$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: Dl8FRM6EzB687qMcMXDamzFFgU0TmkixvGFnEQkVkdU= Subject key identifier: 85:DB:09:97:55:E8:74:0C:BD:07:BB:F3:77:49:19:50:68:D8:0B:56 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 3511 Signing time: Wed 02 Jul 2025 14:55:58 +0000 Manifest this update: Wed 02 Jul 2025 14:55:58 +0000 Manifest next update: Wed 09 Jul 2025 14:55:58 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: k9RFFlskv6qI0a7McYV5zAzERHpUeun0bj+GN0Adq3Y=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13788 (0x35dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jul 2 14:55:58 2025 GMT Not After : Jul 9 14:55:58 2025 GMT Subject: CN=6865487e-4f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:5a:be:f3:3a:d7:01:5b:57:ca:f4:a8:18: 90:d6:e5:14:c4:0e:c1:a6:95:fa:45:78:ba:a4:4f: fc:7f:e3:7e:29:b7:d6:41:79:c5:03:de:ae:7d:3d: cb:07:ed:b3:60:64:d1:ba:2a:ba:bf:04:12:3f:3e: 73:3f:3d:e5:5b:a3:0d:aa:de:c8:bf:db:d5:aa:5d: 6a:67:07:cc:aa:2f:a7:cd:42:ec:15:ca:a7:db:cd: 65:9d:aa:8c:47:e7:2e:c8:3c:b0:b5:5a:4d:6a:a9: f1:81:2a:c3:f3:fb:4c:94:e3:14:e0:87:eb:95:9a: 77:27:67:42:53:6e:54:6b:08:a7:c5:7c:9b:6e:42: c7:a7:51:8b:e4:0e:3e:29:6d:0f:94:b0:c1:01:a5: 0f:bc:5d:c7:25:6e:24:30:e3:dd:8b:8d:4f:11:27: 61:40:4a:9b:bf:05:ec:64:9c:35:a9:33:9a:65:f7: d3:18:d0:5f:0f:8b:53:ae:f6:04:fa:57:44:e4:db: fc:a2:5a:71:f8:74:1e:53:fd:89:75:64:2d:ce:90: 1f:6d:4c:1e:ed:32:04:ea:53:0a:ae:2e:66:35:fc: d4:28:5a:fe:b2:9e:a1:ad:98:8e:ac:21:48:06:48: c3:4d:33:a8:1b:1f:73:60:d1:e9:e8:54:d1:a8:b0: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DB:09:97:55:E8:74:0C:BD:07:BB:F3:77:49:19:50:68:D8:0B:56 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:72:84:b1:98:e8:da:1a:bf:56:84:f2:c8:30:9e:25:dd:a9: 19:6b:c3:e0:c6:c7:b8:86:70:4a:a9:bf:0c:7f:95:cb:fe:5a: 46:0e:e8:b0:17:df:a0:5d:b0:02:ad:e4:08:b0:0c:16:fb:1a: eb:82:17:90:72:32:4b:38:8f:06:35:3d:90:c9:ca:83:e6:50: df:cc:64:1c:71:94:d8:34:bb:0d:0a:ac:a1:80:bd:55:e8:d8: 25:cf:82:53:1e:c8:b5:63:b0:63:28:3f:57:d4:18:45:ce:65: a4:4b:81:89:87:04:d2:3a:93:ed:ff:b4:7b:70:97:4c:b1:ea: 1e:d6:6c:eb:aa:ba:4d:2d:c5:be:2b:c8:1d:8b:a9:6f:86:8e: 48:01:0c:aa:cb:89:a6:10:ab:1b:9e:96:c4:24:82:99:92:d4: 12:03:d0:84:6d:92:59:5b:ca:c8:ad:26:16:91:72:ac:8f:42: 5a:e7:da:d2:92:cc:be:6f:72:cf:be:f1:9b:5c:5c:62:e0:b8: 37:7f:9b:c2:5b:20:8a:c9:66:35:11:53:4b:b3:d7:25:e4:fe: cf:28:9e:cc:32:66:b8:59:ad:84:3d:c0:16:1e:58:d3:9e:7d: 54:8e:69:b0:62:9d:a6:b7:6e:e9:01:3e:17:23:16:f7:62:0b: 7a:78:17:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNzAyMTQ1NTU4WhcNMjUwNzA5MTQ1NTU4WjAYMRYwFAYD VQQDEw02ODY1NDg3ZS00ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3BavvM61wFbV8r0qBiQ1uUUxA7BppX6RXi6pE/8f+N+KbfWQXnFA96ufT3L B+2zYGTRuiq6vwQSPz5zPz3lW6MNqt7Iv9vVql1qZwfMqi+nzULsFcqn281lnaqM R+cuyDywtVpNaqnxgSrD8/tMlOMU4IfrlZp3J2dCU25UawinxXybbkLHp1GL5A4+ KW0PlLDBAaUPvF3HJW4kMOPdi41PESdhQEqbvwXsZJw1qTOaZffTGNBfD4tTrvYE +ldE5Nv8olpx+HQeU/2JdWQtzpAfbUwe7TIE6lMKri5mNfzUKFr+sp6hrZiOrCFI BkjDTTOoGx9zYNHp6FTRqLAhxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXbCZdV 6HQMvQe783dJGVBo2AtWMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLcoSxmOjaGr9WhPLIMJ4l3akZa8Pgxse4hnBKqb8Mf5XL/lpGDuiw F9+gXbACreQIsAwW+xrrgheQcjJLOI8GNT2QycqD5lDfzGQccZTYNLsNCqyhgL1V 6Nglz4JTHsi1Y7BjKD9X1BhFzmWkS4GJhwTSOpPt/7R7cJdMseoe1mzrqrpNLcW+ K8gdi6lvho5IAQyqy4mmEKsbnpbEJIKZktQSA9CEbZJZW8rIrSYWkXKsj0Ja59rS ksy+b3LPvvGbXFxi4Lg3f5vCWyCKyWY1EVNLs9cl5P7PKJ7MMma4Wa2EPcAWHljT nn1UjmmwYp2mt27pAT4XIxb3Ygt6eBcz -----END CERTIFICATE-----Generated at Thu Jul 3 09:24:19 2025 by rpki-client