$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft File: A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json) Hash identifier: RV7zaStpQu8fjB4QKJyo/yyIcTNM2m9AAvUg6W6Kkg4= Subject key identifier: 1D:1A:59:85:FA:6C:6E:A2:26:56:17:06:B0:9D:16:25:83:11:AD:F8 Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 Certificate issuer: /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft Manifest number: 03 Signing time: Wed 17 Sep 2025 08:56:47 +0000 Manifest this update: Wed 17 Sep 2025 08:56:46 +0000 Manifest next update: Wed 24 Sep 2025 08:56:46 +0000 Files and hashes: 1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: tKVcMprmTzZme76s/RT+YT8VOWbh2PsCup0QeMdx+EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Validity Not Before: Sep 17 08:56:46 2025 GMT Not After : Sep 24 08:56:46 2025 GMT Subject: CN=68ca77cf-9fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:47:52:7e:77:77:9e:1f:e8:49:bd:fa:24:97: be:01:35:49:5e:49:a4:71:51:90:40:7a:f3:a3:66: e1:d1:da:b6:2a:77:55:3c:6c:de:7f:ae:44:c4:13: ca:6f:c1:8b:67:ee:da:43:77:3a:f1:6f:ff:87:ae: ea:22:e6:c0:c3:36:65:ae:a3:db:5a:b3:93:71:bf: d4:4c:ce:08:98:13:05:ff:4e:f9:26:f1:ab:25:e4: 26:ef:85:58:8e:ed:a6:47:e1:4e:87:dd:c5:cd:25: da:63:c9:23:ae:21:10:0a:4a:68:86:4f:f5:f8:b5: f4:24:e4:24:2b:18:12:83:28:35:24:7f:28:ee:0a: 04:79:af:67:07:38:09:ea:f2:ce:06:bc:68:e0:82: 9a:af:30:cd:f7:aa:ff:87:70:3a:11:8a:5a:51:30: d6:23:fe:8e:2f:51:03:94:5d:15:32:e1:9e:78:d0: 80:d6:1a:97:41:6b:b6:63:ba:08:31:35:77:18:0f: 13:57:a7:29:a8:c3:55:85:38:3c:95:cc:73:73:e2: ae:9c:19:c5:e2:1f:30:81:e8:d0:d6:5f:79:ee:ab: cf:22:87:bb:90:50:fc:1f:ae:86:39:cd:30:bb:98: d1:ee:4b:9a:5d:97:4d:cc:c3:53:70:e7:48:9b:85: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:59:85:FA:6C:6E:A2:26:56:17:06:B0:9D:16:25:83:11:AD:F8 X509v3 Authority Key Identifier: keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:cd:81:38:e1:3f:40:ae:45:f3:2a:cb:ef:7d:92:e6:2e:c9: a8:7d:a9:ed:1a:53:bd:7a:c6:a0:8c:94:79:83:cd:73:a8:4c: 6c:b6:53:bc:c8:ce:2e:d0:00:cc:65:e9:3e:f8:c5:92:92:91: fe:a7:a6:31:0a:17:5c:27:38:fc:43:ff:b8:1d:92:a8:15:e8: 1f:fa:3f:d4:15:1b:58:eb:e7:18:03:7d:1c:96:86:be:05:22: 89:e0:a8:7a:03:58:23:a1:54:b3:bf:90:97:dd:21:1b:d0:a5: e4:d7:b2:17:02:be:1f:3d:62:74:d8:f7:88:6e:22:6b:1a:4f: b4:c7:c2:16:5d:ca:37:6a:1b:aa:c9:28:f7:e6:0a:70:72:36: f4:9e:17:8a:f8:0f:96:77:e6:86:81:20:63:fc:89:ec:8c:41: 6e:e8:1c:0c:32:50:56:6c:26:5c:95:2d:f3:9d:b3:d8:81:e7: 10:17:77:65:27:3b:95:8c:84:05:93:6b:3c:ac:c1:46:39:2c: 35:2c:4c:5e:13:14:ee:81:f2:f6:de:0f:96:60:13:10:ce:49: ca:83:b6:7d:2c:57:16:06:97:04:06:1d:5f:56:f6:a3:5e:e2: 4f:6a:97:11:27:c8:87:4c:58:ed:93:76:de:3c:34:44:b6:37: 90:57:70:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REZGODExMC8GA1UEBRMoMDM0RDQ2MkI1RkFGNkE3QzM4RDAyMDFDMDVEMURGQzJE MTYyOTA3NTAeFw0yNTA5MTcwODU2NDZaFw0yNTA5MjQwODU2NDZaMBgxFjAUBgNV BAMTDTY4Y2E3N2NmLTlmZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvR1J+d3eeH+hJvfokl74BNUleSaRxUZBAevOjZuHR2rYqd1U8bN5/rkTEE8pv wYtn7tpDdzrxb/+Hruoi5sDDNmWuo9tas5Nxv9RMzgiYEwX/Tvkm8asl5CbvhViO 7aZH4U6H3cXNJdpjySOuIRAKSmiGT/X4tfQk5CQrGBKDKDUkfyjuCgR5r2cHOAnq 8s4GvGjggpqvMM33qv+HcDoRilpRMNYj/o4vUQOUXRUy4Z540IDWGpdBa7Zjuggx NXcYDxNXpymow1WFODyVzHNz4q6cGcXiHzCB6NDWX3nuq88ih7uQUPwfroY5zTC7 mNHuS5pdl03Mw1Nw50ibhcMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHRpZhfps bqImVhcGsJ0WJYMRrfgwHwYDVR0jBBgwFoAUA01GK1+vanw40CAcBdHfwtFikHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERkY4L0QxMDgyMUQ2OTIw OTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53NDBDQWNCZEhmd3RGaWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTAxR0sxLXZhbnc0MENBY0JkSGZ3dEZpa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE RkY4L0QxMDgyMUQ2OTIwOTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53 NDBDQWNCZEhmd3RGaWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHNgTjhP0CuRfMqy+99kuYuyah9qe0aU716xqCMlHmDzXOoTGy2U7zI zi7QAMxl6T74xZKSkf6npjEKF1wnOPxD/7gdkqgV6B/6P9QVG1jr5xgDfRyWhr4F IongqHoDWCOhVLO/kJfdIRvQpeTXshcCvh89YnTY94huImsaT7THwhZdyjdqG6rJ KPfmCnByNvSeF4r4D5Z35oaBIGP8ieyMQW7oHAwyUFZsJlyVLfOds9iB5xAXd2Un O5WMhAWTazyswUY5LDUsTF4TFO6B8vbeD5ZgExDOScqDtn0sVxYGlwQGHV9W9qNe 4k9qlxEnyIdMWO2Tdt48NES2N5BXcP4= -----END CERTIFICATE-----Generated at Thu Sep 18 20:52:31 2025 by rpki-client