$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: B9TBxnxVOK5UTqAdqzOlayigVDLiiZwj/4Fno1vseqA= Subject key identifier: 7D:59:47:EC:F1:33:D5:62:C2:C2:70:89:29:74:A7:3A:CF:65:AD:72 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0775 Signing time: Mon 30 Jun 2025 21:45:59 +0000 Manifest this update: Mon 30 Jun 2025 21:45:58 +0000 Manifest next update: Mon 07 Jul 2025 21:45:58 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: mwtryqYHev7dVFa/yVltHHr/KlIZ0l6JKpGXjMcXci4=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Jun 30 21:45:58 2025 GMT Not After : Jul 7 21:45:58 2025 GMT Subject: CN=68630596-b4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:b6:19:04:03:50:05:40:85:b8:59:93:91: 5e:1e:bd:8c:b5:89:37:f4:53:f9:58:8a:b9:57:81: 94:e0:b8:f3:bf:f2:1b:08:be:e9:87:3c:3b:fe:48: 55:40:69:9f:e9:e4:e3:f4:29:bd:69:7a:6d:ce:1f: 53:4c:cc:44:27:a9:cf:3c:5c:35:05:20:3c:7c:ee: 48:4a:f2:14:91:e1:fa:3a:36:03:77:43:ef:bb:e7: 94:82:15:8c:33:13:c7:77:5a:81:84:e3:08:06:ac: a3:06:14:ca:20:57:39:25:c1:f1:a5:1e:4f:b3:46: 0f:de:d4:4b:39:c1:a2:29:93:da:d9:8e:d2:15:15: 78:94:8e:f9:1a:db:fd:61:b1:86:e2:77:3d:9a:80: 21:4b:57:63:24:93:d7:9b:29:2a:b5:57:1f:c9:5b: ff:fd:e9:68:32:36:7c:e8:6d:82:ed:82:94:ed:8e: cb:e2:5e:45:d1:dc:5b:0e:c9:e5:f9:5c:8c:09:09: 0d:2f:97:12:67:9a:57:fc:b1:37:cd:dc:7e:72:f9: 0d:f8:d6:85:bc:a9:1a:c9:61:9e:c6:ee:68:f3:10: 0b:aa:11:95:3d:90:16:83:1d:3a:86:56:10:51:d6: 92:16:8a:a0:46:3b:ad:d4:1f:bc:ed:2b:19:78:bd: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:47:EC:F1:33:D5:62:C2:C2:70:89:29:74:A7:3A:CF:65:AD:72 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:11:bf:45:29:08:47:aa:ea:38:8e:a7:aa:4e:80:c1:c1:a9: 67:8f:49:b7:d9:e3:d6:9a:df:3d:1b:44:be:b8:0c:24:90:d7: 9f:98:ab:7b:88:b4:98:e0:85:f3:ef:22:66:89:f2:3f:c5:df: f7:c1:70:fe:6f:b2:29:76:14:5d:ae:88:47:a2:67:35:cb:d9: e2:a2:1b:94:e8:5c:d9:0b:0f:68:b2:c2:e8:ea:4f:98:8f:0b: 0a:6e:dd:26:61:82:67:79:d8:95:53:3d:0c:31:53:22:b1:75: 63:91:d7:06:74:9f:06:ac:d4:c3:3d:bd:fe:dc:6b:59:45:d3: 17:86:2a:bd:53:c4:38:8a:c3:9e:6b:6a:a4:6c:1d:76:50:01: 61:43:74:70:0a:89:cb:07:c1:88:0d:b5:b4:41:3d:16:b4:27: 0a:cc:2c:d2:45:a6:8b:30:b3:e5:b1:49:79:42:87:09:da:34: b9:68:53:1d:87:eb:28:28:9a:5f:6d:72:02:78:f7:23:c2:32: a0:cf:05:e2:07:47:c1:92:62:bd:34:61:84:e9:90:2c:92:18: fa:0d:0e:bf:68:76:37:81:7c:9a:14:f1:9b:fe:35:00:b3:3b: 80:1e:c9:7f:cb:ce:9d:86:d1:74:fe:85:b2:42:ec:0b:8c:f4: 44:d0:51:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwNjMwMjE0NTU4WhcNMjUwNzA3MjE0NTU4WjAYMRYwFAYD VQQDEw02ODYzMDU5Ni1iNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg+2GQQDUAVAhbhZk5FeHr2MtYk39FP5WIq5V4GU4Ljzv/IbCL7phzw7/khV QGmf6eTj9Cm9aXptzh9TTMxEJ6nPPFw1BSA8fO5ISvIUkeH6OjYDd0Pvu+eUghWM MxPHd1qBhOMIBqyjBhTKIFc5JcHxpR5Ps0YP3tRLOcGiKZPa2Y7SFRV4lI75Gtv9 YbGG4nc9moAhS1djJJPXmykqtVcfyVv//eloMjZ86G2C7YKU7Y7L4l5F0dxbDsnl +VyMCQkNL5cSZ5pX/LE3zdx+cvkN+NaFvKkayWGexu5o8xALqhGVPZAWgx06hlYQ UdaSFoqgRjut1B+87SsZeL13OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1ZR+zx M9ViwsJwiSl0pzrPZa1yMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Eb9FKQhHquo4jqeqToDBwalnj0m32ePWmt89G0S+uAwkkNefmKt7 iLSY4IXz7yJmifI/xd/3wXD+b7IpdhRdrohHomc1y9niohuU6FzZCw9ossLo6k+Y jwsKbt0mYYJnediVUz0MMVMisXVjkdcGdJ8GrNTDPb3+3GtZRdMXhiq9U8Q4isOe a2qkbB12UAFhQ3RwConLB8GIDbW0QT0WtCcKzCzSRaaLMLPlsUl5QocJ2jS5aFMd h+soKJpfbXICePcjwjKgzwXiB0fBkmK9NGGE6ZAskhj6DQ6/aHY3gXyaFPGb/jUA szuAHsl/y86dhtF0/oWyQuwLjPRE0FGr -----END CERTIFICATE-----Generated at Wed Jul 2 16:34:17 2025 by rpki-client