$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: wZjk3DP6SM5qvrzeW92rlPxrQ5uOiMODuaLBvUG2KGg= Subject key identifier: 07:41:4A:72:23:7B:80:54:33:41:9E:6A:DD:BF:62:45:60:D2:FD:F3 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 34EE Signing time: Wed 14 May 2025 14:54:02 +0000 Manifest this update: Wed 14 May 2025 14:54:01 +0000 Manifest next update: Wed 21 May 2025 14:54:01 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: EZ3kfedTCo0ilOekoQCpMKI2h5J7faymh56tLzB0nzo=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 39krsnUanSXWM9ezU+4+Lqn6CnDHjeKNmvCOYJy+5/w=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: Fq13Y/OddiHFU8U1EPnfpVi7ydN7FhOv3OSeer8vG/s=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=) 9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: May 14 14:54:01 2025 GMT Not After : May 21 14:54:01 2025 GMT Subject: CN=6824ae8a-1676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:5e:69:f0:d9:63:69:6f:a5:82:dc:16:77: cb:ca:cb:8c:a8:10:60:78:48:63:9e:42:5c:84:6e: 65:4f:fb:05:7c:04:f2:53:57:84:11:37:23:99:e3: 60:4e:9a:9d:d1:f9:05:2b:e9:93:f3:b9:50:8e:73: 3c:da:f7:ed:86:00:a1:d1:74:1d:cd:19:53:26:9b: 55:03:4f:fe:1f:59:10:8a:7b:b6:41:5a:ae:ad:78: 57:fb:8e:e0:3f:f7:33:9f:62:f3:16:6a:3e:6b:87: 9f:b9:7b:0a:1e:04:47:c5:58:36:9c:87:30:97:83: 06:32:a8:5c:05:3f:f2:f6:9b:f5:c2:f2:4e:ff:5e: 1a:c7:ef:ea:bf:d5:10:32:24:01:54:71:01:db:0d: ef:e6:05:f3:e8:66:a6:fd:24:3d:f6:55:2a:90:0a: 32:4a:11:eb:81:7d:fd:e3:f3:4c:e6:b5:4c:66:aa: 93:01:1f:a0:4e:38:0d:21:9d:bc:3b:b6:9f:39:f2: eb:48:7a:c0:e9:31:74:94:d6:9c:79:13:75:a3:cb: 59:0e:5b:c9:7f:9c:81:50:b5:33:fa:b6:f8:f9:a0: 7c:58:ab:38:b1:a0:b9:c2:7e:f1:4b:cc:47:8a:8f: ad:ce:8a:34:08:1d:cf:b6:9c:09:55:20:b4:38:eb: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:4A:72:23:7B:80:54:33:41:9E:6A:DD:BF:62:45:60:D2:FD:F3 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4e:fb:c1:54:05:1c:c7:00:03:71:5d:a1:d6:eb:45:03:bc: 52:94:2e:00:22:0f:44:6b:53:7a:32:d7:ec:fb:73:04:d9:7f: 5b:7e:70:5a:f3:dc:7e:fc:a6:e7:ef:88:52:99:2d:c1:fd:3a: 7a:96:e4:a7:b2:02:84:97:0c:02:ff:1c:f2:a5:26:2a:a2:a4: 23:75:cc:f0:5b:20:1c:19:ed:25:f4:e8:82:11:97:1a:7c:af: 74:84:f2:9e:9d:27:69:84:7a:be:8c:c8:8d:47:62:36:b3:55: d2:6f:86:a1:aa:c5:5a:67:6b:18:6c:3a:f7:7d:2f:8a:6f:3e: 92:44:9d:ef:8f:b5:30:64:ff:da:8d:d8:95:6c:ca:de:7f:25: cd:cc:a0:ff:e0:ae:5e:fa:9b:e1:0f:4a:0d:f6:e1:e2:d2:9b: 87:f3:74:42:09:5f:6f:e9:c7:d6:59:5b:70:fa:08:58:83:16: 77:b5:ad:68:55:9d:0c:dc:15:45:fc:99:dc:d2:f9:ed:29:c7: 65:3c:f3:8e:96:f4:f7:54:b9:4e:d2:4e:fa:41:0f:f8:d4:4f: ce:a9:ed:19:08:aa:e3:83:c0:d4:f6:8e:c0:5a:ea:54:09:7a: f1:ee:42:5e:c6:d2:d7:c3:ab:b8:19:1d:73:34:48:aa:5e:9a: e3:a4:db:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNTE0MTQ1NDAxWhcNMjUwNTIxMTQ1NDAxWjAYMRYwFAYD VQQDEw02ODI0YWU4YS0xNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsFeafDZY2lvpYLcFnfLysuMqBBgeEhjnkJchG5lT/sFfATyU1eEETcjmeNg Tpqd0fkFK+mT87lQjnM82vfthgCh0XQdzRlTJptVA0/+H1kQinu2QVqurXhX+47g P/czn2LzFmo+a4efuXsKHgRHxVg2nIcwl4MGMqhcBT/y9pv1wvJO/14ax+/qv9UQ MiQBVHEB2w3v5gXz6Gam/SQ99lUqkAoyShHrgX394/NM5rVMZqqTAR+gTjgNIZ28 O7afOfLrSHrA6TF0lNaceRN1o8tZDlvJf5yBULUz+rb4+aB8WKs4saC5wn7xS8xH io+tzoo0CB3PtpwJVSC0OOvnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdBSnIj e4BUM0Geat2/YkVg0v3zMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvTvvBVAUcxwADcV2h1utFA7xSlC4AIg9Ea1N6Mtfs+3ME2X9bfnBa 89x+/Kbn74hSmS3B/Tp6luSnsgKElwwC/xzypSYqoqQjdczwWyAcGe0l9OiCEZca fK90hPKenSdphHq+jMiNR2I2s1XSb4ahqsVaZ2sYbDr3fS+Kbz6SRJ3vj7UwZP/a jdiVbMrefyXNzKD/4K5e+pvhD0oN9uHi0puH83RCCV9v6cfWWVtw+ghYgxZ3ta1o VZ0M3BVF/Jnc0vntKcdlPPOOlvT3VLlO0k76QQ/41E/Oqe0ZCKrjg8DU9o7AWupU CXrx7kJextLXw6u4GR1zNEiqXprjpNvR -----END CERTIFICATE-----Generated at Fri May 16 10:00:25 2025 by rpki-client