$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: ALUQ+hVVYkM4od0SvAKhAwO7rhj68Mq6+Ws478dTFq4= Subject key identifier: 1E:CB:7C:F4:2E:E7:DE:A9:9B:BF:33:C2:F6:93:59:B6:97:B6:77:F7 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 01B1 Signing time: Fri 05 Sep 2025 03:29:31 +0000 Manifest this update: Fri 05 Sep 2025 03:29:31 +0000 Manifest next update: Fri 12 Sep 2025 03:29:31 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: cnarZi2fE6t/JiyiZ/pHWEH6RZw8YT1wn+AORhWUPK4=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: eheiIoP+DIGo6TDFauXxAmF27naEz5wcAihLZFXfuog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Sep 5 03:29:31 2025 GMT Not After : Sep 12 03:29:31 2025 GMT Subject: CN=68ba591b-fcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:88:aa:32:c9:15:02:f1:b8:91:2c:79:27: be:23:b3:ac:d7:45:05:29:01:12:2d:a5:82:bf:40: d0:a3:76:37:7b:a1:45:52:cd:16:65:10:b0:91:36: e3:9e:4f:e1:e8:ae:e2:31:b8:7e:e2:9d:de:25:4a: e9:0c:cf:1c:2d:89:da:58:9e:51:8c:d2:50:ab:b9: f8:c1:2d:3f:ce:fb:04:b9:48:3e:6a:37:7c:5e:d0: e6:39:cd:0a:ae:fe:4c:06:5d:b0:00:07:9e:bf:40: 59:0d:e6:89:59:3d:5e:dd:e7:0f:c3:86:7a:08:0e: 20:f1:81:d6:67:bc:60:bd:8d:04:45:37:f1:a1:e2: 1b:fd:10:68:6c:4e:28:8d:a5:6c:66:08:b2:c5:ea: 8d:1c:fa:5b:09:7f:4b:6b:0f:bb:67:f6:71:6e:60: 58:a0:fc:fa:dd:4e:b7:cb:56:88:07:22:3e:e3:f4: f2:fb:d4:a3:a1:13:7e:e3:f2:39:7d:38:31:d1:ac: 5a:a7:1e:3f:eb:5a:62:a0:d9:c8:8f:12:3f:62:f2: cf:89:5d:ef:68:9d:c4:8a:0b:dd:da:46:59:43:f6: 1c:be:b3:ff:a4:e8:0b:a5:66:f1:d5:20:a3:19:3d: b3:d5:d8:c2:36:c6:3a:21:62:7a:f8:74:ef:8b:06: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CB:7C:F4:2E:E7:DE:A9:9B:BF:33:C2:F6:93:59:B6:97:B6:77:F7 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:02:0f:58:e5:48:72:60:b8:8c:1b:9c:7f:cf:48:5c:9c:ac: db:32:1b:80:b4:eb:89:ee:e5:43:47:b7:9e:ef:fd:ef:64:77: d2:8c:78:a8:80:35:97:e6:68:59:d3:50:c7:50:ab:75:e7:f0: da:09:d2:86:af:e8:a6:e0:3a:be:a9:8b:72:92:7f:eb:e1:b7: 70:0b:c5:48:06:ee:06:45:51:8d:0b:8b:81:75:46:aa:f7:e5: 28:47:c4:89:e5:b9:61:ae:2d:3a:4d:9a:70:cd:b9:24:1e:af: 34:89:44:fa:d4:a0:ee:c3:59:d0:19:ea:ff:a5:f4:40:be:5a: 9e:b5:2b:cd:22:ef:79:cd:d5:3d:ff:67:24:2e:ff:89:11:7b: 72:e2:f4:4f:93:26:ba:90:9a:13:ea:df:03:7d:61:33:7b:46: 29:c6:52:64:4b:a6:a0:63:ec:49:2d:e2:00:61:a6:aa:b7:41: 31:aa:ba:51:28:8f:3a:90:9f:e5:12:5a:6c:cc:2d:d8:58:7e: 2b:af:40:0f:a2:fc:a1:06:e6:20:cc:35:8b:71:66:2e:d1:88: 37:03:61:2c:ea:11:d4:fe:c1:c7:6f:ec:d4:e2:e9:10:2b:e8: 60:e9:6b:51:63:9b:af:85:42:57:1c:f1:3b:03:b6:b7:78:dd: 43:b0:da:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwOTA1MDMyOTMxWhcNMjUwOTEyMDMyOTMxWjAYMRYwFAYD VQQDEw02OGJhNTkxYi1mY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeaIqjLJFQLxuJEseSe+I7Os10UFKQESLaWCv0DQo3Y3e6FFUs0WZRCwkTbj nk/h6K7iMbh+4p3eJUrpDM8cLYnaWJ5RjNJQq7n4wS0/zvsEuUg+ajd8XtDmOc0K rv5MBl2wAAeev0BZDeaJWT1e3ecPw4Z6CA4g8YHWZ7xgvY0ERTfxoeIb/RBobE4o jaVsZgiyxeqNHPpbCX9Law+7Z/ZxbmBYoPz63U63y1aIByI+4/Ty+9SjoRN+4/I5 fTgx0axapx4/61pioNnIjxI/YvLPiV3vaJ3Eigvd2kZZQ/YcvrP/pOgLpWbx1SCj GT2z1djCNsY6IWJ6+HTviwZRSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7LfPQu 596pm78zwvaTWbaXtnf3MB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAg9Y5UhyYLiMG5x/z0hcnKzbMhuAtOuJ7uVDR7ee7/3vZHfSjHio gDWX5mhZ01DHUKt15/DaCdKGr+im4Dq+qYtykn/r4bdwC8VIBu4GRVGNC4uBdUaq 9+UoR8SJ5blhri06TZpwzbkkHq80iUT61KDuw1nQGer/pfRAvlqetSvNIu95zdU9 /2ckLv+JEXty4vRPkya6kJoT6t8DfWEze0YpxlJkS6agY+xJLeIAYaaqt0ExqrpR KI86kJ/lElpszC3YWH4rr0APovyhBuYgzDWLcWYu0Yg3A2Es6hHU/sHHb+zU4ukQ K+hg6WtRY5uvhUJXHPE7A7a3eN1DsNoP -----END CERTIFICATE-----Generated at Fri Sep 5 11:29:32 2025 by rpki-client