$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: CwiKw+pt/VPUZBt7jgoIHztzLfYPZsjt7nviBPHwsMU= Subject key identifier: 2C:AE:D2:2D:44:4D:71:02:05:8F:D5:59:F1:85:94:D4:B3:F7:4A:09 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 34E5 Signing time: Mon 28 Apr 2025 15:00:02 +0000 Manifest this update: Mon 28 Apr 2025 15:00:01 +0000 Manifest next update: Mon 05 May 2025 15:00:01 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: Z2uP0mlewip5iCXxOVjCnnwH8XBLZcoJaD+LiKsYEew=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 39krsnUanSXWM9ezU+4+Lqn6CnDHjeKNmvCOYJy+5/w=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: /UQcwZPg26VqsQtvRJJDSvHXzuNexFFzMoF+ofGjcoo=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=) 9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13729 (0x35a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Apr 28 15:00:01 2025 GMT Not After : May 5 15:00:01 2025 GMT Subject: CN=680f97f1-ef28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:bf:d4:2b:22:f7:39:65:a3:e2:60:d1:47: 75:ec:b2:6f:eb:6c:a4:f8:dd:99:68:b7:46:06:20: 5b:1a:65:15:1a:2e:a8:77:b3:ed:cc:45:34:8c:25: 9a:50:7c:ea:01:17:01:c7:cf:86:54:fb:aa:96:cf: f3:3f:48:16:4c:50:19:00:92:31:3c:2f:98:27:53: 5d:e1:a9:44:78:ad:64:e3:a2:83:16:63:59:cf:bb: 14:13:3b:9c:d0:97:ec:88:36:61:41:a1:c2:e0:31: 67:bf:14:07:4a:00:26:a1:3f:f9:38:0a:76:a5:38: bc:a3:21:f0:9e:af:12:7b:aa:fa:47:fa:08:15:dd: 5e:2b:29:22:47:fe:3f:55:13:65:8b:74:80:99:9c: 12:02:16:04:27:f2:5d:d0:6d:bd:5d:4c:04:33:74: 92:3b:c8:6d:ec:55:2c:fe:16:27:84:17:04:ed:e1: 1a:95:41:ef:b8:66:bb:07:f6:e8:eb:36:83:13:c1: 03:2d:e7:07:c8:49:e3:d7:5c:19:3b:fd:da:b8:ee: 41:00:70:1b:f2:8a:7b:a8:49:6f:71:d5:b0:b1:d2: a0:a7:6f:6a:6c:23:d3:d9:e4:0d:a8:42:a9:d7:e7: 76:8a:3b:a0:55:91:ba:0e:cc:07:e9:c5:78:16:a8: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:D2:2D:44:4D:71:02:05:8F:D5:59:F1:85:94:D4:B3:F7:4A:09 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5d:9d:19:19:52:9c:63:35:db:bd:ac:f3:3d:ec:4a:c5:c9: 24:38:7a:ee:df:63:a5:86:74:7e:df:2f:75:a0:d1:b9:65:6f: ef:f0:65:9d:3f:e5:d3:be:ee:48:34:14:9b:3a:20:61:d4:aa: f4:9a:10:1c:7c:b7:3a:a2:f5:d5:f3:6a:02:cd:ab:3b:55:df: fd:53:f3:c6:e7:50:8c:7f:2f:32:ff:aa:f4:c0:9b:d2:69:dc: 80:b1:20:80:27:51:5e:c7:a3:b6:8f:3d:8b:cb:19:e1:af:47: ac:7e:86:68:33:73:08:ce:89:3c:08:bf:71:c8:52:eb:71:b3: 84:2c:0a:16:92:09:6c:93:60:47:64:b2:5e:cf:ff:a2:7e:98: f8:6f:41:81:df:ba:dd:7f:1b:14:11:f1:20:80:09:a9:98:97: d3:58:9f:fd:56:8f:20:40:8a:ce:6b:e2:95:4a:06:3a:ae:e5: 75:fe:59:28:d4:6a:c5:97:cf:c3:90:91:69:7a:ed:71:bb:d6: d5:ad:e9:88:fa:1e:f2:f6:e7:f2:17:79:7e:94:b4:ae:de:73: f4:4d:af:ac:62:9f:bf:3b:b8:f1:bd:3b:14:6a:1b:a4:55:bf: 93:37:02:11:5b:45:72:fd:2f:ed:69:c2:07:84:e6:a0:d6:d7: 35:a0:99:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNDI4MTUwMDAxWhcNMjUwNTA1MTUwMDAxWjAYMRYwFAYD VQQDEw02ODBmOTdmMS1lZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeO/1Csi9zllo+Jg0Ud17LJv62yk+N2ZaLdGBiBbGmUVGi6od7PtzEU0jCWa UHzqARcBx8+GVPuqls/zP0gWTFAZAJIxPC+YJ1Nd4alEeK1k46KDFmNZz7sUEzuc 0JfsiDZhQaHC4DFnvxQHSgAmoT/5OAp2pTi8oyHwnq8Se6r6R/oIFd1eKykiR/4/ VRNli3SAmZwSAhYEJ/Jd0G29XUwEM3SSO8ht7FUs/hYnhBcE7eEalUHvuGa7B/bo 6zaDE8EDLecHyEnj11wZO/3auO5BAHAb8op7qElvcdWwsdKgp29qbCPT2eQNqEKp 1+d2ijugVZG6DswH6cV4FqgWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyu0i1E TXECBY/VWfGFlNSz90oJMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPXZ0ZGVKcYzXbvazzPexKxckkOHru32OlhnR+3y91oNG5ZW/v8GWd P+XTvu5INBSbOiBh1Kr0mhAcfLc6ovXV82oCzas7Vd/9U/PG51CMfy8y/6r0wJvS adyAsSCAJ1Fex6O2jz2Lyxnhr0esfoZoM3MIzok8CL9xyFLrcbOELAoWkglsk2BH ZLJez/+ifpj4b0GB37rdfxsUEfEggAmpmJfTWJ/9Vo8gQIrOa+KVSgY6ruV1/lko 1GrFl8/DkJFpeu1xu9bVremI+h7y9ufyF3l+lLSu3nP0Ta+sYp+/O7jxvTsUahuk Vb+TNwIRW0Vy/S/tacIHhOag1tc1oJnL -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net