$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: U9z2eYzgpPpr07ReH983FtDTLfF6krzf8/P5iv7T2vo= Subject key identifier: E2:27:5E:26:B2:98:AE:51:A1:C0:65:D2:FA:D5:A3:55:95:43:15:B3 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0789 Signing time: Fri 08 Aug 2025 21:50:17 +0000 Manifest this update: Fri 08 Aug 2025 21:50:17 +0000 Manifest next update: Fri 15 Aug 2025 21:50:17 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: 0Nv6NUqH8gC4uVFmRV84jH4SsozRMV9OxztPfaTE5bU=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Aug 8 21:50:17 2025 GMT Not After : Aug 15 21:50:17 2025 GMT Subject: CN=68967119-e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:2d:0f:5d:87:1d:ad:bc:e8:09:7d:11:04: bd:01:87:1d:f2:ac:d9:67:00:ba:14:04:83:a4:4c: 7c:1e:e3:25:bb:f7:e3:bd:2a:43:dd:6e:98:a4:5e: e8:60:6d:b8:7d:12:4c:f1:3a:aa:f0:da:95:2d:d1: 7d:4a:07:97:b6:4f:e7:d6:78:12:10:bc:86:38:8e: f8:1d:2a:45:e3:47:a8:92:55:6b:7d:6d:53:2d:d0: be:f6:4b:3a:ab:8f:64:f3:49:4d:a6:1d:88:27:50: 61:f9:0d:35:d4:c7:af:36:2c:12:a1:b8:6d:ca:02: b1:1b:8c:ed:69:c3:e0:70:80:24:8f:5e:cf:0e:3a: 68:33:1e:3e:46:4b:50:ca:3c:49:ac:32:a5:08:98: d6:ae:13:fe:d0:b1:f1:1e:79:e5:b4:67:f8:50:80: 35:8a:c5:cb:22:78:3e:de:9c:89:7e:bf:f8:c3:f1: 1a:ca:97:fa:d7:3f:d2:fa:5f:fd:c3:c4:c9:6c:52: e0:18:33:90:a3:9f:f4:82:bf:21:7d:79:c3:06:b8: 19:08:2b:49:d3:9f:52:db:49:45:97:37:16:8a:38: 1b:3f:c1:1c:e3:ad:6d:df:e5:56:dd:76:b1:dc:b8: b3:1e:c2:90:de:69:12:c9:08:d1:c6:d3:b9:6e:9f: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:27:5E:26:B2:98:AE:51:A1:C0:65:D2:FA:D5:A3:55:95:43:15:B3 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:bc:30:aa:32:b2:fb:63:2f:2e:f5:be:ef:a8:e0:54:d2: dc:3b:57:47:df:ab:01:fd:37:ad:2d:47:8c:bd:8a:88:fd:99: 52:cf:bb:21:e8:73:97:b2:52:37:d5:d4:34:c5:81:d4:3b:dc: 11:c6:74:ef:fe:aa:70:76:6f:e5:2a:0f:f7:7e:d2:17:59:ec: 36:f2:61:09:26:a5:e3:3a:90:58:86:1d:dc:da:3d:3b:8b:f3: e3:da:49:cd:c5:85:91:a3:90:77:90:50:4b:1f:d8:c6:ff:d3: 8f:0b:b7:48:41:76:d5:7a:a7:79:f0:a4:8c:86:eb:4c:ab:3c: 5e:1e:b8:28:39:fd:c9:a2:75:a1:24:12:bd:4a:7b:9c:93:84: 36:c5:7f:fd:8a:a2:6c:a5:f6:60:32:d6:67:0c:79:5d:b2:54: ad:a4:b7:66:7a:a4:a2:70:79:ca:9a:6a:69:f9:a7:40:02:12: a7:80:f0:0c:f8:2f:28:b3:3b:02:ea:7a:47:db:3c:8b:6f:b4: c7:41:76:c1:52:3b:da:4c:de:0e:a7:b3:f1:f8:6e:42:35:9f: 2f:4e:e0:19:17:1e:b7:73:ed:1d:4f:87:76:f9:b6:74:84:1c: 2b:d0:2c:e3:99:ab:d1:48:0f:ec:a8:ad:f2:0b:63:91:ee:ba: 5a:43:ec:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwODA4MjE1MDE3WhcNMjUwODE1MjE1MDE3WjAYMRYwFAYD VQQDEw02ODk2NzExOS1lNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjQtD12HHa286Al9EQS9AYcd8qzZZwC6FASDpEx8HuMlu/fjvSpD3W6YpF7o YG24fRJM8Tqq8NqVLdF9SgeXtk/n1ngSELyGOI74HSpF40eoklVrfW1TLdC+9ks6 q49k80lNph2IJ1Bh+Q011MevNiwSobhtygKxG4ztacPgcIAkj17PDjpoMx4+RktQ yjxJrDKlCJjWrhP+0LHxHnnltGf4UIA1isXLIng+3pyJfr/4w/Eaypf61z/S+l/9 w8TJbFLgGDOQo5/0gr8hfXnDBrgZCCtJ059S20lFlzcWijgbP8Ec461t3+VW3Xax 3LizHsKQ3mkSyQjRxtO5bp9PoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOInXiay mK5RocBl0vrVo1WVQxWzMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOnLwwqjKy+2MvLvW+76jgVNLcO1dH36sB/TetLUeMvYqI/ZlSz7sh 6HOXslI31dQ0xYHUO9wRxnTv/qpwdm/lKg/3ftIXWew28mEJJqXjOpBYhh3c2j07 i/Pj2knNxYWRo5B3kFBLH9jG/9OPC7dIQXbVeqd58KSMhutMqzxeHrgoOf3JonWh JBK9Snuck4Q2xX/9iqJspfZgMtZnDHldslStpLdmeqSicHnKmmpp+adAAhKngPAM +C8oszsC6npH2zyLb7THQXbBUjvaTN4Op7Px+G5CNZ8vTuAZFx63c+0dT4d2+bZ0 hBwr0CzjmavRSA/sqK3yC2OR7rpaQ+yJ -----END CERTIFICATE-----Generated at Sat Aug 9 02:50:27 2025 by rpki-client