$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: fFNDIGPnvM8CetLs3Tw0AX7Z8FxOBv8zQluHGhSK8fQ= Subject key identifier: 21:1D:06:C2:3B:A1:7A:1B:22:CB:BD:6A:61:7E:4F:CD:96:49:48:31 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 34D9 Signing time: Fri 04 Apr 2025 14:53:42 +0000 Manifest this update: Fri 04 Apr 2025 14:53:41 +0000 Manifest next update: Fri 11 Apr 2025 14:53:41 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: Ng9ZCz8Dd4++5EWGK7l5LZh9J6KKXeIrHQEyx9r1yUc=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 39krsnUanSXWM9ezU+4+Lqn6CnDHjeKNmvCOYJy+5/w=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: /UQcwZPg26VqsQtvRJJDSvHXzuNexFFzMoF+ofGjcoo=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=) 9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1 Validity Not Before: Apr 4 14:53:41 2025 GMT Not After : Apr 11 14:53:41 2025 GMT Subject: CN=67eff275-84a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:4b:77:c4:56:89:44:c9:e8:5d:a2:b8:02: c0:f3:67:c1:dd:22:94:0e:57:8a:24:a5:e1:b9:5a: d0:4f:09:10:74:9f:ee:23:de:fa:22:46:16:27:0c: b4:c3:0d:92:d0:be:05:0d:27:a8:5b:a3:77:d6:44: e5:ca:4a:65:c4:3d:9f:9d:85:3d:09:5e:01:18:bf: d9:c6:c2:0f:27:33:d3:16:f2:de:de:3e:cb:52:6e: ca:c4:ed:fd:bd:15:83:47:ad:3b:03:f0:46:a0:93: e7:ca:c2:cb:69:18:a9:bb:a9:4e:50:da:bb:6e:88: 00:93:dd:90:8f:30:96:d0:54:45:b6:75:be:69:bc: 42:85:4b:ef:20:c7:9d:18:a9:64:01:1b:d2:06:08: 61:27:84:26:88:9c:32:b1:6f:4d:9a:bd:e8:58:0a: 03:ce:0f:14:91:f9:48:fd:b5:93:6b:3a:2a:a0:b8: 9c:74:72:e2:bd:8a:36:c2:32:4e:d8:80:86:34:47: 82:50:da:3d:2e:67:82:f4:87:1d:7f:37:e1:cd:16: 0a:6c:f3:e1:5c:01:bf:a8:43:d5:fd:99:b2:d6:b3: e2:04:da:66:5d:d1:22:88:cf:88:1b:f9:04:37:9c: 6f:87:25:30:12:e6:05:83:a0:5c:0b:b0:d2:78:93: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1D:06:C2:3B:A1:7A:1B:22:CB:BD:6A:61:7E:4F:CD:96:49:48:31 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f8:c9:e5:67:9f:a5:08:b2:9c:7c:db:78:a6:0f:8a:48:fc: b5:21:35:bd:88:cc:f5:cf:39:98:b4:e8:a7:6a:40:9f:72:5b: a1:05:c8:34:b9:fb:f3:79:17:9c:37:0c:1e:d4:16:31:1b:d2: 8a:d6:0c:85:b6:0f:19:4d:27:3f:da:bb:74:40:8f:08:a4:b6: 38:bd:0b:90:f0:c3:fa:c5:d0:95:22:89:c2:44:ab:0f:90:a2: ee:0f:a6:dc:90:d6:1f:0c:7a:b3:ba:1f:de:ed:e8:65:7a:a2: a1:a9:a6:8b:b9:6b:f4:aa:24:b9:b0:ff:d6:7e:25:49:6a:36: 75:11:ca:9e:0d:82:cb:74:92:af:42:58:f3:45:f5:ac:d9:6c: 56:8b:52:53:e0:fc:08:3b:bb:dd:62:36:a2:da:45:a5:48:1f: 0c:33:18:b8:dd:84:2b:39:00:f6:7c:56:2a:06:5f:a2:53:24: c3:e8:ac:3f:0c:48:a9:94:5a:94:d5:32:3c:57:5d:ce:7a:c2: 59:ff:20:eb:31:dd:bc:7f:81:c3:99:66:6f:5f:0f:46:a9:f4: 93:33:1b:51:6d:28:cd:9f:71:e8:4e:be:15:15:db:b3:7e:ba: 53:dd:4a:e5:af:7c:5f:25:84:ab:c4:8c:a7:3f:04:ee:d1:63: 93:88:05:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNDA0MTQ1MzQxWhcNMjUwNDExMTQ1MzQxWjAYMRYwFAYD VQQDEw02N2VmZjI3NS04NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ItLd8RWiUTJ6F2iuALA82fB3SKUDleKJKXhuVrQTwkQdJ/uI976IkYWJwy0 ww2S0L4FDSeoW6N31kTlykplxD2fnYU9CV4BGL/ZxsIPJzPTFvLe3j7LUm7KxO39 vRWDR607A/BGoJPnysLLaRipu6lOUNq7bogAk92QjzCW0FRFtnW+abxChUvvIMed GKlkARvSBghhJ4QmiJwysW9Nmr3oWAoDzg8UkflI/bWTazoqoLicdHLivYo2wjJO 2ICGNEeCUNo9LmeC9IcdfzfhzRYKbPPhXAG/qEPV/Zmy1rPiBNpmXdEiiM+IG/kE N5xvhyUwEuYFg6BcC7DSeJMe7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEdBsI7 oXobIsu9amF+T82WSUgxMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+MnlZ5+lCLKcfNt4pg+KSPy1ITW9iMz1zzmYtOinakCfcluhBcg0 ufvzeRecNwwe1BYxG9KK1gyFtg8ZTSc/2rt0QI8IpLY4vQuQ8MP6xdCVIonCRKsP kKLuD6bckNYfDHqzuh/e7ehleqKhqaaLuWv0qiS5sP/WfiVJajZ1EcqeDYLLdJKv QljzRfWs2WxWi1JT4PwIO7vdYjai2kWlSB8MMxi43YQrOQD2fFYqBl+iUyTD6Kw/ DEiplFqU1TI8V13OesJZ/yDrMd28f4HDmWZvXw9GqfSTMxtRbSjNn3HoTr4VFduz frpT3Urlr3xfJYSrxIynPwTu0WOTiAW/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:03 2025 by rpki-client