$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: KcEl0Fvc1kHcas1+mSplflIEVwyqBVg6aJ8NhKDussE= Subject key identifier: 3E:7F:88:48:63:2E:3F:40:93:D9:D2:8C:94:2E:39:87:DC:5F:C6:0E Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 079D Signing time: Tue 16 Sep 2025 21:39:55 +0000 Manifest this update: Tue 16 Sep 2025 21:39:54 +0000 Manifest next update: Tue 23 Sep 2025 21:39:54 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: Sl5X+it5S5Oi7b0U+ofo5OHJyRFJnUDDLH+mQjx5njw=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Sep 16 21:39:54 2025 GMT Not After : Sep 23 21:39:54 2025 GMT Subject: CN=68c9d92b-b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:60:05:be:d5:8a:f2:7b:80:45:23:a4:b5:b4: 9f:25:d7:53:9b:9d:39:c3:6d:7f:31:76:e5:dc:1f: 6b:54:6c:13:4e:00:5e:c1:02:fc:ad:0e:9f:c0:51: 3d:e1:76:29:0a:c0:a4:12:9b:4e:30:ea:5b:9e:9a: 11:31:9b:09:44:00:b5:74:30:c1:85:6e:8c:4d:5f: 4f:7c:40:1f:f9:a9:f6:26:25:72:49:d6:2d:96:e1: ce:00:82:39:c5:98:b8:c0:9f:3d:6e:52:16:49:18: ef:95:ef:08:bd:49:58:7a:a6:6b:42:49:56:af:dd: 33:83:7f:49:bd:1f:b1:b6:c1:99:10:71:b1:8a:53: e9:a0:7d:a6:92:04:bf:04:62:e4:82:6e:31:d7:dc: 1e:7f:b6:a6:d4:98:64:35:0f:b0:89:bd:27:a4:2b: cc:de:5a:27:9a:df:9d:c8:74:d4:19:17:e1:d5:31: 48:1a:70:c0:07:d2:d4:de:80:0a:0f:bb:4a:39:db: 4b:42:ac:e7:25:ed:f4:91:06:b5:5b:6e:7c:d2:22: 8f:66:74:fe:9d:2e:ee:cd:be:1b:0f:62:5c:bd:5a: c1:f0:b8:77:9c:76:2a:f6:c0:85:7d:02:ef:81:0d: 61:33:f7:ef:44:a3:c7:8e:6c:07:c1:6f:7a:26:eb: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:88:48:63:2E:3F:40:93:D9:D2:8C:94:2E:39:87:DC:5F:C6:0E X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9a:26:6f:e7:05:19:a6:63:fb:47:72:4e:8c:ba:b6:32:00: 86:aa:3d:59:d9:59:47:84:5c:a5:0f:0f:34:51:9d:5f:c9:a1: 23:06:4d:64:00:40:c7:0c:a4:18:3c:0c:02:20:99:b1:0a:46: 88:c0:c8:d4:c2:ea:fd:c6:f1:fd:6f:4e:84:4b:62:56:3e:8e: 2c:1f:90:c9:88:5d:c9:d6:95:8a:10:04:8a:2c:b5:c8:ba:e9: 99:08:3b:5c:82:7b:c0:f2:83:8d:ce:8d:c0:cf:6b:66:8b:6c: 8e:f5:ab:f4:70:aa:16:68:56:b3:dc:93:66:33:e3:d8:5c:d8: b0:45:54:57:6a:59:95:1b:20:5c:e5:70:93:3f:5c:8a:24:11: b5:4c:95:1a:e7:20:d3:38:f7:18:93:fe:27:eb:a9:0e:07:90: 4b:ce:d7:8e:b2:3f:a0:4c:47:8f:08:95:9b:46:c4:5c:43:11: a2:99:a3:fe:10:94:a9:05:cc:31:f1:6d:14:1c:bb:bd:e9:a1: 96:f3:99:ef:01:9f:30:03:65:b3:c3:3f:0e:bb:30:f4:12:58: d3:13:b7:fa:c4:24:9a:02:a9:38:2c:b2:fd:cb:10:49:1c:b0: 71:ed:91:eb:4d:f3:dc:7f:1a:36:69:81:04:37:19:7d:a8:db: e4:46:ea:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUwOTE2MjEzOTU0WhcNMjUwOTIzMjEzOTU0WjAYMRYwFAYD VQQDEw02OGM5ZDkyYi1iMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9GAFvtWK8nuARSOktbSfJddTm505w21/MXbl3B9rVGwTTgBewQL8rQ6fwFE9 4XYpCsCkEptOMOpbnpoRMZsJRAC1dDDBhW6MTV9PfEAf+an2JiVySdYtluHOAII5 xZi4wJ89blIWSRjvle8IvUlYeqZrQklWr90zg39JvR+xtsGZEHGxilPpoH2mkgS/ BGLkgm4x19wef7am1JhkNQ+wib0npCvM3lonmt+dyHTUGRfh1TFIGnDAB9LU3oAK D7tKOdtLQqznJe30kQa1W2580iKPZnT+nS7uzb4bD2JcvVrB8Lh3nHYq9sCFfQLv gQ1hM/fvRKPHjmwHwW96JutzWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5/iEhj Lj9Ak9nSjJQuOYfcX8YOMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqmiZv5wUZpmP7R3JOjLq2MgCGqj1Z2VlHhFylDw80UZ1fyaEjBk1k AEDHDKQYPAwCIJmxCkaIwMjUwur9xvH9b06ES2JWPo4sH5DJiF3J1pWKEASKLLXI uumZCDtcgnvA8oONzo3Az2tmi2yO9av0cKoWaFaz3JNmM+PYXNiwRVRXalmVGyBc 5XCTP1yKJBG1TJUa5yDTOPcYk/4n66kOB5BLzteOsj+gTEePCJWbRsRcQxGimaP+ EJSpBcwx8W0UHLu96aGW85nvAZ8wA2Wzwz8OuzD0EljTE7f6xCSaAqk4LLL9yxBJ HLBx7ZHrTfPcfxo2aYEENxl9qNvkRuri -----END CERTIFICATE-----Generated at Thu Sep 18 19:09:50 2025 by rpki-client