$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: T5pVffCoGK0gsyFwrMwHEoHFoiJxE9KkWpFMkFv8oj8= Subject key identifier: 04:1C:21:FB:58:DC:53:2D:88:0F:33:E0:CD:A7:D4:8B:C2:32:12:0A Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 085F Signing time: Thu 24 Sep 2026 20:50:33 +0000 Manifest this update: Thu 24 Sep 2026 20:50:32 +0000 Manifest next update: Thu 01 Oct 2026 20:50:32 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: A4/tMgEfRX40gUnaQvkFd1A01Hh4NNnc2Aw1xDvzAf4=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Sep 24 20:50:32 2026 GMT Not After : Oct 1 20:50:32 2026 GMT Subject: CN=6ab58d18-8afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:f0:8a:20:a3:52:ca:ea:dd:3e:30:1a:cf: 65:a4:69:7d:da:d8:ad:17:54:a8:d7:da:fa:9f:54: 8f:89:eb:dd:00:a8:8f:11:d8:d4:c9:1e:1a:2a:81: 9a:ba:45:38:d6:59:b7:6b:90:d7:1b:67:94:f4:09: 03:69:05:df:97:de:41:f4:82:1b:46:71:9d:73:9d: 03:53:55:a5:e3:fc:a9:f9:ba:9b:14:43:26:35:02: 0c:ff:91:06:34:20:46:6f:09:65:c8:fd:44:f9:43: e7:1c:35:ab:f8:55:62:0a:3a:91:71:c4:b4:b9:bb: f1:e4:eb:13:ef:86:f9:b3:38:dc:ce:86:d2:58:0b: 16:ef:9f:fd:3e:e6:d5:77:6a:49:9d:87:da:1f:24: 6c:e7:d5:07:bb:2a:f9:58:1a:ce:49:e3:d4:02:d5: 1b:40:63:b5:e2:40:3a:0a:6b:2b:20:8b:31:ca:69: 3a:35:7f:de:cb:e9:8d:af:53:12:e1:24:7a:53:26: ab:62:50:c1:1b:6d:c9:d0:99:6b:39:37:0d:13:d9: 32:b9:03:a9:bf:7b:5d:63:e1:97:5f:16:5b:ef:40: 8b:ff:b9:d0:de:c6:60:15:59:64:91:8b:5d:24:41: a4:b7:1b:5e:de:a1:b0:5a:44:a8:f6:98:27:a7:f0: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1C:21:FB:58:DC:53:2D:88:0F:33:E0:CD:A7:D4:8B:C2:32:12:0A X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9c:ea:45:9a:76:62:77:85:b5:b2:f6:7e:cc:f5:4e:01:6a: 9a:0b:f0:35:7a:b7:48:7f:7c:5d:e7:62:29:b8:7e:1c:c4:2f: 00:b7:3c:8f:1b:ec:5f:7f:26:f2:08:a3:46:82:5a:90:dc:46: 53:31:ac:49:59:a9:a8:9d:69:ad:30:d7:d6:3c:7b:16:26:11: 6d:e1:f8:81:80:6a:69:eb:02:be:86:c6:51:73:b6:da:6a:e8: e9:79:1b:ab:07:0d:80:20:69:60:0e:b1:69:b7:be:a0:39:55: 21:74:b2:8b:87:c3:f8:bc:71:a0:0d:ea:24:b0:2c:bd:bb:4c: 47:cd:a1:2c:86:ad:53:57:3f:5f:b6:ea:2c:dc:15:3b:e1:2b: 79:d7:4a:32:bd:e1:a3:7f:48:4a:d6:4b:46:90:2d:a4:6f:d1: 5e:18:fc:e7:94:af:8b:89:a0:2f:e6:64:5f:f9:1b:55:df:85: d9:47:0c:ed:6c:3f:c6:0e:61:c2:46:7a:3d:cb:c1:b3:47:fe: 0d:cd:90:3a:e5:ba:91:a0:7c:4e:dd:c7:f8:32:da:cc:d9:bd: a1:ab:43:c6:3c:98:6c:b1:ef:38:55:82:ca:f0:5b:14:0e:0e: 3d:5d:05:9b:ec:95:0c:67:5f:b5:ca:8c:71:08:b8:cd:0a:89: c0:05:c6:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYwOTI0MjA1MDMyWhcNMjYxMDAxMjA1MDMyWjAYMRYwFAYD VQQDEw02YWI1OGQxOC04YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3a7wiiCjUsrq3T4wGs9lpGl92titF1So19r6n1SPievdAKiPEdjUyR4aKoGa ukU41lm3a5DXG2eU9AkDaQXfl95B9IIbRnGdc50DU1Wl4/yp+bqbFEMmNQIM/5EG NCBGbwllyP1E+UPnHDWr+FViCjqRccS0ubvx5OsT74b5szjczobSWAsW75/9PubV d2pJnYfaHyRs59UHuyr5WBrOSePUAtUbQGO14kA6CmsrIIsxymk6NX/ey+mNr1MS 4SR6UyarYlDBG23J0JlrOTcNE9kyuQOpv3tdY+GXXxZb70CL/7nQ3sZgFVlkkYtd JEGktxte3qGwWkSo9pgnp/DDvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQcIftY 3FMtiA8z4M2n1IvCMhIKMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJzqRZp2YneFtbL2fsz1TgFqmgvwNXq3SH98XediKbh+HMQvALc8jxvsX38m 8gijRoJakNxGUzGsSVmpqJ1prTDX1jx7FiYRbeH4gYBqaesCvobGUXO22mro6Xkb qwcNgCBpYA6xabe+oDlVIXSyi4fD+LxxoA3qJLAsvbtMR82hLIatU1c/X7bqLNwV O+EreddKMr3ho39IStZLRpAtpG/RXhj855Svi4mgL+ZkX/kbVd+F2UcM7Ww/xg5h wkZ6PcvBs0f+Dc2QOuW6kaB8Tt3H+DLazNm9oatDxjyYbLHvOFWCyvBbFA4OPV0F m+yVDGdftcqMcQi4zQqJwAXGOA== -----END CERTIFICATE-----Generated at Fri Sep 25 11:08:47 2026 by rpki-client