$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft File: A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json) Hash identifier: bC51OSqT9jJPj6UptCfY6oI70M7SUhOEbO1DQqooyxM= Subject key identifier: 5A:47:A1:7F:89:37:60:34:A0:4E:84:EC:FC:13:17:D9:8C:9B:68:E1 Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 Certificate issuer: /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft Manifest number: 19 Signing time: Mon 03 Nov 2025 07:49:58 +0000 Manifest this update: Mon 03 Nov 2025 07:49:57 +0000 Manifest next update: Mon 10 Nov 2025 07:49:57 +0000 Files and hashes: 1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: w19g5cnszkrHjWCclTSVCEJ4B5w1j8VNdXdYPXzlSok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075 Validity Not Before: Nov 3 07:49:57 2025 GMT Not After : Nov 10 07:49:57 2025 GMT Subject: CN=69085ea6-844b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:45:e5:bf:ac:dc:22:3f:ab:d4:b3:63:fc: 47:a9:f3:41:36:5c:79:2e:d0:ec:fe:78:5e:b6:f9: 1b:14:87:5e:dc:11:a8:ec:8e:40:2a:f1:57:53:4a: 9f:c1:e7:0a:aa:09:a8:76:26:20:64:ef:1e:c7:a7: 51:6e:e3:ac:5e:39:50:82:b1:22:a5:db:f3:3b:73: a7:9a:a3:f9:2f:10:c8:f1:ca:57:f6:0f:31:aa:e3: 7b:6d:46:34:72:98:70:22:dd:da:c9:a1:5c:f3:72: fe:88:0a:ab:66:fd:cb:75:2d:45:aa:d9:d9:e2:a3: 89:b1:f1:08:8a:16:a8:16:08:0a:68:68:b4:cc:ca: e0:5f:a5:c5:c2:09:a8:6a:1b:41:6a:53:94:0e:42: 71:d2:1b:e4:1d:04:f4:be:50:a9:7c:5d:3e:6b:61: 1e:fb:d4:1f:d9:9b:02:ee:77:eb:39:5c:1f:16:cc: c4:75:a7:70:39:ec:de:78:1f:07:14:87:74:76:a1: 85:5a:c6:1c:5b:19:c5:c7:d0:08:87:f4:83:6c:b0: 17:29:94:54:8a:e4:46:8a:a7:9e:b8:75:ed:dc:22: 83:40:b5:b2:fc:cd:09:4a:88:14:18:2b:b0:d7:b9: 96:dc:fc:14:d0:50:c3:27:a5:d3:40:fe:63:de:64: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:47:A1:7F:89:37:60:34:A0:4E:84:EC:FC:13:17:D9:8C:9B:68:E1 X509v3 Authority Key Identifier: keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:e2:d7:85:e0:f3:f3:e0:b8:20:24:ae:5c:6b:b3:ee:1a: b1:cf:6b:11:b9:33:56:11:60:20:c0:48:c2:e4:b6:83:ee:72: ff:e7:85:64:9c:6d:c9:16:6c:18:a4:68:7a:fb:54:82:f2:bd: b9:a6:3a:67:38:81:bb:c0:ec:69:be:10:0f:df:0c:b1:32:67: 8d:75:8f:df:0b:c2:38:a8:65:9c:af:b6:41:16:43:93:ad:0e: 59:08:91:2c:03:fc:47:d9:8e:96:6f:fa:e0:0b:d6:5c:78:0c: 88:d7:a9:a0:8a:26:85:a7:e6:3f:97:b4:03:92:a7:b0:aa:77: 2b:fb:fc:8e:76:c5:c3:7d:5e:5a:bb:86:f6:2b:55:fe:28:84: 34:ea:db:5d:8c:11:14:25:8b:46:f2:a9:0e:c3:22:4c:72:77: 29:33:27:eb:dc:d3:a7:a8:a6:91:f8:69:bd:02:5f:fb:c2:45: 1e:bc:2c:95:37:e0:2f:27:c5:52:06:72:d5:44:75:03:03:84: 98:46:ca:3a:13:3d:31:20:0d:50:e8:28:80:00:33:45:2e:ab: ec:3c:a2:8e:17:ce:1c:a6:9b:d2:14:76:f7:32:ed:9b:c9:d3: 63:f2:c7:67:63:9e:81:40:12:14:31:79:31:65:93:b9:84:06: 1c:2b:af:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REZGODExMC8GA1UEBRMoMDM0RDQ2MkI1RkFGNkE3QzM4RDAyMDFDMDVEMURGQzJE MTYyOTA3NTAeFw0yNTExMDMwNzQ5NTdaFw0yNTExMTAwNzQ5NTdaMBgxFjAUBgNV BAMTDTY5MDg1ZWE2LTg0NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5SkXlv6zcIj+r1LNj/Eep80E2XHku0Oz+eF62+RsUh17cEajsjkAq8VdTSp/B 5wqqCah2JiBk7x7Hp1Fu46xeOVCCsSKl2/M7c6eao/kvEMjxylf2DzGq43ttRjRy mHAi3drJoVzzcv6ICqtm/ct1LUWq2dnio4mx8QiKFqgWCApoaLTMyuBfpcXCCahq G0FqU5QOQnHSG+QdBPS+UKl8XT5rYR771B/ZmwLud+s5XB8WzMR1p3A57N54HwcU h3R2oYVaxhxbGcXH0AiH9INssBcplFSK5EaKp564de3cIoNAtbL8zQlKiBQYK7DX uZbc/BTQUMMnpdNA/mPeZPnhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWkehf4k3 YDSgToTs/BMX2YybaOEwHwYDVR0jBBgwFoAUA01GK1+vanw40CAcBdHfwtFikHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERkY4L0QxMDgyMUQ2OTIw OTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53NDBDQWNCZEhmd3RGaWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTAxR0sxLXZhbnc0MENBY0JkSGZ3dEZpa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE RkY4L0QxMDgyMUQ2OTIwOTExRjA4QTY1ODA1NkM0RjlBRTAyL0EwMUdLMS12YW53 NDBDQWNCZEhmd3RGaWtIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4M4teF4PPz4LggJK5ca7PuGrHPaxG5M1YRYCDASMLktoPucv/nhWSc bckWbBikaHr7VILyvbmmOmc4gbvA7Gm+EA/fDLEyZ411j98LwjioZZyvtkEWQ5Ot DlkIkSwD/EfZjpZv+uAL1lx4DIjXqaCKJoWn5j+XtAOSp7Cqdyv7/I52xcN9Xlq7 hvYrVf4ohDTq212MERQli0byqQ7DIkxydykzJ+vc06eoppH4ab0CX/vCRR68LJU3 4C8nxVIGctVEdQMDhJhGyjoTPTEgDVDoKIAAM0Uuq+w8oo4Xzhymm9IUdvcy7ZvJ 02Pyx2djnoFAEhQxeTFlk7mEBhwrr6c= -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:31 2025 by rpki-client