$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: SFFmuxQmeFtXHMqq4ZBue2UzunfsgMmvnihKmrsHaoA= Subject key identifier: C4:0A:78:A3:E1:1A:87:97:80:23:52:DF:77:9A:F8:9C:9F:22:10:32 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 075C Signing time: Sat 10 May 2025 21:13:52 +0000 Manifest this update: Sat 10 May 2025 21:13:51 +0000 Manifest next update: Sat 17 May 2025 21:13:51 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: ZxESzucxF+exDvtXAwAb4zlcqm3f+fU29qFLoWKRlSY=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: May 10 21:13:51 2025 GMT Not After : May 17 21:13:51 2025 GMT Subject: CN=681fc18f-39cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:52:21:e0:3c:56:e0:b0:22:59:60:34:ba: b6:06:50:91:52:ed:ec:16:4a:4e:3e:42:b5:e5:ea: 96:a1:6c:d2:9d:b5:2f:91:e2:28:c7:63:a2:b7:7e: 3f:08:5b:0e:15:5d:01:bf:30:08:28:11:00:f7:8e: e1:9a:4b:28:29:9f:a7:f5:7f:7e:69:ab:f9:6e:b2: 2b:04:3c:24:4e:ea:b8:31:4a:35:8a:1f:41:1e:08: b2:f3:94:ee:0a:ab:cd:2e:8f:6e:d3:14:14:35:e8: 59:8d:d7:3c:51:a7:b8:ea:39:3d:b1:7f:8f:80:90: ac:69:2f:88:37:b7:01:e0:79:39:5e:7a:c1:70:33: fb:20:fd:7f:73:26:73:36:5c:57:19:15:c8:4e:96: 1b:14:ac:7a:a3:c3:da:3f:cf:4c:bb:ec:6d:31:8c: 8e:4b:d4:21:ad:64:d4:03:25:d4:f0:f5:7d:3d:96: 1f:b9:28:88:ee:9b:61:03:e7:10:f4:a3:88:4b:c3: 14:3f:96:49:9e:72:9a:61:03:3e:98:40:39:31:9d: 68:0c:5a:f4:94:78:31:8c:62:cb:36:f9:c6:00:1b: 79:d3:37:57:6a:13:b9:0a:b2:f5:9c:39:ee:4d:18: 97:b4:af:bd:ba:85:bb:29:d4:e0:02:38:ad:13:e0: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0A:78:A3:E1:1A:87:97:80:23:52:DF:77:9A:F8:9C:9F:22:10:32 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e9:61:27:7c:3e:1b:cc:29:c7:21:2e:8a:d9:fc:bb:91:59: 84:2d:80:9c:46:7b:ad:2a:a5:d1:26:73:e5:d1:71:0a:5d:14: 57:78:c1:84:bd:88:aa:b7:ac:d0:2c:4a:cf:35:33:de:27:6f: 71:44:11:c6:c3:a6:5d:2b:7e:16:13:ac:3c:c5:60:39:ec:c3: 60:42:16:79:dd:06:8b:3b:df:cb:44:41:31:76:0f:0f:10:44: 26:be:b4:93:72:ed:37:ca:b4:60:64:50:ab:7f:21:37:05:4c: d4:c9:08:71:f8:21:82:d0:ea:3c:20:c6:4b:82:09:f1:18:e6: 56:da:b2:3c:78:0b:74:bf:34:7d:41:c1:e4:09:b6:9d:a9:87: 84:9b:eb:de:29:bb:7f:04:7d:1e:1b:1e:3a:84:00:08:ab:6a: 2a:e3:ff:5b:81:20:c2:bb:b5:59:11:ee:35:b3:83:9d:96:35: bf:79:c4:1d:5c:a5:f3:3d:99:99:83:14:b0:28:4b:42:d9:0c: 6c:15:2e:0e:0b:52:c4:04:42:99:93:91:4a:fa:ef:38:d2:62: 5a:5a:6f:93:6c:ff:58:3e:1e:94:d3:9a:e5:2a:1b:da:27:ac: dc:48:8a:a2:fa:dd:94:82:40:ac:d7:ff:3f:1c:da:b2:da:e3: d0:b7:78:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwNTEwMjExMzUxWhcNMjUwNTE3MjExMzUxWjAYMRYwFAYD VQQDEw02ODFmYzE4Zi0zOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMlSIeA8VuCwIllgNLq2BlCRUu3sFkpOPkK15eqWoWzSnbUvkeIox2Oit34/ CFsOFV0BvzAIKBEA947hmksoKZ+n9X9+aav5brIrBDwkTuq4MUo1ih9BHgiy85Tu CqvNLo9u0xQUNehZjdc8Uae46jk9sX+PgJCsaS+IN7cB4Hk5XnrBcDP7IP1/cyZz NlxXGRXITpYbFKx6o8PaP89Mu+xtMYyOS9QhrWTUAyXU8PV9PZYfuSiI7pthA+cQ 9KOIS8MUP5ZJnnKaYQM+mEA5MZ1oDFr0lHgxjGLLNvnGABt50zdXahO5CrL1nDnu TRiXtK+9uoW7KdTgAjitE+A6HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQKeKPh GoeXgCNS33ea+JyfIhAyMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx6WEnfD4bzCnHIS6K2fy7kVmELYCcRnutKqXRJnPl0XEKXRRXeMGE vYiqt6zQLErPNTPeJ29xRBHGw6ZdK34WE6w8xWA57MNgQhZ53QaLO9/LREExdg8P EEQmvrSTcu03yrRgZFCrfyE3BUzUyQhx+CGC0Oo8IMZLggnxGOZW2rI8eAt0vzR9 QcHkCbadqYeEm+veKbt/BH0eGx46hAAIq2oq4/9bgSDCu7VZEe41s4OdljW/ecQd XKXzPZmZgxSwKEtC2QxsFS4OC1LEBEKZk5FK+u840mJaWm+TbP9YPh6U05rlKhva J6zcSIqi+t2UgkCs1/8/HNqy2uPQt3hg -----END CERTIFICATE-----Generated at Mon May 12 16:56:03 2025 by rpki-client