$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: fDjct0UhtTlZ3lbtlo48hmU7BQsB1liNDzdHJiMhpnk= Subject key identifier: 18:6F:3D:F1:F3:24:D4:88:1C:1E:9C:92:33:86:9F:C1:5C:A4:9D:94 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 015C Signing time: Sat 29 Mar 2025 03:31:20 +0000 Manifest this update: Sat 29 Mar 2025 03:31:19 +0000 Manifest next update: Sat 05 Apr 2025 03:31:19 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: hsM13zishmWuXgLZzyujvg6EKNKMXb6begBBZ5s0B6g=) 2: 1FE69168F9CB11EDAF704E7FC4F9AE02.roa (hash: ecoU/18dnE70yGBufRntMgWEavYiNwHveeZ+SS7xzWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A Validity Not Before: Mar 29 03:31:19 2025 GMT Not After : Apr 5 03:31:19 2025 GMT Subject: CN=67e76987-1d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:ad:61:5b:7a:b1:38:ed:0d:10:43:cd:8f: 5b:ab:48:f5:65:3f:e0:76:3a:7e:b3:1e:38:63:b0: 71:f9:e1:b7:1c:0d:22:1c:9e:03:eb:bf:2b:a5:18: 11:c6:0e:83:8d:41:33:f8:9a:e4:a7:7a:42:8d:1c: 44:c7:86:e4:69:50:be:f6:b7:d8:aa:29:77:ac:52: e3:67:72:05:7a:4e:79:7b:84:45:93:e6:4c:b9:43: 87:9b:57:68:7b:8c:ab:c4:3b:e7:6f:b4:ff:54:2d: 95:ea:88:0b:6a:8f:af:c5:e1:19:da:2b:7e:38:17: d1:fe:a4:51:99:91:ea:df:b3:25:90:9f:8c:8d:4d: 6e:83:76:38:d0:3d:f8:16:ae:c0:ed:50:8c:60:6f: 84:39:ed:90:53:15:a7:aa:1a:fd:90:b4:3c:a0:d2: 71:62:c7:90:68:77:41:34:73:12:8e:9f:2b:d4:01: 9c:05:08:1d:58:14:19:bb:cd:6f:e9:dd:e6:ff:26: 34:1d:8c:55:b0:56:7a:db:cf:95:9f:7d:67:57:07: b8:dc:f3:94:cb:0b:da:64:10:e7:01:64:bc:b7:e7: 5f:09:f8:b0:90:54:8a:04:b3:d3:32:b4:0b:34:ff: e7:f5:36:4b:e1:f3:0d:7d:41:26:c6:f9:3e:7b:3e: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:3D:F1:F3:24:D4:88:1C:1E:9C:92:33:86:9F:C1:5C:A4:9D:94 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:42:b1:fb:9e:29:6e:dd:98:da:06:4a:07:4f:57:91:6a: 82:7c:e1:bd:6f:28:23:2d:7a:f6:68:9f:0e:98:2d:fe:c0:13: 12:7c:20:13:f2:4b:1d:2d:09:77:80:ee:a2:e0:eb:e3:e2:6e: e8:fb:f7:e4:2f:91:43:b8:3c:83:6f:2d:ea:50:fa:5f:ff:4d: 5f:60:fa:7a:df:17:b2:be:ff:f0:94:44:42:35:36:cd:4f:bd: 9e:b3:f7:1a:8e:47:ea:db:0a:9b:45:60:6c:3d:a8:71:e8:c0: 44:70:54:24:d6:30:75:4e:14:69:5a:8c:7e:16:48:30:b6:b3: 67:19:91:c9:5d:cc:af:9c:f4:a6:7e:6e:30:54:51:be:ae:76: 4a:00:1e:27:9e:53:c2:57:00:4c:7b:6e:49:0e:d0:0c:93:15: e7:b9:1c:61:0f:df:95:e7:06:0a:50:9c:a1:82:9a:b9:ec:ad: 5e:77:ef:84:e0:af:bb:a0:fe:a9:25:a2:ad:2f:b2:b5:2a:46: 16:3b:f9:f9:7e:71:5c:07:a2:0d:04:12:4d:09:dd:1e:37:2a: c5:3b:78:89:58:8d:61:6f:06:42:52:22:1f:38:4d:f9:c6:b2: b1:c6:4e:8b:b6:bd:26:1c:b5:b8:70:5b:8f:d5:d0:29:8e:e7: 6b:6d:20:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwMzI5MDMzMTE5WhcNMjUwNDA1MDMzMTE5WjAYMRYwFAYD VQQDEw02N2U3Njk4Ny0xZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM2tYVt6sTjtDRBDzY9bq0j1ZT/gdjp+sx44Y7Bx+eG3HA0iHJ4D678rpRgR xg6DjUEz+Jrkp3pCjRxEx4bkaVC+9rfYqil3rFLjZ3IFek55e4RFk+ZMuUOHm1do e4yrxDvnb7T/VC2V6ogLao+vxeEZ2it+OBfR/qRRmZHq37MlkJ+MjU1ug3Y40D34 Fq7A7VCMYG+EOe2QUxWnqhr9kLQ8oNJxYseQaHdBNHMSjp8r1AGcBQgdWBQZu81v 6d3m/yY0HYxVsFZ628+Vn31nVwe43POUywvaZBDnAWS8t+dfCfiwkFSKBLPTMrQL NP/n9TZL4fMNfUEmxvk+ez4TIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhvPfHz JNSIHB6ckjOGn8FcpJ2UMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEhkKx+54pbt2Y2gZKB09XkWqCfOG9bygjLXr2aJ8OmC3+wBMSfCAT 8ksdLQl3gO6i4Ovj4m7o+/fkL5FDuDyDby3qUPpf/01fYPp63xeyvv/wlERCNTbN T72es/cajkfq2wqbRWBsPahx6MBEcFQk1jB1ThRpWox+FkgwtrNnGZHJXcyvnPSm fm4wVFG+rnZKAB4nnlPCVwBMe25JDtAMkxXnuRxhD9+V5wYKUJyhgpq57K1ed++E 4K+7oP6pJaKtL7K1KkYWO/n5fnFcB6INBBJNCd0eNyrFO3iJWI1hbwZCUiIfOE35 xrKxxk6Ltr0mHLW4cFuP1dApjudrbSBG -----END CERTIFICATE-----Generated at Fri Apr 4 23:52:43 2025 by rpki-client