$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: cFja5FnUEjtXnIhezQcNyTzjI3q2tWFVvWQ5v0+3bdg= Subject key identifier: 52:62:FD:33:5A:E0:F8:9C:A2:E5:3F:EA:33:A0:A4:23:9B:93:F6:AF Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 3534 Signing time: Mon 08 Sep 2025 14:51:33 +0000 Manifest this update: Mon 08 Sep 2025 14:51:33 +0000 Manifest next update: Mon 15 Sep 2025 14:51:33 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: XnxulKnpBCCh9UXsd7JKGEgZMGXr+d5eqaCmzp59HNY=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=) 4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=) 5: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=) 6: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=) 7: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=) 8: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=) 9: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13823 (0x35ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Sep 8 14:51:33 2025 GMT Not After : Sep 15 14:51:33 2025 GMT Subject: CN=68beed75-2d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:e5:90:08:16:17:a1:3a:b3:57:2d:11:29: 04:e9:86:fa:a5:7a:55:e8:8d:06:1f:b2:17:ff:3f: 7f:9c:b3:e5:5b:18:e3:34:9e:0e:30:c4:1d:d1:af: a9:fd:69:e6:ca:c7:1d:54:ca:0a:f5:21:9e:f9:0f: be:ad:05:cf:09:21:f8:aa:e5:a5:01:59:c3:c9:81: 19:18:b1:57:12:d9:a5:35:dc:b7:40:0f:46:b7:94: 91:17:ff:a5:5f:5f:c4:e0:a5:03:d9:5d:d3:56:fa: bb:8f:35:dc:35:8f:ba:45:0e:e0:42:a7:4d:49:6f: e7:ed:20:38:c2:ae:ec:e7:ae:63:ba:2f:f2:a2:7f: 7e:ca:7e:47:12:6c:cd:a0:a2:73:e8:90:1d:ae:38: f5:05:d2:21:a3:29:49:c5:66:25:a8:49:22:f7:2a: 7e:32:5d:a0:3a:3b:57:c1:92:66:dd:c4:e1:33:50: 0f:bc:30:3a:c1:8c:a5:16:aa:7f:c0:e9:06:b6:76: 65:a9:6a:0e:e4:9f:fe:a0:1a:27:99:03:6f:38:3b: 28:46:fd:f4:95:37:e7:0d:20:0f:85:7a:9f:33:d5: c4:e1:07:0a:33:3b:e6:ad:78:8c:06:52:68:d1:c8: 75:53:12:94:d9:aa:66:9f:6c:75:4a:61:b3:47:c5: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:FD:33:5A:E0:F8:9C:A2:E5:3F:EA:33:A0:A4:23:9B:93:F6:AF X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ff:f1:f8:77:66:0a:96:bd:a6:b1:e1:4f:a1:d4:c8:3e:c7: ca:db:d1:2a:ef:82:00:07:37:dc:e7:73:b9:2b:60:67:07:80: 21:e2:12:be:ca:bd:ad:dc:c3:cd:c4:60:3b:79:f6:a4:39:2e: bd:8d:d1:5a:c8:c8:78:33:7f:be:46:37:c6:84:1a:cd:94:d0: 40:0b:a6:53:6c:3e:2e:c7:44:97:46:e3:7d:85:4b:e1:b4:e6: 1b:c1:78:c6:7d:3d:99:df:2d:79:b1:79:ee:e2:3b:34:fa:8b: 9b:53:2c:ef:99:f3:9e:ce:0e:dd:a1:9a:ea:f0:a1:86:d8:69: c0:19:e5:c7:f3:ec:e5:ec:0e:7e:3f:7a:6e:f5:90:a4:5a:53: ab:da:4d:9d:d0:f8:20:f9:5e:57:fd:2b:68:c7:10:56:8f:c3: f0:2c:8b:72:a3:14:16:5d:52:b9:25:6a:bb:08:ba:9f:22:2b: 01:fd:4e:f6:8f:8d:91:ab:c5:8d:10:77:eb:78:9f:ac:d4:01: d1:b5:98:7e:6d:86:1c:96:b9:28:bf:c1:ad:c2:90:5e:83:55: c6:4d:2b:8e:83:4d:82:61:9d:3d:49:de:ff:fd:c0:1a:11:6f: ea:31:c1:b4:89:37:53:50:cc:c4:55:53:fa:af:cc:86:4c:7a: a9:58:14:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwOTA4MTQ1MTMzWhcNMjUwOTE1MTQ1MTMzWjAYMRYwFAYD VQQDEw02OGJlZWQ3NS0yZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUPlkAgWF6E6s1ctESkE6Yb6pXpV6I0GH7IX/z9/nLPlWxjjNJ4OMMQd0a+p /WnmyscdVMoK9SGe+Q++rQXPCSH4quWlAVnDyYEZGLFXEtmlNdy3QA9Gt5SRF/+l X1/E4KUD2V3TVvq7jzXcNY+6RQ7gQqdNSW/n7SA4wq7s565jui/yon9+yn5HEmzN oKJz6JAdrjj1BdIhoylJxWYlqEki9yp+Ml2gOjtXwZJm3cThM1APvDA6wYylFqp/ wOkGtnZlqWoO5J/+oBonmQNvODsoRv30lTfnDSAPhXqfM9XE4QcKMzvmrXiMBlJo 0ch1UxKU2apmn2x1SmGzR8VeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJi/TNa 4PicouU/6jOgpCObk/avMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH//H4d2YKlr2mseFPodTIPsfK29Eq74IABzfc53O5K2BnB4Ah4hK+ yr2t3MPNxGA7efakOS69jdFayMh4M3++RjfGhBrNlNBAC6ZTbD4ux0SXRuN9hUvh tOYbwXjGfT2Z3y15sXnu4js0+oubUyzvmfOezg7doZrq8KGG2GnAGeXH8+zl7A5+ P3pu9ZCkWlOr2k2d0Pgg+V5X/StoxxBWj8PwLItyoxQWXVK5JWq7CLqfIisB/U72 j42Rq8WNEHfreJ+s1AHRtZh+bYYclrkov8GtwpBeg1XGTSuOg02CYZ09Sd7//cAa EW/qMcG0iTdTUMzEVVP6r8yGTHqpWBTF -----END CERTIFICATE-----Generated at Wed Sep 10 14:04:28 2025 by rpki-client