$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: 5Z8VgdCS03NR/IUXu2hSDh7PCIFV2fHQ10EwsaiW+VE= Subject key identifier: 8B:87:6A:12:49:97:2F:6B:47:99:49:1F:09:A7:F4:99:0B:F2:91:DE Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:23:28 +0000 Manifest this update: Sat 31 May 2025 03:23:28 +0000 Manifest next update: Sat 07 Jun 2025 03:23:28 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: t5rIjqbe0Kgj8yunZwt4mqrw36ZhwI0FhnXN5WayUnQ=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: Iy42QwXSYupuqL3QvzsRCg121JGBmvoKUxVedTulj7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: May 31 03:23:28 2025 GMT Not After : Jun 7 03:23:28 2025 GMT Subject: CN=683a7630-7a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:07:be:58:b7:79:ec:6a:45:fb:6a:4d:08: 9b:63:af:5c:29:1b:e2:46:6d:89:02:66:8d:60:56: 99:3d:b0:7d:39:f3:81:4e:cd:7e:f5:e4:ae:b6:18: 67:f7:a2:0d:42:54:72:22:a8:7e:d0:8b:a9:ca:c5: 48:1d:8d:c4:43:6c:e9:dc:fc:78:80:9c:ac:07:0f: 04:01:7f:ad:32:62:cf:d7:6a:44:a0:6d:c7:5d:bc: d5:52:e1:33:3f:bf:1c:f4:bc:a0:3a:3b:72:37:b6: 22:e9:25:75:b9:8b:be:58:67:32:10:23:d0:87:66: d0:6c:20:a4:8b:c7:0d:5b:ab:9e:61:ac:16:78:06: 07:2e:77:ae:cb:eb:b3:d5:11:4f:48:f3:5b:fc:da: 2b:df:ed:dd:c7:3f:a6:02:aa:ca:7e:56:ba:fa:2f: 55:6b:5b:ce:8e:8c:b9:36:13:5c:07:0c:b1:13:4a: fe:a5:57:c4:12:07:68:a8:fc:0a:97:b7:0e:07:1e: 7d:ec:dd:b1:25:f9:15:14:aa:e3:e2:46:31:95:fe: 21:fb:b8:92:22:32:65:19:6a:0f:21:d5:c9:96:d5: 79:71:11:18:0a:a8:70:a8:5a:0d:4c:71:7b:44:6f: d9:13:6d:d6:be:28:8f:68:03:aa:4e:4b:a1:38:b0: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:87:6A:12:49:97:2F:6B:47:99:49:1F:09:A7:F4:99:0B:F2:91:DE X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:34:7c:ac:14:d8:78:ee:b3:30:e3:8d:3c:14:d8:e6:17:6a: 40:fb:4a:09:e0:ee:8c:c8:b0:33:1e:f8:e6:48:27:87:31:3c: 4e:09:5e:17:8f:cd:72:68:6c:d8:0b:ef:ed:f0:ee:69:c9:f8: dc:88:6e:32:f2:80:57:72:ae:50:b3:89:53:f8:57:e3:02:6d: f9:a1:59:02:40:62:1b:d8:9a:b6:08:45:0d:28:46:57:40:df: 7a:89:2a:c9:9b:1c:c5:9c:77:c3:32:f3:cb:c6:18:9b:89:df: 4f:57:74:fb:18:57:f0:77:0c:d3:34:42:e0:93:a1:fd:8e:03: e0:a9:dd:92:2a:07:a8:54:80:81:73:df:30:a9:d8:98:03:9c: c9:b7:c2:cd:d4:d6:c7:6b:e4:6f:82:60:77:4f:76:4d:ea:e7: e6:a2:cf:e6:bf:eb:35:0e:c8:e7:f0:22:e6:72:73:0e:58:92: e4:83:4a:1e:3e:30:fe:b5:a9:f3:cb:5d:2a:5a:7c:b5:bc:6a: d9:39:02:2c:f5:12:f6:d7:a5:a3:b0:61:24:ad:89:aa:39:b4: a7:2d:43:a5:0b:a7:aa:6e:19:09:20:00:b4:59:db:69:f0:f7: 41:86:fa:62:85:56:c2:56:fb:44:45:c5:3f:73:32:d9:a0:4e: f1:3f:4c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwNTMxMDMyMzI4WhcNMjUwNjA3MDMyMzI4WjAYMRYwFAYD VQQDEw02ODNhNzYzMC03YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCwHvli3eexqRftqTQibY69cKRviRm2JAmaNYFaZPbB9OfOBTs1+9eSuthhn 96INQlRyIqh+0IupysVIHY3EQ2zp3Px4gJysBw8EAX+tMmLP12pEoG3HXbzVUuEz P78c9LygOjtyN7Yi6SV1uYu+WGcyECPQh2bQbCCki8cNW6ueYawWeAYHLneuy+uz 1RFPSPNb/Nor3+3dxz+mAqrKfla6+i9Va1vOjoy5NhNcBwyxE0r+pVfEEgdoqPwK l7cOBx597N2xJfkVFKrj4kYxlf4h+7iSIjJlGWoPIdXJltV5cREYCqhwqFoNTHF7 RG/ZE23WviiPaAOqTkuhOLDeGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuHahJJ ly9rR5lJHwmn9JkL8pHeMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7NHysFNh47rMw4408FNjmF2pA+0oJ4O6MyLAzHvjmSCeHMTxOCV4X j81yaGzYC+/t8O5pyfjciG4y8oBXcq5Qs4lT+FfjAm35oVkCQGIb2Jq2CEUNKEZX QN96iSrJmxzFnHfDMvPLxhibid9PV3T7GFfwdwzTNELgk6H9jgPgqd2SKgeoVICB c98wqdiYA5zJt8LN1NbHa+RvgmB3T3ZN6ufmos/mv+s1Dsjn8CLmcnMOWJLkg0oe PjD+tanzy10qWny1vGrZOQIs9RL216WjsGEkrYmqObSnLUOlC6eqbhkJIAC0Wdtp 8PdBhvpihVbCVvtERcU/czLZoE7xP0wh -----END CERTIFICATE-----Generated at Sat May 31 16:43:55 2025 by rpki-client