$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: M6iRHni7G0nvT5mFv0lHuMWxFt614jSSxk2w9/vJ8sc= Subject key identifier: BE:50:FE:69:57:05:58:20:39:81:BF:18:C6:21:A2:EB:83:0C:20:36 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 3549 Signing time: Mon 20 Oct 2025 14:58:13 +0000 Manifest this update: Mon 20 Oct 2025 14:58:12 +0000 Manifest next update: Mon 27 Oct 2025 14:58:12 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: /deYjJOmMK5nwyNEYoa41kFDMB+pnTgBTtUalLRAdaY=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13844 (0x3614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Oct 20 14:58:12 2025 GMT Not After : Oct 27 14:58:12 2025 GMT Subject: CN=68f64e04-98f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:dd:8e:d1:7b:61:17:92:06:ff:25:eb:84: 42:ca:a2:a7:de:6e:e3:b4:4b:1d:94:c5:5f:36:d6: 58:26:d5:9d:27:ab:ef:d9:a9:06:4b:a0:b2:e2:21: 33:5a:0b:22:9d:6f:d7:39:b9:73:8c:68:65:ae:2d: d6:d7:cf:0e:ce:b6:90:f4:ac:70:ac:75:bf:36:b2: 1e:ca:d8:39:68:11:a6:45:63:42:99:2a:03:52:ef: 61:07:0e:25:15:ad:cf:49:f3:2b:8f:29:29:d3:cb: 01:64:8a:5f:58:bb:47:18:f1:fc:09:a0:59:b5:95: 7d:7c:6f:25:19:49:bf:c5:2c:a9:09:4e:68:3a:71: 8a:fb:3d:7d:82:69:23:bf:12:58:a8:83:66:aa:dd: 1d:30:e9:74:f2:cc:54:7f:2f:d4:c9:d6:e1:42:c9: ea:ae:28:a4:f7:69:e9:3c:99:f4:7f:0c:3d:69:35: 34:bc:d2:51:63:85:a3:74:5b:98:0c:9a:47:8e:18: 10:8f:50:6d:15:bb:fe:98:7d:f2:cc:6b:ba:23:df: bd:94:97:3f:20:f4:19:d7:45:37:70:28:d2:bd:49: 87:65:56:86:6c:35:7a:01:64:1e:e7:11:7c:7a:d8: c7:47:e8:d2:d0:f0:b2:8b:30:c8:0d:1e:81:52:81: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:50:FE:69:57:05:58:20:39:81:BF:18:C6:21:A2:EB:83:0C:20:36 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:c9:94:21:2a:e2:92:ca:8d:d2:d1:be:e2:53:6c:59:b0: c3:7b:c5:90:b5:06:c3:68:5d:51:cf:ea:9f:65:a4:61:73:9b: 71:dc:91:d0:00:1e:27:da:0d:17:6a:52:2c:d4:e2:1e:9e:9a: cd:7d:ff:4e:98:a7:5c:f3:f9:62:66:bd:a1:98:9b:9a:19:99: c6:77:c2:30:25:70:ed:6a:85:b4:65:ab:b6:0d:8b:52:95:63: 10:d6:af:a5:f1:e9:26:2b:f0:97:c3:16:77:78:29:6e:e0:2d: 64:00:6f:06:40:6a:e8:4c:ed:33:ce:b9:53:11:4b:f8:3d:8a: d4:84:24:a0:4f:9e:94:e3:85:a1:9a:ca:d1:2d:59:f7:3b:5e: b4:bc:40:90:11:c5:28:7d:57:1c:2a:41:45:0a:20:78:87:97: 77:ac:a6:3e:bd:41:f3:56:e3:16:72:16:ef:7b:7c:94:1f:75: 7d:a4:c8:57:71:1d:36:27:18:e5:bc:dd:11:54:e8:30:05:3c: dc:bf:8f:92:7d:7b:95:e9:53:75:cb:a2:e3:16:80:7e:1e:cf: dc:ce:9a:d9:15:ae:66:5a:65:a8:50:1a:dc:1a:01:43:10:a6: 14:b1:a8:ad:06:0b:95:37:51:b4:45:2a:b6:ee:1d:a0:bb:1b: 95:f2:bd:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUxMDIwMTQ1ODEyWhcNMjUxMDI3MTQ1ODEyWjAYMRYwFAYD VQQDEw02OGY2NGUwNC05OGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23TdjtF7YReSBv8l64RCyqKn3m7jtEsdlMVfNtZYJtWdJ6vv2akGS6Cy4iEz WgsinW/XOblzjGhlri3W188OzraQ9KxwrHW/NrIeytg5aBGmRWNCmSoDUu9hBw4l Fa3PSfMrjykp08sBZIpfWLtHGPH8CaBZtZV9fG8lGUm/xSypCU5oOnGK+z19gmkj vxJYqINmqt0dMOl08sxUfy/UydbhQsnqriik92npPJn0fww9aTU0vNJRY4WjdFuY DJpHjhgQj1BtFbv+mH3yzGu6I9+9lJc/IPQZ10U3cCjSvUmHZVaGbDV6AWQe5xF8 etjHR+jS0PCyizDIDR6BUoGwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5Q/mlX BVggOYG/GMYhouuDDCA2MB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+cmUISriksqN0tG+4lNsWbDDe8WQtQbDaF1Rz+qfZaRhc5tx3JHQ AB4n2g0XalIs1OIenprNff9OmKdc8/liZr2hmJuaGZnGd8IwJXDtaoW0Zau2DYtS lWMQ1q+l8ekmK/CXwxZ3eClu4C1kAG8GQGroTO0zzrlTEUv4PYrUhCSgT56U44Wh msrRLVn3O160vECQEcUofVccKkFFCiB4h5d3rKY+vUHzVuMWchbve3yUH3V9pMhX cR02JxjlvN0RVOgwBTzcv4+SfXuV6VN1y6LjFoB+Hs/czprZFa5mWmWoUBrcGgFD EKYUsaitBguVN1G0RSq27h2guxuV8r10 -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:21 2025 by rpki-client