$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: mga9cERnBN7/wwbA0E27QXfFRpoXHpQaIo2vq42sdn8= Subject key identifier: 07:F9:F0:EA:4D:84:A5:B1:3F:B9:31:3D:88:00:FC:B3:09:57:46:56 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 018D Signing time: Tue 01 Jul 2025 03:56:55 +0000 Manifest this update: Tue 01 Jul 2025 03:56:55 +0000 Manifest next update: Tue 08 Jul 2025 03:56:55 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: 6TgOPpaR5DNduEmMzBm1ZGAVUl8xgpoTqYPjRMbpjz8=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: Iy42QwXSYupuqL3QvzsRCg121JGBmvoKUxVedTulj7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Jul 1 03:56:55 2025 GMT Not After : Jul 8 03:56:55 2025 GMT Subject: CN=68635c87-be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:9f:a2:28:4a:95:f4:40:bc:f0:ca:51:70: c0:b2:89:14:dc:08:68:4a:55:5e:1a:85:8c:91:5d: 08:ba:f9:0e:7b:50:26:be:60:1b:c8:6e:c3:4c:a6: cb:60:15:7a:c1:c8:0e:79:d4:19:fa:eb:78:60:ec: f4:ae:8e:50:b8:6c:fb:30:a7:99:93:68:0c:80:1b: 44:f1:2d:5e:1a:2f:d9:5a:24:0a:58:00:d5:8a:2d: ba:71:15:9d:98:37:de:30:49:85:4e:77:ea:4c:82: ac:40:25:c6:14:09:a7:79:ce:43:4f:66:70:5e:22: 77:85:a3:4c:77:1b:e5:f5:4e:10:69:cc:34:e7:d8: 62:6e:64:99:5d:1d:6f:6c:25:1f:00:c3:a4:32:4d: 3b:ea:34:a0:d7:a6:60:42:70:2e:2d:96:a5:10:4e: a0:d1:a1:41:66:32:68:9f:c7:d1:0a:67:fc:3f:f6: 75:ef:14:fc:34:21:44:99:df:7b:a1:ce:be:ba:80: 96:9a:aa:18:8a:29:f1:57:5d:62:d4:2c:05:c2:82: b8:56:52:8f:db:fd:4f:17:e6:77:8a:5a:76:06:1d: 5f:21:21:f2:55:d4:af:73:a1:9e:7d:f0:20:63:50: 29:ba:31:9b:56:e8:fd:fd:02:fe:56:86:df:69:59: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F9:F0:EA:4D:84:A5:B1:3F:B9:31:3D:88:00:FC:B3:09:57:46:56 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:38:11:60:24:95:2a:e4:60:54:6f:ba:79:e5:7e:4a:29:16: 88:f0:cd:68:6f:69:07:3b:6c:71:1b:58:c2:2f:9d:0c:70:73: 3d:38:6e:36:89:bc:2d:7a:4d:34:05:10:ee:c3:1c:4d:29:47: b7:69:89:1e:47:1d:e6:a8:5a:f2:8d:de:4d:ff:dd:1f:d8:7c: 99:69:be:fc:fd:45:dd:ad:76:5e:4c:27:4a:46:4e:d6:01:88: e0:46:3f:33:67:21:ca:d4:da:de:a4:ab:14:ec:89:cd:92:d1: f0:17:93:37:32:fe:4f:38:0f:3b:1f:98:24:6f:60:ca:3f:5c: 65:d1:5d:73:95:a7:13:ad:ed:e2:1f:68:53:10:71:fb:00:ab: a4:c2:15:f3:f5:3a:16:c5:a1:81:76:2f:f3:9c:d0:8f:cb:26: 78:65:d6:05:96:48:d3:51:be:00:79:1b:ff:e3:80:2b:97:a3: 09:a4:57:dc:28:e9:b3:7a:0f:6d:a3:e1:a5:78:16:e1:e1:05: 5d:e9:86:79:36:f9:ce:2a:44:0c:d5:97:f4:54:aa:7c:72:cd: c0:25:96:3d:bf:4c:12:d6:ad:19:96:8a:37:66:ee:c1:39:8d: 4f:4e:9f:9f:56:9b:21:7a:2b:cf:71:b8:09:f8:a7:86:1d:d4: da:dd:63:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwNzAxMDM1NjU1WhcNMjUwNzA4MDM1NjU1WjAYMRYwFAYD VQQDEw02ODYzNWM4Ny1iZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m+foihKlfRAvPDKUXDAsokU3AhoSlVeGoWMkV0IuvkOe1AmvmAbyG7DTKbL YBV6wcgOedQZ+ut4YOz0ro5QuGz7MKeZk2gMgBtE8S1eGi/ZWiQKWADVii26cRWd mDfeMEmFTnfqTIKsQCXGFAmnec5DT2ZwXiJ3haNMdxvl9U4Qacw059hibmSZXR1v bCUfAMOkMk076jSg16ZgQnAuLZalEE6g0aFBZjJon8fRCmf8P/Z17xT8NCFEmd97 oc6+uoCWmqoYiinxV11i1CwFwoK4VlKP2/1PF+Z3ilp2Bh1fISHyVdSvc6GeffAg Y1ApujGbVuj9/QL+VobfaVl3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAf58OpN hKWxP7kxPYgA/LMJV0ZWMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnOBFgJJUq5GBUb7p55X5KKRaI8M1ob2kHO2xxG1jCL50McHM9OG42 ibwtek00BRDuwxxNKUe3aYkeRx3mqFryjd5N/90f2HyZab78/UXdrXZeTCdKRk7W AYjgRj8zZyHK1NrepKsU7InNktHwF5M3Mv5POA87H5gkb2DKP1xl0V1zlacTre3i H2hTEHH7AKukwhXz9ToWxaGBdi/znNCPyyZ4ZdYFlkjTUb4AeRv/44Arl6MJpFfc KOmzeg9to+GleBbh4QVd6YZ5NvnOKkQM1Zf0VKp8cs3AJZY9v0wS1q0Zloo3Zu7B OY1PTp+fVpsheivPcbgJ+KeGHdTa3WO3 -----END CERTIFICATE-----Generated at Tue Jul 1 21:10:34 2025 by rpki-client