$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: GNLEWfoiXxNAxGcGv5aMIJMvvrHaB6od7EDbocKsEYE= Subject key identifier: DE:A8:49:2F:17:FD:34:62:A8:86:0A:CF:80:D9:B3:DA:52:C8:02:D3 Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 01C7 Signing time: Sun 19 Oct 2025 05:25:18 +0000 Manifest this update: Sun 19 Oct 2025 05:25:17 +0000 Manifest next update: Sun 26 Oct 2025 05:25:17 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: ZLWab7vg9q1Geyku8lADPQRlHAe0OGbRvrpokUup8dM=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: eheiIoP+DIGo6TDFauXxAmF27naEz5wcAihLZFXfuog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Oct 19 05:25:17 2025 GMT Not After : Oct 26 05:25:17 2025 GMT Subject: CN=68f4763d-79ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:92:3e:25:cf:b9:2e:d5:42:f0:fa:e5:85: 20:07:d7:36:9d:c5:95:ff:21:78:04:e3:69:fe:f2: 42:9d:9e:4a:6b:79:cb:3b:75:c6:09:46:6a:51:20: 22:4e:ec:58:9f:00:59:bb:74:bc:c6:57:b6:88:e3: 6e:95:07:96:cd:b3:b1:24:0c:21:1b:49:51:14:8b: 64:23:43:1b:87:75:0c:3d:07:94:d5:eb:99:93:89: 00:24:37:94:79:26:a6:05:96:72:2d:1b:0e:52:70: c8:3f:da:bb:bb:96:b2:1e:09:20:aa:63:31:76:85: c3:08:6e:f5:2a:0f:c8:51:23:a4:0a:28:f7:05:df: 25:57:80:0e:7e:b7:53:d3:62:c9:e8:05:55:82:83: 39:c5:f6:9c:c1:5f:65:38:80:8d:a6:f8:dd:7f:d7: a7:1f:99:f1:35:b1:60:c4:c9:95:dd:b5:dd:b2:0c: 36:64:68:4a:ca:76:5d:fd:8e:f5:69:67:b3:d0:f4: 5d:39:d1:83:2b:00:8d:39:19:5c:42:c1:5b:ee:6f: 88:9a:8e:80:bc:54:c0:50:ec:88:83:7d:a7:46:7f: 71:a6:37:da:bf:f1:41:7c:16:e6:7e:d0:08:4f:ad: fb:b7:ad:f8:23:1d:ad:c3:a9:0d:58:19:74:25:55: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A8:49:2F:17:FD:34:62:A8:86:0A:CF:80:D9:B3:DA:52:C8:02:D3 X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:11:86:8e:e9:bb:fd:f7:cf:8f:79:d3:5b:0e:70:d1:d1:6b: 9b:58:58:92:89:1d:e4:3a:b1:64:16:7d:a8:f4:f4:c4:a8:d5: 44:9f:13:12:da:61:61:3f:47:58:e5:9d:0f:28:30:47:7e:dc: 39:da:ed:48:b3:ba:38:e8:27:08:8f:4e:41:3f:96:db:f3:e0: 01:35:b5:4f:67:40:b4:13:9a:30:fd:90:c0:b0:4e:d4:ef:b7: 64:5a:f1:68:60:ef:19:1d:61:4d:20:18:73:b0:8c:1f:0e:ee: 32:47:9f:c0:20:39:08:8f:dc:ac:96:f0:c1:7e:52:e5:2b:db: c3:db:d4:1a:0c:cd:b8:ad:c4:55:2e:ea:38:72:61:29:55:dc: 22:64:1b:eb:63:00:95:58:77:10:b4:b1:59:3a:8b:28:cf:51: 1b:c8:60:d7:b1:d7:35:30:a7:29:ca:14:f5:b0:f6:f2:1a:3f: f4:34:ef:20:89:03:05:46:34:6d:b9:0f:1a:53:b3:b6:a2:bc: a6:81:0a:cc:98:40:d3:f8:52:00:2e:ee:27:6c:f7:d2:10:de: dd:19:19:77:89:4b:13:15:a8:4a:d3:27:ef:68:b9:91:05:9c: cd:41:a7:73:8f:fe:a0:24:2b:71:96:a4:f8:9a:d9:4a:79:80: 83:3b:5f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUxMDE5MDUyNTE3WhcNMjUxMDI2MDUyNTE3WjAYMRYwFAYD VQQDEw02OGY0NzYzZC03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sySPiXPuS7VQvD65YUgB9c2ncWV/yF4BONp/vJCnZ5Ka3nLO3XGCUZqUSAi TuxYnwBZu3S8xle2iONulQeWzbOxJAwhG0lRFItkI0Mbh3UMPQeU1euZk4kAJDeU eSamBZZyLRsOUnDIP9q7u5ayHgkgqmMxdoXDCG71Kg/IUSOkCij3Bd8lV4AOfrdT 02LJ6AVVgoM5xfacwV9lOICNpvjdf9enH5nxNbFgxMmV3bXdsgw2ZGhKynZd/Y71 aWez0PRdOdGDKwCNORlcQsFb7m+Imo6AvFTAUOyIg32nRn9xpjfav/FBfBbmftAI T637t634Ix2tw6kNWBl0JVW/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6oSS8X /TRiqIYKz4DZs9pSyALTMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKEYaO6bv998+PedNbDnDR0WubWFiSiR3kOrFkFn2o9PTEqNVEnxMS 2mFhP0dY5Z0PKDBHftw52u1Is7o46CcIj05BP5bb8+ABNbVPZ0C0E5ow/ZDAsE7U 77dkWvFoYO8ZHWFNIBhzsIwfDu4yR5/AIDkIj9yslvDBflLlK9vD29QaDM24rcRV Luo4cmEpVdwiZBvrYwCVWHcQtLFZOosoz1EbyGDXsdc1MKcpyhT1sPbyGj/0NO8g iQMFRjRtuQ8aU7O2orymgQrMmEDT+FIALu4nbPfSEN7dGRl3iUsTFahK0yfvaLmR BZzNQadzj/6gJCtxlqT4mtlKeYCDO19k -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:51 2025 by rpki-client