$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: k0iYhcXokqf8VjbOs9QVBq6lOv+YzbkhCqd5z7+PAWE= Subject key identifier: 84:49:20:C2:A0:DB:CA:38:03:0A:A6:26:3F:EF:FB:E8:27:1D:F1:D5 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 352B Signing time: Fri 22 Aug 2025 14:54:35 +0000 Manifest this update: Fri 22 Aug 2025 14:54:35 +0000 Manifest next update: Fri 29 Aug 2025 14:54:35 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: pdLessWutgw/hNiMa7tqdyY3OiVH4kjnz1smLCfXK1A=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13814 (0x35f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Aug 22 14:54:35 2025 GMT Not After : Aug 29 14:54:35 2025 GMT Subject: CN=68a884ab-e8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:08:41:be:8f:36:12:f8:99:16:64:49:46: eb:af:31:2d:e8:bc:d2:94:1b:8b:93:e7:bc:ea:60: 7b:9d:97:c5:05:d6:11:71:4d:cc:e1:0d:77:f4:b6: 81:c5:ac:68:08:3f:98:b3:62:10:d1:71:be:3d:11: 15:c3:81:8c:d6:d6:3c:58:2b:f5:23:4c:ae:1d:d1: de:62:f8:68:f9:b0:02:52:6f:13:73:6d:04:cb:22: 4c:6f:45:4b:6f:85:df:ca:15:53:5a:06:61:90:12: a0:81:0b:1e:56:81:71:90:8c:46:92:ae:fb:7f:94: f3:59:c1:c3:ea:9b:13:8b:e7:9e:85:d6:ab:a9:46: 56:1e:37:39:91:cb:99:af:75:97:fc:a7:60:5c:91: 16:5e:f7:9f:01:5f:2f:ff:56:70:30:68:bf:75:92: e6:46:3b:c6:38:5d:05:ba:5c:34:fd:00:c3:bb:68: 03:f0:47:db:a6:fd:a1:2e:40:2f:18:9c:07:10:6c: 0e:d9:1e:10:d4:49:95:b6:79:81:b1:c9:67:bc:4e: 46:e1:fa:fe:11:51:7f:49:f8:f2:2f:1e:ea:fd:ba: 4f:65:6c:07:74:d5:f6:ac:17:9e:4e:f2:ea:36:86: 38:64:5b:32:89:10:09:9e:fe:ad:23:aa:35:bc:49: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:20:C2:A0:DB:CA:38:03:0A:A6:26:3F:EF:FB:E8:27:1D:F1:D5 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:1d:23:21:38:08:3a:02:93:35:ae:45:8b:49:15:bd:61: f5:84:55:75:92:23:31:95:1c:e1:c2:4d:c9:1e:47:24:fd:85: f8:8b:72:c6:af:dd:2c:04:a8:50:34:2f:42:4d:27:9f:d4:fb: ce:54:2a:71:bf:36:c4:e5:95:6b:8d:54:b4:de:52:ea:0d:a8: 57:81:0f:cc:e9:4c:ac:ea:e5:6c:fb:56:9c:f9:74:0d:fd:31: 09:7d:91:22:bb:e1:dc:45:6d:b9:16:21:df:92:4c:50:3c:2f: 50:33:96:0d:6a:63:2f:07:68:e7:ac:28:e3:cd:53:ac:f7:66: 08:31:18:82:17:e0:0e:6b:e3:65:b4:87:8d:56:be:3c:1a:50: a0:0a:0c:25:98:e0:2a:ea:18:8f:15:06:73:25:7a:8b:f5:35: 76:53:bd:87:1c:b7:6e:16:8d:c2:61:98:1b:d1:81:08:44:05: 7a:94:46:0a:4d:36:8d:9a:b2:8f:bd:de:01:4f:95:0f:07:0f: 27:9f:80:bc:73:b6:a1:eb:73:5b:db:24:4e:7a:78:e5:c4:39: dc:19:f7:72:90:00:b3:50:eb:91:85:47:08:ee:9b:7d:6c:8a: 28:55:e8:3d:f0:53:52:ee:cf:a2:70:cb:6c:93:56:6d:4b:f1: ef:46:df:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwODIyMTQ1NDM1WhcNMjUwODI5MTQ1NDM1WjAYMRYwFAYD VQQDEw02OGE4ODRhYi1lOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOgIQb6PNhL4mRZkSUbrrzEt6LzSlBuLk+e86mB7nZfFBdYRcU3M4Q139LaB xaxoCD+Ys2IQ0XG+PREVw4GM1tY8WCv1I0yuHdHeYvho+bACUm8Tc20EyyJMb0VL b4XfyhVTWgZhkBKggQseVoFxkIxGkq77f5TzWcHD6psTi+eehdarqUZWHjc5kcuZ r3WX/KdgXJEWXvefAV8v/1ZwMGi/dZLmRjvGOF0Fulw0/QDDu2gD8Efbpv2hLkAv GJwHEGwO2R4Q1EmVtnmBsclnvE5G4fr+EVF/SfjyLx7q/bpPZWwHdNX2rBeeTvLq NoY4ZFsyiRAJnv6tI6o1vEmrcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRJIMKg 28o4AwqmJj/v++gnHfHVMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfdB0jITgIOgKTNa5Fi0kVvWH1hFV1kiMxlRzhwk3JHkck/YX4i3LG r90sBKhQNC9CTSef1PvOVCpxvzbE5ZVrjVS03lLqDahXgQ/M6Uys6uVs+1ac+XQN /TEJfZEiu+HcRW25FiHfkkxQPC9QM5YNamMvB2jnrCjjzVOs92YIMRiCF+AOa+Nl tIeNVr48GlCgCgwlmOAq6hiPFQZzJXqL9TV2U72HHLduFo3CYZgb0YEIRAV6lEYK TTaNmrKPvd4BT5UPBw8nn4C8c7ah63Nb2yROenjlxDncGfdykACzUOuRhUcI7pt9 bIooVeg98FNS7s+icMtsk1ZtS/HvRt/P -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:19 2025 by rpki-client