$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: C4GGpj97F9LcuglJBA03meTYWSy6JC8dUndYksmX0wM= Subject key identifier: 9B:D1:8C:AB:E2:6A:31:8F:75:13:25:04:E5:69:62:9B:CB:76:9A:27 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0773 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 076E Signing time: Mon 16 Jun 2025 21:15:55 +0000 Manifest this update: Mon 16 Jun 2025 21:15:54 +0000 Manifest next update: Mon 23 Jun 2025 21:15:54 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: U7jA+lKa9VJWnz2xX1pcr8ZUuKY7fn1HLHOz3yK0ASk=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1907 (0x773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Jun 16 21:15:54 2025 GMT Not After : Jun 23 21:15:54 2025 GMT Subject: CN=6850898b-4498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:26:26:8a:c0:87:68:a8:67:d6:a5:fe:4a:32: 7e:54:69:29:3b:bc:66:67:fe:7f:db:ce:b2:0d:23: a1:15:a8:6d:cc:b4:57:aa:b2:65:21:83:32:33:a6: bd:e3:04:f5:be:d5:56:5c:1f:0e:f2:6d:32:17:de: 18:89:a7:94:89:ee:75:7b:f5:04:bb:f4:b5:1f:2e: 5d:23:31:37:f0:0a:7f:01:d4:89:68:3a:e8:1f:d7: c8:2f:8b:f7:79:5f:21:91:93:3d:2a:7a:59:52:e2: 0c:e6:c8:dc:49:c5:9a:f4:4b:97:1e:12:98:f6:ea: be:9b:5a:e2:d6:c3:c0:dd:db:57:04:06:78:9c:a5: 3e:d8:1f:db:4e:b0:b3:c4:e2:48:80:31:1c:71:15: 24:0c:7a:c1:d6:12:e4:34:b2:56:a8:36:20:8b:e9: 63:87:35:f4:a8:4e:4a:75:32:66:61:2f:2e:75:21: fd:fb:3d:e6:b8:9f:09:d0:ba:70:3b:c3:f7:e5:81: e0:3f:3e:c7:c7:59:5d:76:51:e8:fc:29:d1:37:3a: 21:5c:0f:3b:3b:c2:b6:c6:7b:84:29:14:95:9b:2c: 0c:b6:b4:c3:19:70:44:6e:d5:c8:05:77:f7:e7:b6: c0:a9:0b:85:0b:23:17:b7:38:fd:a0:03:80:2b:6b: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:8C:AB:E2:6A:31:8F:75:13:25:04:E5:69:62:9B:CB:76:9A:27 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:5d:b0:51:0f:3e:8d:8f:7a:48:04:a9:0c:46:15:7c:2d: c8:08:e6:ab:3f:5a:f5:97:b6:ef:68:e1:ff:98:0d:c8:5d:11: cd:18:4b:65:92:76:d9:2c:f8:36:d8:12:75:f3:bd:2a:d6:9d: ff:94:0f:43:b5:e9:6c:f0:19:42:48:08:34:83:be:96:df:f0: 6a:bf:02:ab:1d:93:52:b8:04:6c:79:84:4d:f7:21:3e:8c:b7: 85:80:59:ae:d3:99:77:8a:50:dc:4f:37:27:4b:91:f5:cc:4e: 8d:73:80:f0:15:a8:fb:0c:67:40:35:1e:f2:47:f3:31:bd:34: 0e:e0:0e:cc:5b:7c:02:2b:46:ab:1c:73:ea:b2:aa:be:7f:fa: 97:dc:fe:89:98:11:8b:94:6f:be:fc:0b:6f:2e:92:ff:0a:c1: b5:e8:1f:bc:c7:20:aa:d2:02:c1:3e:6b:2b:22:8f:c3:95:4d: 0b:e5:1d:75:b2:8e:4d:e4:d5:e1:b8:08:10:66:82:e1:02:48: 9c:01:db:31:cc:a6:28:76:cd:54:e9:fe:9a:03:df:6d:cd:e4: 31:ef:9b:84:b8:3d:1f:70:61:17:93:73:a8:ac:e2:b5:2f:98: da:72:b1:07:83:2d:4d:72:ca:6a:df:70:47:a0:28:8e:73:fe: 5f:7d:7e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwNjE2MjExNTU0WhcNMjUwNjIzMjExNTU0WjAYMRYwFAYD VQQDEw02ODUwODk4Yi00NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CYmisCHaKhn1qX+SjJ+VGkpO7xmZ/5/286yDSOhFahtzLRXqrJlIYMyM6a9 4wT1vtVWXB8O8m0yF94YiaeUie51e/UEu/S1Hy5dIzE38Ap/AdSJaDroH9fIL4v3 eV8hkZM9KnpZUuIM5sjcScWa9EuXHhKY9uq+m1ri1sPA3dtXBAZ4nKU+2B/bTrCz xOJIgDEccRUkDHrB1hLkNLJWqDYgi+ljhzX0qE5KdTJmYS8udSH9+z3muJ8J0Lpw O8P35YHgPz7Hx1lddlHo/CnRNzohXA87O8K2xnuEKRSVmywMtrTDGXBEbtXIBXf3 57bAqQuFCyMXtzj9oAOAK2tMyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvRjKvi ajGPdRMlBOVpYpvLdponMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2l2wUQ8+jY96SASpDEYVfC3ICOarP1r1l7bvaOH/mA3IXRHNGEtl knbZLPg22BJ1870q1p3/lA9Dtels8BlCSAg0g76W3/BqvwKrHZNSuARseYRN9yE+ jLeFgFmu05l3ilDcTzcnS5H1zE6Nc4DwFaj7DGdANR7yR/MxvTQO4A7MW3wCK0ar HHPqsqq+f/qX3P6JmBGLlG++/AtvLpL/CsG16B+8xyCq0gLBPmsrIo/DlU0L5R11 so5N5NXhuAgQZoLhAkicAdsxzKYods1U6f6aA99tzeQx75uEuD0fcGEXk3OorOK1 L5jacrEHgy1Ncspq33BHoCiOc/5ffX4W -----END CERTIFICATE-----Generated at Wed Jun 18 04:50:35 2025 by rpki-client