$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: mT0TNTLRXkka8UpIRb6WEFxiK/qQw8uAZ34sQP40gzk= Subject key identifier: BA:89:E9:DD:A9:A0:C5:B5:D6:5D:EA:78:5F:B3:E8:C9:72:73:20:85 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0754 Signing time: Thu 24 Apr 2025 21:25:07 +0000 Manifest this update: Thu 24 Apr 2025 21:25:07 +0000 Manifest next update: Thu 01 May 2025 21:25:07 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: TE2xRVQXE5nYRdQmroar3qwV80QMyNw25K5x39lF95Y=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Apr 24 21:25:07 2025 GMT Not After : May 1 21:25:07 2025 GMT Subject: CN=680aac33-b8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:84:1a:d3:df:4c:29:2c:d0:93:b5:33:b4: 3b:72:34:20:31:fc:f9:02:5b:c3:d6:23:58:03:1f: e1:f2:29:4d:d8:c1:b0:05:a4:a0:03:b5:df:b5:85: e2:00:2c:3e:1a:7d:5f:44:29:79:15:09:c7:6d:04: da:e0:99:92:28:63:b0:cd:5b:33:ef:e5:01:95:85: c8:40:4a:3b:06:24:af:ed:cd:db:24:0f:05:54:cb: f5:33:25:bd:e3:ec:29:46:4c:14:5d:9a:16:c7:bf: 8d:e3:e1:72:3e:77:ba:8b:27:6b:c6:6c:ba:d3:ab: 3b:5f:2b:32:8f:eb:cd:87:01:8e:14:9d:89:2b:b1: 63:a9:11:4b:34:cf:4f:84:fb:28:ae:81:54:a0:90: 99:0d:82:8c:24:72:49:3a:f1:aa:66:cb:9e:d1:13: 3f:c0:61:a5:dd:66:d8:67:42:71:be:a8:83:bb:49: 0c:98:b0:63:16:95:4e:19:35:d3:fc:6b:41:7a:c6: 07:b7:ed:a3:43:7e:50:51:c6:fa:c0:ea:a9:c1:8e: 9a:21:9a:de:b6:e3:dc:59:e2:7b:2b:68:08:f2:73: 26:d2:b1:3f:c9:49:2b:e0:61:86:8e:9e:22:d5:f3: 18:be:fa:4f:2d:bc:a6:a7:11:75:7c:9b:26:ca:e1: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:89:E9:DD:A9:A0:C5:B5:D6:5D:EA:78:5F:B3:E8:C9:72:73:20:85 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:05:7a:8c:a6:7a:60:9c:48:17:13:82:0d:08:ae:b3:34:b0: 2d:c8:86:f7:61:8c:7f:4a:1c:89:06:f6:97:f7:36:0d:d3:e1: 8f:02:cc:ca:c5:f0:cb:dd:ad:4b:f2:9e:03:25:ca:5f:7d:dc: eb:33:82:cc:c8:67:6a:03:7b:87:c8:ed:b0:9f:73:8c:c6:3f: 2c:15:50:ea:38:07:f3:bf:b5:bd:a2:a4:09:56:c8:b7:9e:e3: b0:b8:9a:37:20:9a:9b:78:ad:39:32:dd:04:b3:ae:52:30:ea: 19:f5:67:59:60:bf:a5:c8:d5:b0:ae:8f:bd:36:51:fb:2a:54: 69:45:01:69:72:59:03:fa:74:3b:f3:06:59:33:54:73:b0:31: db:56:1e:8b:82:fd:d0:f6:25:a5:0b:ad:71:cc:3a:2c:de:9f: c2:32:8b:62:94:43:d2:1e:82:0e:72:a1:a2:5a:01:31:3d:33: 3b:29:80:59:b5:af:eb:4b:9d:9a:be:3d:dd:aa:4f:f3:d7:d3: b4:86:f3:45:15:77:5b:fd:ea:33:4b:4a:ea:58:8b:74:99:1f: 82:64:c4:fc:2a:2c:15:b8:21:2c:46:d8:9f:13:94:8d:2a:a7: a9:54:86:41:cf:46:49:10:ab:31:63:e0:ff:7b:7d:0f:35:6e: e8:0d:47:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwNDI0MjEyNTA3WhcNMjUwNTAxMjEyNTA3WjAYMRYwFAYD VQQDEw02ODBhYWMzMy1iOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4emEGtPfTCks0JO1M7Q7cjQgMfz5AlvD1iNYAx/h8ilN2MGwBaSgA7XftYXi ACw+Gn1fRCl5FQnHbQTa4JmSKGOwzVsz7+UBlYXIQEo7BiSv7c3bJA8FVMv1MyW9 4+wpRkwUXZoWx7+N4+FyPne6iydrxmy606s7Xysyj+vNhwGOFJ2JK7FjqRFLNM9P hPsoroFUoJCZDYKMJHJJOvGqZsue0RM/wGGl3WbYZ0JxvqiDu0kMmLBjFpVOGTXT /GtBesYHt+2jQ35QUcb6wOqpwY6aIZretuPcWeJ7K2gI8nMm0rE/yUkr4GGGjp4i 1fMYvvpPLbympxF1fJsmyuG9RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqJ6d2p oMW11l3qeF+z6MlycyCFMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1BXqMpnpgnEgXE4INCK6zNLAtyIb3YYx/ShyJBvaX9zYN0+GPAszK xfDL3a1L8p4DJcpffdzrM4LMyGdqA3uHyO2wn3OMxj8sFVDqOAfzv7W9oqQJVsi3 nuOwuJo3IJqbeK05Mt0Es65SMOoZ9WdZYL+lyNWwro+9NlH7KlRpRQFpclkD+nQ7 8wZZM1RzsDHbVh6Lgv3Q9iWlC61xzDos3p/CMotilEPSHoIOcqGiWgExPTM7KYBZ ta/rS52avj3dqk/z19O0hvNFFXdb/eozS0rqWIt0mR+CZMT8KiwVuCEsRtifE5SN KqepVIZBz0ZJEKsxY+D/e30PNW7oDUcQ -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:54 2025 by rpki-client