$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: MbaeaRg95GpprERjd1JKCDITT12iyeFFBU22UuJCI0g= Subject key identifier: DC:7E:50:83:68:FC:FC:CB:E7:2D:D1:CC:4F:60:A6:50:53:4E:0A:1F Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0993 Signing time: Fri 22 Aug 2025 20:13:16 +0000 Manifest this update: Fri 22 Aug 2025 20:13:15 +0000 Manifest next update: Fri 29 Aug 2025 20:13:15 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: ED1/twbQLZvlxxxLLYevTkPWvPCHwPmOYXyS/+Wt+O0=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Aug 22 20:13:15 2025 GMT Not After : Aug 29 20:13:15 2025 GMT Subject: CN=68a8cf5b-5175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:6f:37:86:fa:54:b1:e3:73:04:f6:c2:05: bd:1c:ad:de:cf:85:07:21:c0:a8:72:26:36:f6:4d: a7:6f:61:3f:8d:e3:0b:a9:f3:c2:19:86:73:2b:a8: fa:2f:4c:7f:8d:0e:70:98:02:d9:55:3c:e9:05:5c: e9:cd:09:87:9f:9d:a1:55:c2:f1:98:62:ec:d0:d1: 60:0c:9a:b4:ea:72:5d:d9:22:34:bf:14:33:57:da: 15:c2:a5:5a:6c:2f:72:df:e3:e3:f9:f3:ce:e9:db: fb:12:ca:95:cb:c1:15:7c:6f:9f:d1:7d:0c:02:42: a5:13:f9:6e:bb:65:d0:12:9c:eb:92:3c:48:0c:55: 45:ff:02:d3:4a:19:6c:90:3c:48:6c:f7:17:4b:c5: e8:65:c6:54:2c:09:5a:9e:88:0a:ee:4e:82:85:59: 05:e5:49:27:69:50:6c:05:d5:e0:cc:da:0b:a6:a1: a2:84:0c:08:2e:58:ab:9e:a8:e6:97:44:21:6e:fb: 55:f3:7a:d2:22:66:06:d2:ad:1b:1f:70:f3:06:f2: 6a:3a:d2:50:2b:1d:21:15:ae:56:22:2e:fc:08:ee: ba:87:83:7c:ba:26:89:3c:3a:bd:e0:b7:77:d7:73: 86:d0:75:87:dd:2c:0e:af:77:00:49:88:fb:80:cb: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:50:83:68:FC:FC:CB:E7:2D:D1:CC:4F:60:A6:50:53:4E:0A:1F X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a3:9b:74:56:ec:a0:e8:61:f7:6f:5a:55:79:89:a7:fe:2d: 67:22:14:c2:33:16:2b:69:94:62:ca:58:bd:9c:eb:fb:f7:83: c2:1a:29:b6:ea:6c:57:bf:f4:58:d6:f8:68:92:63:96:d5:39: d2:96:a3:18:56:23:e4:ef:1d:12:a8:5d:d7:b2:fa:4f:4d:b1: 8a:3a:f6:45:67:cd:51:7c:95:1a:ca:8b:99:eb:db:05:5e:87: c4:13:83:ec:51:ea:22:5b:a5:bb:f0:50:f3:55:aa:0d:78:74: ab:6a:f8:54:e5:2f:cd:26:7e:42:eb:66:e6:7f:14:10:81:d5: fe:92:be:95:66:69:28:b6:14:6f:9a:f3:1a:37:6e:25:fb:a9: 86:e1:91:c6:1e:77:87:ae:62:c0:65:f1:0e:52:e0:d2:1f:d0: d1:6f:77:ba:a5:08:d5:2f:52:8d:e4:f7:86:cc:3d:e3:93:71: 1f:20:fa:43:79:dc:21:d3:89:61:e9:91:2b:de:c1:68:ef:f2: 44:43:4e:a0:52:c7:91:c1:17:74:ce:40:57:af:59:7c:c1:79: 87:0b:51:e2:3d:e3:d9:fb:6e:97:95:fd:5a:ce:83:fc:c6:3a: eb:c9:91:80:b2:72:3f:0e:83:76:ec:2a:32:e7:8f:7e:2b:c0: 30:e3:ea:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwODIyMjAxMzE1WhcNMjUwODI5MjAxMzE1WjAYMRYwFAYD VQQDEw02OGE4Y2Y1Yi01MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt1vN4b6VLHjcwT2wgW9HK3ez4UHIcCociY29k2nb2E/jeMLqfPCGYZzK6j6 L0x/jQ5wmALZVTzpBVzpzQmHn52hVcLxmGLs0NFgDJq06nJd2SI0vxQzV9oVwqVa bC9y3+Pj+fPO6dv7EsqVy8EVfG+f0X0MAkKlE/luu2XQEpzrkjxIDFVF/wLTShls kDxIbPcXS8XoZcZULAlanogK7k6ChVkF5UknaVBsBdXgzNoLpqGihAwILlirnqjm l0QhbvtV83rSImYG0q0bH3DzBvJqOtJQKx0hFa5WIi78CO66h4N8uiaJPDq94Ld3 13OG0HWH3SwOr3cASYj7gMsKEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx+UINo /PzL5y3RzE9gplBTTgofMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZo5t0Vuyg6GH3b1pVeYmn/i1nIhTCMxYraZRiyli9nOv794PCGim2 6mxXv/RY1vhokmOW1TnSlqMYViPk7x0SqF3XsvpPTbGKOvZFZ81RfJUayouZ69sF XofEE4PsUeoiW6W78FDzVaoNeHSravhU5S/NJn5C62bmfxQQgdX+kr6VZmkothRv mvMaN24l+6mG4ZHGHneHrmLAZfEOUuDSH9DRb3e6pQjVL1KN5PeGzD3jk3EfIPpD edwh04lh6ZEr3sFo7/JEQ06gUseRwRd0zkBXr1l8wXmHC1HiPePZ+26Xlf1azoP8 xjrryZGAsnI/DoN27Coy549+K8Aw4+pA -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:59 2025 by rpki-client