$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: NMXqaWyHH85ILFu0W1VZXUWJkSyUPds5JWMK3wW2K4w= Subject key identifier: 52:6F:41:8C:1B:4D:31:82:B9:41:04:71:69:D4:9A:02:53:05:D0:47 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 09B0 Signing time: Sat 18 Oct 2025 21:03:50 +0000 Manifest this update: Sat 18 Oct 2025 21:03:49 +0000 Manifest next update: Sat 25 Oct 2025 21:03:49 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: YVAvqIVzsOVKuT2wD++UMqdDbyhM8mDA/8x/ssCitVs=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Oct 18 21:03:49 2025 GMT Not After : Oct 25 21:03:49 2025 GMT Subject: CN=68f400b5-30a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:ff:f7:5b:21:c4:74:a7:1f:3b:81:f3:78: 5b:3c:4c:bc:d6:e7:de:c8:15:81:15:6e:34:fa:cf: f6:8e:c6:87:05:62:ad:a5:72:72:26:84:8a:63:0b: 66:15:77:b7:48:45:59:f4:e8:15:ac:f9:b8:e4:02: 5c:e3:e1:8c:e2:b1:1d:fb:09:42:0b:59:d7:80:44: e6:35:2a:82:5c:7e:72:0e:ab:52:cd:83:57:ff:64: 46:bb:60:2f:76:86:67:0f:55:12:b6:e3:e7:28:5d: 8f:86:21:4d:12:97:50:cc:d4:27:8f:ce:5b:e6:dc: dd:d1:90:1d:1e:c8:4b:6c:5e:90:d4:db:cd:8e:5f: db:e2:a2:58:bd:ba:7c:67:f1:76:3d:7d:a7:77:44: 5e:82:72:b0:42:51:f9:7a:b6:58:bd:20:28:b5:f1: 27:17:bc:c8:bb:10:17:8a:07:34:64:1b:b1:af:10: dd:d2:4f:2a:75:e3:44:b6:0f:e1:04:1d:bf:60:45: e6:b8:a1:b2:cb:07:ba:64:f9:9a:e5:b6:6f:44:12: ed:60:a2:f5:dd:a6:17:22:79:6c:b1:6a:cd:3c:b2: 0a:ba:45:94:3c:0d:f6:f6:30:66:a9:22:1b:14:8a: b0:b1:d3:e2:f2:36:b0:42:07:bf:ce:69:ab:ea:2c: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6F:41:8C:1B:4D:31:82:B9:41:04:71:69:D4:9A:02:53:05:D0:47 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3f:e2:01:a3:88:bf:d3:be:12:b2:ac:2f:aa:9d:7d:08:bf: 78:b4:b9:5e:a8:01:03:8d:f7:23:68:52:f1:d4:23:7d:ca:a2: 19:5f:d4:d3:35:2e:40:01:97:f2:93:56:1a:96:08:d1:e4:c7: 59:8f:94:9c:11:15:e9:53:3b:2e:97:2e:53:2e:22:01:69:81: 28:ac:55:c9:eb:2b:3e:31:c5:fa:fb:d0:0f:14:52:6a:b3:0e: c4:41:9c:2c:3f:99:ce:d3:57:3a:ec:3e:b8:46:09:b9:b7:9f: e4:69:e8:c4:6b:0e:00:7f:0b:88:40:ef:9f:84:11:04:53:6d: 92:9f:8a:57:d5:af:1b:ab:9e:0f:09:b5:3c:f9:8c:4d:2a:93: 1d:5e:fa:a4:b4:68:f2:dd:ca:c3:77:ca:c9:ac:54:03:2a:a3: cf:0d:dd:39:f2:40:73:eb:3c:5b:8d:f8:0b:7a:09:74:83:6f: ed:b9:e5:60:c7:c9:e3:1e:2b:36:0b:55:45:49:11:f6:25:e4: 81:b4:68:3d:c6:2d:5d:db:e6:1e:9d:ca:e5:70:c5:44:26:cd: 44:9c:e3:a9:f5:d6:32:84:dc:69:45:61:b0:8b:d8:64:a4:d5: 82:d6:cb:e2:18:58:95:3e:f6:b6:61:40:1b:3b:85:54:14:27: 2f:ca:9b:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUxMDE4MjEwMzQ5WhcNMjUxMDI1MjEwMzQ5WjAYMRYwFAYD VQQDEw02OGY0MDBiNS0zMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOv/91shxHSnHzuB83hbPEy81ufeyBWBFW40+s/2jsaHBWKtpXJyJoSKYwtm FXe3SEVZ9OgVrPm45AJc4+GM4rEd+wlCC1nXgETmNSqCXH5yDqtSzYNX/2RGu2Av doZnD1UStuPnKF2PhiFNEpdQzNQnj85b5tzd0ZAdHshLbF6Q1NvNjl/b4qJYvbp8 Z/F2PX2nd0RegnKwQlH5erZYvSAotfEnF7zIuxAXigc0ZBuxrxDd0k8qdeNEtg/h BB2/YEXmuKGyywe6ZPma5bZvRBLtYKL13aYXInlssWrNPLIKukWUPA329jBmqSIb FIqwsdPi8jawQge/zmmr6iznRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJvQYwb TTGCuUEEcWnUmgJTBdBHMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNP+IBo4i/074Ssqwvqp19CL94tLleqAEDjfcjaFLx1CN9yqIZX9TT NS5AAZfyk1YalgjR5MdZj5ScERXpUzsuly5TLiIBaYEorFXJ6ys+McX6+9APFFJq sw7EQZwsP5nO01c67D64Rgm5t5/kaejEaw4AfwuIQO+fhBEEU22Sn4pX1a8bq54P CbU8+YxNKpMdXvqktGjy3crDd8rJrFQDKqPPDd058kBz6zxbjfgLegl0g2/tueVg x8njHis2C1VFSRH2JeSBtGg9xi1d2+YencrlcMVEJs1EnOOp9dYyhNxpRWGwi9hk pNWC1sviGFiVPva2YUAbO4VUFCcvyptL -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:23 2025 by rpki-client