$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft File: Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json) Hash identifier: wbdDLCFt+AEgYEIUUeurvr/JjXtHXVb1SGo0Z4TQcGk= Subject key identifier: 15:06:06:20:3F:B6:56:C3:D3:D4:07:08:F8:77:09:D2:94:96:BC:3F Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED Certificate issuer: /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft Manifest number: 01A8 Signing time: Sat 23 Aug 2025 03:21:19 +0000 Manifest this update: Sat 23 Aug 2025 03:21:19 +0000 Manifest next update: Sat 30 Aug 2025 03:21:19 +0000 Files and hashes: 1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: JWQVmxXCFx4MxwEhBc2D4favtq6DzxBlmd+yqtG0CJQ=) 2: C369BA98260D11F082934618C4F9AE02.roa (hash: Iy42QwXSYupuqL3QvzsRCg121JGBmvoKUxVedTulj7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED Validity Not Before: Aug 23 03:21:19 2025 GMT Not After : Aug 30 03:21:19 2025 GMT Subject: CN=68a933af-50c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:69:1f:65:99:e1:c1:0d:a6:5d:9c:d6:b1: 52:ae:c1:26:04:f6:7b:7d:db:0c:19:bf:b0:9f:e4: 4a:b3:cb:e2:37:d4:3f:54:8f:32:45:b3:82:c4:18: 3d:9c:be:fe:fa:d1:ec:f7:38:9d:14:f8:13:0c:61: 19:b0:52:a4:7d:52:63:87:c1:b9:39:df:48:ec:15: ce:e7:e4:38:8b:21:42:28:1a:cc:dc:da:78:ac:89: ce:6f:37:c4:64:07:09:ec:0d:c3:10:0e:5f:28:98: 02:0f:1a:aa:56:62:a1:fb:f7:ee:7c:6a:6f:4f:90: 81:26:d8:d3:c3:5d:bd:e6:4f:07:df:9f:4e:35:16: 2b:a2:40:55:be:18:88:d9:08:ab:58:5d:4b:1b:74: 42:a4:01:1d:e7:12:55:55:f3:3e:43:63:ca:24:a3: d7:76:24:60:fd:64:d4:1d:c8:b4:94:7d:6b:fd:fe: 3b:ab:d4:96:be:43:ac:6f:ee:b0:68:e2:85:a2:ad: b6:c3:42:ae:63:1d:57:b4:94:65:f0:31:4f:71:0d: 62:a3:5e:20:9d:76:6c:27:bc:f3:8f:1a:a4:1d:91: a5:d0:eb:93:4a:1c:b6:d8:89:43:ea:3a:cd:53:a3: 98:9d:4d:9c:4f:0e:5b:6a:2e:e7:a1:c2:75:e2:69: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:06:20:3F:B6:56:C3:D3:D4:07:08:F8:77:09:D2:94:96:BC:3F X509v3 Authority Key Identifier: keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:cb:88:96:3d:c4:6d:e6:9a:bb:50:ce:f3:d4:ea:fd:20:78: ed:ac:7f:b0:db:38:3e:d6:0e:3b:d3:b2:4b:4e:b7:d2:7c:8b: cb:9c:13:53:1a:4f:bc:59:33:ed:3a:e1:20:a5:6d:09:bc:72: 7b:4f:ba:b5:30:c4:27:49:d8:9a:eb:15:fa:66:d1:fb:c0:9f: cc:f8:20:18:64:e6:79:67:93:e3:39:80:c9:d6:53:49:c0:10: f2:90:35:ca:f7:85:53:61:23:6c:2a:7d:c5:74:0f:b7:35:07: 19:8a:a8:9b:3f:a5:e7:28:5b:67:0c:09:4e:7a:77:9e:63:45: 6f:4c:8c:92:da:8c:a5:a7:f9:ac:0b:64:65:3b:e0:69:57:9f: d2:49:cf:29:5e:f6:cd:bc:5d:55:90:5c:a5:27:ab:39:b8:9f: ae:40:95:79:7d:88:28:a1:51:d3:1c:d4:ff:d4:85:06:71:b8: d0:14:a7:74:70:f7:1b:77:df:89:cf:4c:09:c0:f5:45:db:3c: 08:d6:20:73:f2:7c:7c:7b:a4:3e:e9:03:25:df:89:e6:80:f2: 43:d1:46:b1:ef:f3:5e:42:db:f6:5e:2a:ba:8a:93:ae:cd:ca: b2:65:53:c7:00:69:ee:1a:8f:89:63:f3:6c:4b:3b:40:f7:1b: cc:df:b7:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2 OUU5MTIwRUQwHhcNMjUwODIzMDMyMTE5WhcNMjUwODMwMDMyMTE5WjAYMRYwFAYD VQQDEw02OGE5MzNhZi01MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lhpH2WZ4cENpl2c1rFSrsEmBPZ7fdsMGb+wn+RKs8viN9Q/VI8yRbOCxBg9 nL7++tHs9zidFPgTDGEZsFKkfVJjh8G5Od9I7BXO5+Q4iyFCKBrM3Np4rInObzfE ZAcJ7A3DEA5fKJgCDxqqVmKh+/fufGpvT5CBJtjTw1295k8H359ONRYrokBVvhiI 2QirWF1LG3RCpAEd5xJVVfM+Q2PKJKPXdiRg/WTUHci0lH1r/f47q9SWvkOsb+6w aOKFoq22w0KuYx1XtJRl8DFPcQ1io14gnXZsJ7zzjxqkHZGl0OuTShy22IlD6jrN U6OYnU2cTw5bai7nocJ14mlHqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUGBiA/ tlbD09QHCPh3CdKUlrw/MB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5 QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr QjZVcVk3dHpsbE5wNlJJTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhy4iWPcRt5pq7UM7z1Or9IHjtrH+w2zg+1g4707JLTrfSfIvLnBNT Gk+8WTPtOuEgpW0JvHJ7T7q1MMQnSdia6xX6ZtH7wJ/M+CAYZOZ5Z5PjOYDJ1lNJ wBDykDXK94VTYSNsKn3FdA+3NQcZiqibP6XnKFtnDAlOeneeY0VvTIyS2oylp/ms C2RlO+BpV5/SSc8pXvbNvF1VkFylJ6s5uJ+uQJV5fYgooVHTHNT/1IUGcbjQFKd0 cPcbd9+Jz0wJwPVF2zwI1iBz8nx8e6Q+6QMl34nmgPJD0Uax7/NeQtv2Xiq6ipOu zcqyZVPHAGnuGo+JY/NsSztA9xvM37dS -----END CERTIFICATE-----Generated at Sun Aug 24 04:34:43 2025 by rpki-client