$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: UpYxYEx68xTWQvDOG4V4h/U85vxzSSkB1qbi1bXxrrQ= Subject key identifier: A4:14:02:8A:52:97:01:B4:C7:69:20:7C:1A:AB:F7:D2:D1:AB:C3:F3 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 34F9 Signing time: Sat 31 May 2025 14:53:18 +0000 Manifest this update: Sat 31 May 2025 14:53:17 +0000 Manifest next update: Sat 07 Jun 2025 14:53:17 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: B0IJ5LAbh1vGIL8j50JxZf8llp8tmz5Sau2sdVmsx6U=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 39krsnUanSXWM9ezU+4+Lqn6CnDHjeKNmvCOYJy+5/w=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: Zim2L2/5l7Mtf9sDbAy8Uv4CVf5ErBiXfJpf+3YjygY=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=) 9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13751 (0x35b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: May 31 14:53:17 2025 GMT Not After : Jun 7 14:53:17 2025 GMT Subject: CN=683b17dd-d7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:88:7c:9d:a9:7f:3d:8a:b5:59:ac:b9:b7:44: fa:fc:30:e5:79:36:09:9f:f8:fc:30:0b:21:61:2e: 8c:a5:19:00:c9:93:c7:68:92:59:f1:31:f2:10:a1: 1b:7f:dd:a2:3f:20:da:c5:e8:c0:d1:c2:d6:23:25: a1:31:73:a1:d6:ca:80:fb:f6:65:e0:37:b2:ab:ea: 0d:32:73:8e:c8:89:28:ea:fd:79:ec:55:22:d6:40: 0e:1b:2b:48:26:81:22:06:19:0e:bf:74:8f:dd:b6: dc:6e:b9:04:09:f4:d3:cd:15:fc:54:6a:dd:b4:40: c3:da:ab:0f:35:c7:d6:e7:42:2a:46:f2:da:64:a1: c4:b9:31:08:f7:c7:a2:ea:63:c9:53:e6:9f:c9:05: 7c:50:dd:30:ef:47:5a:24:37:c3:b7:c9:9e:ed:45: db:fc:51:bd:82:68:ab:14:46:78:28:ef:1c:03:fe: 39:3a:18:a7:ab:e3:58:98:ef:2b:b6:fe:eb:d5:9b: 08:f6:40:ba:a3:b3:d1:e8:dd:df:59:91:4d:f5:d0: 62:aa:2a:61:60:3f:9e:06:48:c5:03:47:15:37:0e: 0b:a9:f5:dc:f5:b8:54:b7:fd:40:4d:20:4f:e8:a7: 13:18:8c:1e:2f:f6:6b:bc:9b:e0:01:c0:1f:af:18: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:14:02:8A:52:97:01:B4:C7:69:20:7C:1A:AB:F7:D2:D1:AB:C3:F3 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b9:a7:dc:a6:82:4c:7c:17:77:34:17:e9:c7:b7:07:3f:a9: 61:de:8e:77:60:30:1e:bb:d1:d5:29:d0:e5:32:74:d9:79:d8: dc:8d:6e:a3:dc:37:96:88:6c:cd:c6:63:79:97:be:3a:49:bf: ee:bf:3b:73:14:3b:70:b0:96:76:56:7a:09:51:3d:68:bb:9c: 2a:88:ab:f3:e1:14:92:56:2c:43:34:88:af:42:f2:da:98:c0: 60:ba:bb:6f:1b:e8:a8:30:14:13:1a:9b:11:82:83:68:a0:f7: 87:6e:86:9e:ca:62:c5:f8:ab:37:2e:65:48:0b:34:ad:33:20: 8f:e7:a2:ed:72:59:a0:58:eb:b9:c2:d3:4e:5a:5c:bb:1d:7c: 17:d7:35:0f:6e:c5:d7:ad:93:1e:32:51:87:77:f7:35:c8:b8: 4a:82:75:c0:cf:9a:40:8d:23:b6:11:89:cf:8c:b8:10:d0:c2: 5c:ab:b3:36:95:97:42:ac:4e:2c:1b:0a:d8:3a:03:92:77:65: e8:3a:81:ff:d2:5d:36:94:15:47:19:9f:b3:f4:90:ad:f7:f2: d2:18:ef:22:4c:b2:1b:26:52:21:64:5e:8e:6e:c0:04:de:b2: a6:77:77:c0:46:87:78:ae:1e:72:aa:13:b4:a1:25:04:8f:23: b5:a6:6b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNTMxMTQ1MzE3WhcNMjUwNjA3MTQ1MzE3WjAYMRYwFAYD VQQDEw02ODNiMTdkZC1kN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Yh8nal/PYq1Way5t0T6/DDleTYJn/j8MAshYS6MpRkAyZPHaJJZ8THyEKEb f92iPyDaxejA0cLWIyWhMXOh1sqA+/Zl4Deyq+oNMnOOyIko6v157FUi1kAOGytI JoEiBhkOv3SP3bbcbrkECfTTzRX8VGrdtEDD2qsPNcfW50IqRvLaZKHEuTEI98ei 6mPJU+afyQV8UN0w70daJDfDt8me7UXb/FG9gmirFEZ4KO8cA/45Ohinq+NYmO8r tv7r1ZsI9kC6o7PR6N3fWZFN9dBiqiphYD+eBkjFA0cVNw4LqfXc9bhUt/1ATSBP 6KcTGIweL/ZrvJvgAcAfrxgtPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQUAopS lwG0x2kgfBqr99LRq8PzMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUuafcpoJMfBd3NBfpx7cHP6lh3o53YDAeu9HVKdDlMnTZedjcjW6j 3DeWiGzNxmN5l746Sb/uvztzFDtwsJZ2VnoJUT1ou5wqiKvz4RSSVixDNIivQvLa mMBgurtvG+ioMBQTGpsRgoNooPeHboaeymLF+Ks3LmVICzStMyCP56LtclmgWOu5 wtNOWly7HXwX1zUPbsXXrZMeMlGHd/c1yLhKgnXAz5pAjSO2EYnPjLgQ0MJcq7M2 lZdCrE4sGwrYOgOSd2XoOoH/0l02lBVHGZ+z9JCt9/LSGO8iTLIbJlIhZF6ObsAE 3rKmd3fARod4rh5yqhO0oSUEjyO1pmt7 -----END CERTIFICATE-----Generated at Sat May 31 17:46:29 2025 by rpki-client