$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: RNSVuHb2xTjoOhC9crq1LImU4xf+JFqdeb8BkKMS2RQ= Subject key identifier: 0B:37:75:FD:92:06:76:AD:D8:F5:C9:1E:64:04:63:EF:E6:80:4A:FF Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 354C Signing time: Sun 26 Oct 2025 14:56:29 +0000 Manifest this update: Sun 26 Oct 2025 14:56:28 +0000 Manifest next update: Sun 02 Nov 2025 14:56:28 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: LBLTS3hyrTo7oC3SgZhcvIPZH0J2kNr9FQLddZBGHHk=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13847 (0x3617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Oct 26 14:56:28 2025 GMT Not After : Nov 2 14:56:28 2025 GMT Subject: CN=68fe369c-7ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:2d:b5:f4:1c:88:f0:77:d6:8c:90:b2:5b: b8:c7:c9:9e:5b:37:3d:81:b1:a7:6d:4b:5f:0d:e0: e2:30:da:72:90:4a:43:2e:97:e0:2d:a0:34:8b:87: b9:e5:92:ee:89:0b:51:0e:23:ae:2c:d9:ad:62:18: 52:06:c6:67:b4:85:20:56:e3:06:e6:05:50:32:f1: b0:ac:12:3e:a6:2c:78:0f:ae:5a:c9:f7:c1:90:98: 67:43:89:49:5e:e9:25:d6:c9:ed:84:9a:f5:0e:63: c5:00:e4:71:06:82:bc:cb:83:75:6c:88:52:86:06: a9:27:4a:1e:bd:25:68:cc:6e:6e:88:06:e5:67:fa: 77:8a:ee:51:d9:de:12:16:33:0d:b6:b0:f0:87:0d: c0:d8:9a:27:31:a7:f1:52:0c:88:c5:65:09:60:bf: 5a:ec:36:c3:55:2e:e9:57:9e:05:7d:3f:9e:18:60: 81:22:03:ae:61:b5:7d:53:17:20:ed:44:0d:70:ad: 92:67:09:30:09:b7:26:81:5a:32:30:ff:69:1f:58: c5:5e:66:c1:d9:d3:ea:b8:b0:a6:d2:05:d7:1c:55: 15:04:ab:60:44:12:7d:ff:82:d2:03:d6:0b:11:8b: 70:0a:c4:08:19:e3:f6:28:df:7b:27:d4:b0:74:cc: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:75:FD:92:06:76:AD:D8:F5:C9:1E:64:04:63:EF:E6:80:4A:FF X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:b5:2d:04:60:ff:d8:24:ad:59:2e:7f:01:aa:42:1c:58: 81:de:bd:3f:18:6b:95:e3:a3:df:c3:d5:42:67:63:83:89:d2: 1b:2e:44:db:ca:4e:fc:23:d4:0b:c7:dd:ee:43:81:e8:b1:62: e2:7d:55:09:fb:b2:d8:bd:76:39:b4:61:d5:f0:36:ec:4a:54: e9:d5:fa:48:b3:61:4c:c3:97:2e:f7:b4:1a:9d:f0:ca:93:d8: 25:32:ce:94:ca:1b:cb:ac:85:f6:28:b0:66:e7:69:d6:79:1e: ee:ec:b8:3e:8a:7b:53:c3:4c:d9:08:aa:fb:cc:d9:33:73:c2: d9:2f:fc:4b:18:bf:bc:d3:c9:57:aa:2f:92:1c:62:bc:da:a4: 05:f6:51:a5:e1:1b:69:7b:29:e9:dc:01:f3:1c:c9:86:92:fc: 33:67:a8:ac:6f:f6:c7:9c:16:6b:95:02:24:66:92:0c:17:00: 25:55:49:8d:38:eb:c7:57:f2:7f:3d:2f:17:28:c9:5e:50:b0: 32:c9:aa:03:aa:39:46:9e:cd:97:fe:86:bc:54:b0:03:50:36: cb:e7:46:2e:69:56:be:dc:6c:54:fa:b6:bd:ac:82:36:37:3d: 2c:48:60:ba:43:5e:8f:91:5a:88:9b:a8:d5:f7:64:3d:a4:bd: d5:9d:75:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUxMDI2MTQ1NjI4WhcNMjUxMTAyMTQ1NjI4WjAYMRYwFAYD VQQDEw02OGZlMzY5Yy03Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruwttfQciPB31oyQslu4x8meWzc9gbGnbUtfDeDiMNpykEpDLpfgLaA0i4e5 5ZLuiQtRDiOuLNmtYhhSBsZntIUgVuMG5gVQMvGwrBI+pix4D65ayffBkJhnQ4lJ Xukl1snthJr1DmPFAORxBoK8y4N1bIhShgapJ0oevSVozG5uiAblZ/p3iu5R2d4S FjMNtrDwhw3A2JonMafxUgyIxWUJYL9a7DbDVS7pV54FfT+eGGCBIgOuYbV9Uxcg 7UQNcK2SZwkwCbcmgVoyMP9pH1jFXmbB2dPquLCm0gXXHFUVBKtgRBJ9/4LSA9YL EYtwCsQIGeP2KN97J9SwdMwNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs3df2S Bnat2PXJHmQEY+/mgEr/MB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4urUtBGD/2CStWS5/AapCHFiB3r0/GGuV46Pfw9VCZ2ODidIbLkTb yk78I9QLx93uQ4HosWLifVUJ+7LYvXY5tGHV8DbsSlTp1fpIs2FMw5cu97QanfDK k9glMs6UyhvLrIX2KLBm52nWeR7u7Lg+intTw0zZCKr7zNkzc8LZL/xLGL+808lX qi+SHGK82qQF9lGl4Rtpeynp3AHzHMmGkvwzZ6isb/bHnBZrlQIkZpIMFwAlVUmN OOvHV/J/PS8XKMleULAyyaoDqjlGns2X/oa8VLADUDbL50YuaVa+3GxU+ra9rII2 Nz0sSGC6Q16PkVqIm6jV92Q9pL3VnXUC -----END CERTIFICATE-----Generated at Sun Oct 26 17:47:10 2025 by rpki-client