$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: PzpuyBzgbuq341auqlVDQM7NORxLgh5REAmZozX+j4c= Subject key identifier: D3:B7:3E:1C:D7:25:E4:90:D0:AC:7F:B0:FD:4C:6F:D2:34:5E:2E:27 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 0174 Signing time: Sun 11 May 2025 02:43:47 +0000 Manifest this update: Sun 11 May 2025 02:43:47 +0000 Manifest next update: Sun 18 May 2025 02:43:47 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: oiNVuFQrdgcvIzQw3WghsN6H6rNqZgTEokk9SI6zuB8=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: Iy42QwXSYupuqL3QvzsRCg121JGBmvoKUxVedTulj7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: May 11 02:43:47 2025 GMT Not After : May 18 02:43:47 2025 GMT Subject: CN=68200ee3-920b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:82:3d:5b:2e:a2:8f:c2:15:32:c9:ff:e1: e8:f7:5d:74:0f:e2:b2:42:38:ee:54:a3:57:5f:1e: df:fb:95:bb:b8:1e:73:99:d0:9b:95:01:b2:16:ec: 99:37:33:59:72:d5:8b:4e:68:41:5a:df:72:d2:5b: 4d:b0:b7:26:76:44:29:d0:56:13:2a:70:6a:db:87: 4b:a7:14:76:96:e2:15:bc:5e:a6:1a:f6:1f:ea:f5: e9:d9:30:41:46:15:dc:91:0c:da:b3:a9:90:40:1d: a9:56:ea:31:e5:94:b2:6b:ee:ca:c2:67:77:89:18: 43:50:1d:b8:0d:08:74:d5:b2:8f:47:2d:e3:4d:92: a5:e8:a0:1c:6e:29:22:13:69:24:3f:88:40:1a:f5: 00:22:38:8e:bc:f6:20:be:90:b6:2f:be:d2:43:82: 58:92:d8:25:73:f4:c6:b7:d7:9c:71:b3:c9:f4:58: 72:30:7d:be:e7:02:35:bb:ab:a5:97:01:df:e8:14: 5c:ee:99:15:a7:3d:ce:1a:72:b7:43:cc:6a:ad:8b: 07:48:d7:60:b5:06:1f:79:97:1e:39:51:02:32:4f: 8e:48:69:aa:1f:63:26:43:88:8d:63:58:3c:1a:32: 17:15:88:c3:1c:85:10:96:50:0a:ba:f9:2a:5d:f8: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:3E:1C:D7:25:E4:90:D0:AC:7F:B0:FD:4C:6F:D2:34:5E:2E:27 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:78:40:71:d4:71:0e:4c:c2:60:42:a9:65:a5:51:c0:16:41: 4d:c6:1a:d2:0a:7a:58:6b:54:d8:c7:1b:ef:6f:b8:cf:29:f6: c1:7f:9e:3c:d4:6f:c2:95:4f:a7:79:5b:f8:76:8e:08:34:d4: 9a:8b:59:a9:de:85:89:d6:3a:0f:c3:b0:08:4c:1c:66:dd:7c: 54:86:85:06:f0:c7:37:08:af:14:1b:7f:42:68:76:9e:e5:63: fb:1a:b6:b3:0c:bb:a3:9d:7c:38:ba:4a:81:5c:a5:11:74:61: 31:b3:c4:05:b1:d2:b4:5a:c4:22:1a:15:3b:0c:e4:e7:23:75: e3:20:09:04:e2:d9:49:dd:a6:03:ce:36:8a:55:fd:cb:a2:bc: 11:81:b0:3d:c8:47:15:e9:34:a7:4e:21:98:29:51:8d:1b:7c: b3:16:af:59:f3:87:49:a6:5e:2c:2d:33:43:f4:33:8a:bb:04: 13:10:45:ba:46:19:9a:a9:32:97:26:46:1c:31:d3:e4:7e:c8: 0f:c0:1a:28:86:8a:13:a5:5e:8a:1f:db:ad:86:29:7a:8a:03: ee:75:7b:ab:9f:40:eb:96:28:6b:53:69:66:8e:b7:2c:00:1f: ee:17:4f:81:53:be:5b:d4:20:8a:24:bf:1d:b3:d3:d1:cf:8b: 24:cb:b0:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwNTExMDI0MzQ3WhcNMjUwNTE4MDI0MzQ3WjAYMRYwFAYD VQQDEw02ODIwMGVlMy05MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3SCPVsuoo/CFTLJ/+Ho9110D+KyQjjuVKNXXx7f+5W7uB5zmdCblQGyFuyZ NzNZctWLTmhBWt9y0ltNsLcmdkQp0FYTKnBq24dLpxR2luIVvF6mGvYf6vXp2TBB RhXckQzas6mQQB2pVuox5ZSya+7Kwmd3iRhDUB24DQh01bKPRy3jTZKl6KAcbiki E2kkP4hAGvUAIjiOvPYgvpC2L77SQ4JYktglc/TGt9eccbPJ9FhyMH2+5wI1u6ul lwHf6BRc7pkVpz3OGnK3Q8xqrYsHSNdgtQYfeZceOVECMk+OSGmqH2MmQ4iNY1g8 GjIXFYjDHIUQllAKuvkqXfhhKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO3PhzX JeSQ0Kx/sP1Mb9I0Xi4nMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaeEBx1HEOTMJgQqllpVHAFkFNxhrSCnpYa1TYxxvvb7jPKfbBf548 1G/ClU+neVv4do4INNSai1mp3oWJ1joPw7AITBxm3XxUhoUG8Mc3CK8UG39CaHae 5WP7GrazDLujnXw4ukqBXKURdGExs8QFsdK0WsQiGhU7DOTnI3XjIAkE4tlJ3aYD zjaKVf3LorwRgbA9yEcV6TSnTiGYKVGNG3yzFq9Z84dJpl4sLTND9DOKuwQTEEW6 RhmaqTKXJkYcMdPkfsgPwBoohooTpV6KH9uthil6igPudXurn0DrlihrU2lmjrcs AB/uF0+BU75b1CCKJL8ds9PRz4sky7A2 -----END CERTIFICATE-----Generated at Sun May 11 18:25:40 2025 by rpki-client