 2026 by rpki-client