$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: xzWm4iyDUcKY4DVz+7q8qRfjcBA1uXOc0RmLsLO1fMg= Subject key identifier: 63:F5:E4:A2:14:91:45:E1:3B:FB:7A:5B:DB:19:7A:5F:15:1D:BB:E1 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 351A Signing time: Sun 20 Jul 2025 14:54:44 +0000 Manifest this update: Sun 20 Jul 2025 14:54:43 +0000 Manifest next update: Sun 27 Jul 2025 14:54:43 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: ERfjrpDYAMhEutj/7saYU+zPVPQ383fsjdhMLu1AMt0=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13797 (0x35e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jul 20 14:54:43 2025 GMT Not After : Jul 27 14:54:43 2025 GMT Subject: CN=687d0333-67e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:44:0f:b2:f0:61:c1:1d:7e:58:3c:8b:d6: dc:6d:2d:1b:5a:76:40:a7:dc:cc:51:70:e8:68:2d: 95:72:39:fa:a9:23:8b:9a:1c:d6:4b:19:7b:2b:42: 1b:06:ab:7e:d3:48:7b:09:97:25:71:c1:74:05:74: ac:a3:29:9f:cb:47:e3:29:1a:29:a5:d9:c4:be:b6: b7:18:0a:3f:3b:7e:f9:e9:0d:07:80:18:ca:c7:dd: f0:18:5e:38:b0:fd:ca:1c:e9:42:37:33:4f:90:71: af:2a:35:d4:5b:43:7b:ef:99:ad:00:5b:55:46:35: f5:ec:79:d4:0d:e5:eb:0b:70:ca:a6:a5:5a:2a:4c: c6:c3:dc:75:73:99:a1:18:7d:d2:72:8e:4f:fd:48: 25:f9:8a:cb:cf:b5:52:00:56:c2:a8:bd:11:60:b3: 9a:a8:b0:54:98:09:2a:4d:83:ec:57:bc:2c:76:b1: c1:3d:40:c7:c9:ca:84:cb:e7:aa:76:df:5e:9c:5e: 4c:b4:24:9f:ce:ee:79:62:40:37:38:96:18:00:fd: 92:0e:d4:76:bb:b1:2f:2c:0f:a8:94:be:f8:b4:97: 5f:ea:d0:e0:57:6d:f1:2a:a0:f7:b7:5f:34:68:b3: de:a7:e9:c8:b6:c6:4c:f3:4f:1e:e8:be:99:3f:89: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:E4:A2:14:91:45:E1:3B:FB:7A:5B:DB:19:7A:5F:15:1D:BB:E1 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0f:cb:e5:55:44:72:e6:c5:b1:a8:74:94:1a:48:e7:68:be: 43:9e:52:fd:3b:0b:49:84:5e:39:82:fa:09:f1:70:e9:6e:24: 7b:d1:5d:18:e9:84:01:10:64:1e:23:b5:b7:e7:6a:22:f3:4f: 6b:e6:1d:e9:cc:bf:28:f0:ea:16:70:b1:7e:e8:12:f6:09:66: cf:07:4c:13:c5:e2:0c:4e:0c:75:9e:20:2c:e7:d1:42:58:93: c2:b5:bd:53:b9:ec:de:a6:c8:56:f4:37:78:df:44:63:71:6d: 03:b0:c6:06:20:92:dc:33:eb:c1:08:2c:3d:19:ab:1b:1e:e9: 23:1f:f3:9c:a6:dd:0c:0c:69:b3:f1:5b:05:95:87:db:00:8a: 2b:3c:cd:f8:2a:26:95:e7:3e:b6:e2:83:6b:20:d7:d1:93:8c: f2:bb:9b:79:81:f2:4f:dc:df:d7:9e:1a:6a:f9:8c:d7:ed:44: c9:09:d7:28:4e:63:f8:0c:98:4d:39:eb:cb:fa:56:80:50:a9: 32:78:a5:b3:58:f1:f1:6b:de:01:68:48:37:bb:e3:a0:1d:d3: 7c:21:34:6a:7a:84:ae:f2:45:ce:94:c2:09:c7:a2:79:7f:ff: b5:40:55:90:19:c9:a3:fe:28:00:27:ea:cc:ac:99:74:7c:4e: e1:f5:5d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNzIwMTQ1NDQzWhcNMjUwNzI3MTQ1NDQzWjAYMRYwFAYD VQQDEw02ODdkMDMzMy02N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxxED7LwYcEdflg8i9bcbS0bWnZAp9zMUXDoaC2Vcjn6qSOLmhzWSxl7K0Ib Bqt+00h7CZclccF0BXSsoymfy0fjKRoppdnEvra3GAo/O3756Q0HgBjKx93wGF44 sP3KHOlCNzNPkHGvKjXUW0N775mtAFtVRjX17HnUDeXrC3DKpqVaKkzGw9x1c5mh GH3Sco5P/Ugl+YrLz7VSAFbCqL0RYLOaqLBUmAkqTYPsV7wsdrHBPUDHycqEy+eq dt9enF5MtCSfzu55YkA3OJYYAP2SDtR2u7EvLA+olL74tJdf6tDgV23xKqD3t180 aLPep+nItsZM808e6L6ZP4kmBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP15KIU kUXhO/t6W9sZel8VHbvhMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJD8vlVURy5sWxqHSUGkjnaL5DnlL9OwtJhF45gvoJ8XDpbiR70V0Y 6YQBEGQeI7W352oi809r5h3pzL8o8OoWcLF+6BL2CWbPB0wTxeIMTgx1niAs59FC WJPCtb1TuezepshW9Dd430RjcW0DsMYGIJLcM+vBCCw9GasbHukjH/Ocpt0MDGmz 8VsFlYfbAIorPM34KiaV5z624oNrINfRk4zyu5t5gfJP3N/Xnhpq+YzX7UTJCdco TmP4DJhNOevL+laAUKkyeKWzWPHxa94BaEg3u+OgHdN8ITRqeoSu8kXOlMIJx6J5 f/+1QFWQGcmj/igAJ+rMrJl0fE7h9V0c -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:27 2025 by rpki-client