$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: t8+vct5FJxrPJf0f0E7JUoT4bX6XREWiUMu26Odnc+I= Subject key identifier: 00:94:96:CB:E8:7F:8C:57:8C:6D:37:4C:B8:D6:6E:19:37:35:ED:A5 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 07AD Signing time: Sat 18 Oct 2025 22:39:33 +0000 Manifest this update: Sat 18 Oct 2025 22:39:33 +0000 Manifest next update: Sat 25 Oct 2025 22:39:33 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: LUnxq8zzdAFUwADc+vUKuPK9K/0mncBLQRvI9gN+g3g=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Oct 18 22:39:33 2025 GMT Not After : Oct 25 22:39:33 2025 GMT Subject: CN=68f41725-a04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:0a:a3:01:77:70:68:fa:e9:0c:dd:09:46: 68:c4:89:8e:40:73:93:c6:dc:d9:05:2f:3b:b2:62: c2:05:da:6f:8f:10:45:ae:c5:f2:92:a1:27:5f:53: 3e:fd:8e:98:1c:a0:5b:2b:19:44:9b:49:11:3a:bf: 03:2f:a9:b5:c3:76:f7:61:7a:97:0b:ce:51:41:fe: 06:cc:fd:dc:a7:3d:53:99:f4:39:47:0e:4a:9d:b6: ac:02:a6:80:86:e1:e7:35:b5:ee:6b:e4:51:f7:1a: f0:a9:3c:91:8a:d4:81:aa:ab:2f:d6:52:cb:ae:88: de:7a:22:6f:fb:21:2a:93:32:b4:eb:b7:94:d8:16: 5c:d6:17:02:63:69:82:ed:db:86:78:28:d6:80:30: 75:66:a8:7a:f8:72:7e:43:a7:24:cd:76:bc:4c:7c: 08:6e:1d:c8:8a:87:a4:38:e2:3f:89:b0:8d:44:e3: ee:78:8d:f9:cc:06:40:1c:70:ea:69:1e:93:ad:16: 9a:80:9b:54:aa:16:ad:f3:90:62:ef:f7:f7:ec:ff: 2b:3d:22:fd:3d:97:8b:d9:88:f5:e9:2d:63:5d:55: 1e:ff:3b:f9:51:23:b5:19:19:07:04:0b:d8:da:d7: ab:d4:10:03:e2:f9:c3:c4:f2:e9:bf:f3:42:55:21: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:94:96:CB:E8:7F:8C:57:8C:6D:37:4C:B8:D6:6E:19:37:35:ED:A5 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:09:65:23:1a:e9:0b:3b:f2:1b:87:75:7e:7b:68:02:cd:05: c0:99:51:f7:2b:89:20:d7:39:d9:bd:78:63:d3:ed:ec:0b:74: 2d:df:d5:64:e0:f0:30:9d:bf:9d:4e:24:92:c0:f2:ae:85:57: f1:4b:b2:87:14:00:6f:65:f5:e0:fc:b0:6e:e0:3d:dc:1d:b8: 02:59:b3:51:32:30:8d:a6:fe:53:3d:d2:d5:13:dc:d5:50:73: 00:69:c9:79:63:12:0b:8a:50:e5:40:d9:5a:59:3b:09:12:d6: ab:65:95:e7:36:ae:8b:2e:83:32:4d:dd:44:c6:5a:a4:b3:65: f8:37:0d:db:a2:3d:25:12:db:65:5d:70:bf:0a:87:19:c8:7c: ab:d3:ba:d1:21:c1:40:97:66:cd:9b:04:be:2c:63:3b:22:81: 70:d6:53:57:c2:f7:6d:ec:57:cc:91:12:be:ee:e3:3b:07:8f: b9:c8:17:b4:2e:9f:42:72:68:07:db:74:21:92:2d:67:c1:e4: 0c:fb:35:03:44:e5:d5:80:2d:89:e9:bb:0f:47:84:d8:1e:06: 8e:6a:46:c9:21:8b:0f:89:ea:a0:7d:c8:90:93:21:ae:2b:75: c0:cc:6b:c5:53:5f:5c:b2:de:56:6c:9d:02:99:e5:0f:c1:be: 3d:33:0a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUxMDE4MjIzOTMzWhcNMjUxMDI1MjIzOTMzWjAYMRYwFAYD VQQDEw02OGY0MTcyNS1hMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyioKowF3cGj66QzdCUZoxImOQHOTxtzZBS87smLCBdpvjxBFrsXykqEnX1M+ /Y6YHKBbKxlEm0kROr8DL6m1w3b3YXqXC85RQf4GzP3cpz1TmfQ5Rw5KnbasAqaA huHnNbXua+RR9xrwqTyRitSBqqsv1lLLrojeeiJv+yEqkzK067eU2BZc1hcCY2mC 7duGeCjWgDB1Zqh6+HJ+Q6ckzXa8THwIbh3IioekOOI/ibCNROPueI35zAZAHHDq aR6TrRaagJtUqhat85Bi7/f37P8rPSL9PZeL2Yj16S1jXVUe/zv5USO1GRkHBAvY 2ter1BAD4vnDxPLpv/NCVSHWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACUlsvo f4xXjG03TLjWbhk3Ne2lMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCECWUjGukLO/Ibh3V+e2gCzQXAmVH3K4kg1znZvXhj0+3sC3Qt39Vk 4PAwnb+dTiSSwPKuhVfxS7KHFABvZfXg/LBu4D3cHbgCWbNRMjCNpv5TPdLVE9zV UHMAacl5YxILilDlQNlaWTsJEtarZZXnNq6LLoMyTd1Exlqks2X4Nw3boj0lEttl XXC/CocZyHyr07rRIcFAl2bNmwS+LGM7IoFw1lNXwvdt7FfMkRK+7uM7B4+5yBe0 Lp9CcmgH23Qhki1nweQM+zUDROXVgC2J6bsPR4TYHgaOakbJIYsPieqgfciQkyGu K3XAzGvFU19cst5WbJ0CmeUPwb49Mwrw -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:40 2025 by rpki-client