$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: TPnTA1G3yF2kmQVpWsmNN2iQ/y+xdICIhayNc1xaQKU= Subject key identifier: 16:8A:69:34:DB:21:03:B3:12:7B:EE:D3:AA:E2:A5:1F:3D:CE:BA:E9 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0801 Signing time: Tue 24 Mar 2026 20:53:39 +0000 Manifest this update: Tue 24 Mar 2026 20:53:38 +0000 Manifest next update: Tue 31 Mar 2026 20:53:38 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: /1DSWQ1wSPJhSV3wNtUcYRkZZSfM0VCTl6woyIVd1b8=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Mar 24 20:53:38 2026 GMT Not After : Mar 31 20:53:38 2026 GMT Subject: CN=69c2f9d2-3cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:fb:a1:80:7d:32:ab:c8:a5:47:a6:38:e3: 55:08:29:ff:37:c0:62:e5:93:6e:3e:c3:03:81:76: a9:51:27:1d:3d:04:93:b7:cd:75:e1:3c:c7:0b:c5: 44:ec:ad:8c:d0:b2:6c:10:48:bd:dd:d2:64:b6:28: 1a:69:ec:9b:3d:99:0b:7b:fd:f0:58:f2:bd:e1:48: 42:a5:79:42:cb:34:b4:a3:45:ae:c6:39:35:57:6d: b9:f8:e0:68:b9:5b:6a:f5:68:23:8f:42:be:84:bc: 71:74:c8:e1:75:28:09:a0:da:df:55:71:ae:77:61: 92:9d:c2:87:d2:a6:1c:b4:ed:8b:a6:54:0c:15:38: b2:3b:91:6e:50:11:94:eb:e1:03:45:ff:85:91:b4: e7:43:dd:5b:9d:6b:90:c2:1d:96:cb:d4:0e:66:ad: 15:b9:8d:19:c0:78:c3:e6:7b:46:c7:58:ac:c4:e6: ce:72:7c:2c:5a:8e:0b:ca:fd:78:a8:9e:3b:5c:f2: 95:a0:25:28:9a:e9:cb:e1:79:19:04:51:7a:d6:91: b9:8b:56:53:a7:b6:66:14:ad:37:ed:ca:fe:f4:78: ee:45:87:0a:d5:ce:ff:6d:6a:22:ee:fc:d3:21:a5: 65:5a:91:8e:37:c9:ba:3f:bc:34:e8:eb:20:7e:b4: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:69:34:DB:21:03:B3:12:7B:EE:D3:AA:E2:A5:1F:3D:CE:BA:E9 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:0b:ae:84:32:91:2e:0f:68:40:1f:98:40:a5:44:30:a8: c2:2a:46:27:86:0a:c3:1e:6b:e0:53:81:d8:83:5b:30:fa:b9: 54:63:cf:80:f1:c8:09:ee:30:f1:72:59:be:80:55:08:3a:0c: 67:ae:3f:5a:06:44:99:df:cc:40:d7:58:da:6f:7a:a9:bd:b0: dd:17:a7:c8:97:c4:e7:90:22:01:03:40:c3:7a:00:23:05:5e: e1:a0:17:95:00:88:94:35:d8:1c:be:6d:77:36:e2:d2:a1:cb: ec:fd:47:5f:9e:3d:2f:6f:47:3c:7f:a2:08:a9:31:a4:56:65: 25:b9:1e:6a:2e:e6:cf:19:21:e1:4f:6a:a2:d4:c1:64:84:18: 08:6e:c8:d8:80:74:27:9d:0d:fc:cd:49:45:3a:bc:4d:db:2c: 66:d4:4f:6e:20:fc:aa:e9:de:2b:77:d1:60:dc:a1:a9:e9:d2: f1:94:2b:75:4e:b3:86:62:68:59:0b:7b:8c:5f:56:7d:4c:f8: 9c:12:15:31:9d:8b:db:b5:a3:a1:8a:61:f0:f1:30:a2:08:d1: 85:bf:a7:25:6b:59:bb:38:61:b4:a0:d7:71:71:e6:24:fe:8e: 5d:30:36:20:db:b7:48:9d:12:ef:ad:cb:5d:5f:6e:fc:dc:87: c2:8f:ab:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYwMzI0MjA1MzM4WhcNMjYwMzMxMjA1MzM4WjAYMRYwFAYD VQQDEw02OWMyZjlkMi0zY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zX7oYB9MqvIpUemOONVCCn/N8Bi5ZNuPsMDgXapUScdPQSTt8114TzHC8VE 7K2M0LJsEEi93dJktigaaeybPZkLe/3wWPK94UhCpXlCyzS0o0Wuxjk1V225+OBo uVtq9Wgjj0K+hLxxdMjhdSgJoNrfVXGud2GSncKH0qYctO2LplQMFTiyO5FuUBGU 6+EDRf+FkbTnQ91bnWuQwh2Wy9QOZq0VuY0ZwHjD5ntGx1isxObOcnwsWo4Lyv14 qJ47XPKVoCUomunL4XkZBFF61pG5i1ZTp7ZmFK037cr+9HjuRYcK1c7/bWoi7vzT IaVlWpGON8m6P7w06OsgfrTvBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaKaTTb IQOzEnvu06ripR89zrrpMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe9YLroQykS4PaEAfmEClRDCowipGJ4YKwx5r4FOB2INbMPq5VGPPgPHICe4w 8XJZvoBVCDoMZ64/WgZEmd/MQNdY2m96qb2w3RenyJfE55AiAQNAw3oAIwVe4aAX lQCIlDXYHL5tdzbi0qHL7P1HX549L29HPH+iCKkxpFZlJbkeai7mzxkh4U9qotTB ZIQYCG7I2IB0J50N/M1JRTq8TdssZtRPbiD8quneK3fRYNyhqenS8ZQrdU6zhmJo WQt7jF9WfUz4nBIVMZ2L27WjoYph8PEwogjRhb+nJWtZuzhhtKDXcXHmJP6OXTA2 INu3SJ0S763LXV9u/NyHwo+rag== -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:11 2026 by rpki-client