$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft File: A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json) Hash identifier: p+tVfI1JDA0QMdVw2KdXJbVu/553U+0SMnhWQ9jpTjY= Subject key identifier: FF:DC:24:C7:09:52:BA:36:6E:BC:0B:D5:90:2A:8D:E0:C1:69:55:7F Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 Certificate issuer: /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:30:04 +0000 Manifest this update: Sun 19 Oct 2025 11:30:03 +0000 Manifest next update: Sun 26 Oct 2025 11:30:03 +0000 Files and hashes: 1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: A48N7gSpAA/LWFupAp5MHDkMZRIpCvOjrraC5B9JT3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Validity Not Before: Oct 19 11:30:03 2025 GMT Not After : Oct 26 11:30:03 2025 GMT Subject: CN=68f4cbbc-7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:95:c0:45:0f:58:e4:43:fa:4e:f3:23:96: 01:d1:03:28:e8:be:dd:03:19:fa:70:74:1e:05:1d: 4d:dd:c7:8a:fc:23:c7:82:bd:d9:84:c7:ff:45:61: bf:01:97:fe:7c:35:9d:bd:17:db:98:70:50:cc:60: 91:1a:4b:b7:3d:be:2e:dd:d4:7f:4d:05:d0:5a:5d: da:ed:bd:28:9c:be:7a:ce:33:cc:bc:1f:d3:a6:54: 9c:76:0c:99:45:42:f0:55:7a:71:96:09:7b:d9:fa: da:b9:f3:d9:75:70:16:7f:bd:36:a3:f4:68:4f:13: 7d:72:71:0f:fc:ca:18:69:ce:e6:de:aa:43:b5:64: 71:52:1f:69:3d:50:9f:01:9b:d8:3f:4e:d8:01:ff: 4b:b5:6d:ee:2a:ca:13:9c:5b:d3:a3:8e:5d:b7:74: 56:ea:a4:66:4a:ca:25:b7:db:14:82:93:55:9b:40: 1a:04:b9:f7:07:03:19:27:f6:88:f8:80:72:76:94: e6:b1:83:5f:45:3c:64:9d:98:83:a3:5c:87:bd:c7: f5:fe:76:7e:02:03:a4:73:0c:ac:ea:26:16:6b:44: 7d:7d:53:6a:2d:09:de:13:7d:d1:7b:aa:8e:be:e0: 7f:8d:58:6e:ec:36:b1:31:56:40:04:c3:bf:46:e1: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DC:24:C7:09:52:BA:36:6E:BC:0B:D5:90:2A:8D:E0:C1:69:55:7F X509v3 Authority Key Identifier: keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c5:3f:cc:21:91:d1:0b:70:d2:40:51:57:10:38:a0:38:92: 3e:96:61:bd:ae:54:27:be:6f:a4:80:cc:15:c4:85:c8:aa:2e: 1e:9f:6e:05:c4:54:d7:92:f7:cb:32:48:08:87:21:0e:cd:73: b1:f5:8a:6e:15:3c:c2:40:e2:ae:4e:fc:c7:82:02:4b:3d:04: 7e:39:24:f3:d9:6b:98:02:1e:ce:ed:43:77:32:2d:92:ab:b0: 19:0c:d8:f6:27:49:65:56:1e:0a:ea:27:9b:42:17:72:7e:2a: ac:0c:09:88:b4:2b:9e:39:96:52:c2:87:03:96:e4:fe:1e:6b: 07:51:cd:64:ab:39:d7:4c:f5:ac:2a:aa:31:57:82:b0:55:c7: a7:9c:56:66:cb:5c:63:77:56:a1:0a:f1:4a:49:d3:ff:cc:1d: ac:f9:c6:29:25:f4:d2:f9:db:cb:24:54:ef:84:ee:b8:60:67: 8e:94:14:8b:e5:e9:26:f2:bb:6a:2c:0c:d0:cb:24:e6:b7:d3: 43:b9:ba:ba:36:7d:07:37:30:27:33:18:1a:25:96:f0:76:45: 06:9d:e8:08:b9:b6:79:6d:56:0a:b9:d6:e8:19:5a:25:58:82: 61:bc:86:a9:6f:be:59:92:fa:a6:da:5f:5a:d6:00:b9:ad:65: 37:fd:76:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REZGODExMC8GA1UEBRMoMDM0RDQ2MkI1RkFGNkE3QzM4RDAyMDFDMDVEMURGQzJE MTYyOTA3NTAeFw0yNTEwMTkxMTMwMDNaFw0yNTEwMjYxMTMwMDNaMBgxFjAUBgNV BAMTDTY4ZjRjYmJjLTczNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVOZXARQ9Y5EP6TvMjlgHRAyjovt0DGfpwdB4FHU3dx4r8I8eCvdmEx/9FYb8B l/58NZ29F9uYcFDMYJEaS7c9vi7d1H9NBdBaXdrtvSicvnrOM8y8H9OmVJx2DJlF QvBVenGWCXvZ+tq589l1cBZ/vTaj9GhPE31ycQ/8yhhpzubeqkO1ZHFSH2k9UJ8B m9g/TtgB/0u1be4qyhOcW9Ojjl23dFbqpGZKyiW32xSCk1WbQBoEufcHAxkn9oj4 gHJ2lOaxg19FPGSdmIOjXIe9x/X+dn4CA6RzDKzqJhZrRH19U2otCd4TfdF7qo6+ 4H+NWG7sNrExVkAEw79G4VpHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/9wkxwlS ujZuvAvVkCqN4MFpVX8wHwYDVR0jBBgwFoAUA01GK1+vanw40CAcBdHfwtFikHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERkY4L0QxMDgyMUQ2OTIw OTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53NDBDQWNCZEhmd3RGaWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTAxR0sxLXZhbnc0MENBY0JkSGZ3dEZpa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE RkY4L0QxMDgyMUQ2OTIwOTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53 NDBDQWNCZEhmd3RGaWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjFP8whkdELcNJAUVcQOKA4kj6WYb2uVCe+b6SAzBXEhciqLh6fbgXE VNeS98sySAiHIQ7Nc7H1im4VPMJA4q5O/MeCAks9BH45JPPZa5gCHs7tQ3cyLZKr sBkM2PYnSWVWHgrqJ5tCF3J+KqwMCYi0K545llLChwOW5P4eawdRzWSrOddM9awq qjFXgrBVx6ecVmbLXGN3VqEK8UpJ0//MHaz5xikl9NL528skVO+E7rhgZ46UFIvl 6Sbyu2osDNDLJOa300O5uro2fQc3MCczGBollvB2RQad6Ai5tnltVgq51ugZWiVY gmG8hqlvvlmS+qbaX1rWALmtZTf9dhM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:24 2025 by rpki-client