$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: 8U1y1tTdzWnblf2PaPoAtDzXKy5NLNqeR6DH/niDUwY= Subject key identifier: 90:BB:D3:C4:60:4C:05:91:C0:09:5E:0F:41:B4:62:3D:7D:D8:0F:7C Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 07F5 Signing time: Mon 02 Mar 2026 01:00:40 +0000 Manifest this update: Mon 02 Mar 2026 01:00:37 +0000 Manifest next update: Mon 09 Mar 2026 01:00:37 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: XzNisfQCQ+08HM2Z+cU5OQ+IpMxOQHunLG6FjTDrv0w=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Mar 2 01:00:37 2026 GMT Not After : Mar 9 01:00:37 2026 GMT Subject: CN=69a4e137-76de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:5a:be:c5:73:90:b9:ab:11:48:bf:c0:32: 31:62:14:7b:9b:f7:4f:a8:f1:ac:6b:c4:eb:63:49: 48:a5:07:57:7f:aa:d5:f3:5c:a2:f4:1d:a8:0c:d7: be:0f:6d:3e:71:47:5f:25:83:87:61:e1:6a:6b:14: d3:22:d0:ff:16:b6:c8:b8:cd:3e:e6:c1:64:dc:5c: 68:03:08:f5:ac:90:10:28:c8:e1:93:5b:fc:da:b3: 6f:ed:df:09:ad:ae:31:ee:07:62:57:81:18:60:2d: b6:95:4f:69:ce:ee:96:83:e2:9a:e0:21:e2:4e:8f: 59:bd:0d:94:ce:6b:2d:09:88:29:93:e1:c5:ff:26: fb:b1:75:58:d7:fd:1b:3f:ad:28:54:92:7d:35:b9: e2:b9:fd:b4:e4:d6:b8:bc:f2:77:03:9a:f2:9e:86: a8:fd:78:11:d5:98:b8:b5:cb:ed:23:47:07:17:9d: 12:16:b2:a6:f8:48:32:0e:cf:03:cf:b5:a2:2b:31: f5:57:3a:82:bc:33:d5:3c:4f:70:4b:69:ef:a4:b5: 5b:d5:26:fe:7d:23:7a:69:30:62:26:47:2b:94:4b: 7b:a2:f8:4d:73:4c:6a:eb:7f:fe:f4:23:43:b6:1b: 7e:7e:d1:f6:15:c7:aa:4b:73:2c:1f:72:49:2b:59: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:D3:C4:60:4C:05:91:C0:09:5E:0F:41:B4:62:3D:7D:D8:0F:7C X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:83:e4:a9:0e:57:9b:cd:73:24:1b:b8:71:37:dc:9f:8d:f8: 2c:91:50:45:9c:c2:57:af:e1:a1:0c:4e:7f:5c:a0:a3:3a:70: 06:80:8e:f1:58:60:c3:03:23:fe:30:ea:f2:42:14:81:05:a1: aa:f5:28:bb:4d:4c:3e:3c:3c:b9:92:ce:22:af:72:c3:6c:a1: 10:1b:0c:95:86:f7:ea:07:d9:83:24:e8:82:64:d2:83:de:a4: 28:71:6c:13:f5:7c:f8:1b:4e:ef:39:89:a8:39:20:ba:95:99: 4f:50:6d:61:c0:92:91:0c:ad:30:bc:61:83:38:c7:bf:72:a9: 0b:5b:d3:6c:67:1f:be:28:76:b5:84:e9:fb:fc:c2:e6:cd:d7: 87:55:b2:0e:ce:ff:bb:7b:a0:ae:10:50:04:aa:b6:f9:c4:11: 32:bb:f3:3e:ed:c4:88:ec:a6:92:ff:3d:a6:2c:95:a8:19:07: ec:0e:1f:ef:2f:33:53:32:2d:61:ff:f9:b0:d1:83:a5:68:2e: bb:b2:6a:af:64:aa:57:de:fc:16:36:ca:3f:91:36:b7:d5:f6: b6:95:99:4f:4a:bf:28:6f:82:e0:11:66:42:9f:00:93:e2:0b: 67:81:03:70:b7:32:8f:17:30:0f:0e:d2:62:97:51:c0:ec:89: 1b:0e:d4:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYwMzAyMDEwMDM3WhcNMjYwMzA5MDEwMDM3WjAYMRYwFAYD VQQDEw02OWE0ZTEzNy03NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNJavsVzkLmrEUi/wDIxYhR7m/dPqPGsa8TrY0lIpQdXf6rV81yi9B2oDNe+ D20+cUdfJYOHYeFqaxTTItD/FrbIuM0+5sFk3FxoAwj1rJAQKMjhk1v82rNv7d8J ra4x7gdiV4EYYC22lU9pzu6Wg+Ka4CHiTo9ZvQ2UzmstCYgpk+HF/yb7sXVY1/0b P60oVJJ9Nbniuf205Na4vPJ3A5rynoao/XgR1Zi4tcvtI0cHF50SFrKm+EgyDs8D z7WiKzH1VzqCvDPVPE9wS2nvpLVb1Sb+fSN6aTBiJkcrlEt7ovhNc0xq63/+9CND tht+ftH2FceqS3MsH3JJK1k0AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJC708Rg TAWRwAleD0G0Yj192A98MB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn4PkqQ5Xm81zJBu4cTfcn434LJFQRZzCV6/hoQxOf1ygozpwBoCO8VhgwwMj /jDq8kIUgQWhqvUou01MPjw8uZLOIq9yw2yhEBsMlYb36gfZgyTogmTSg96kKHFs E/V8+BtO7zmJqDkgupWZT1BtYcCSkQytMLxhgzjHv3KpC1vTbGcfvih2tYTp+/zC 5s3Xh1WyDs7/u3ugrhBQBKq2+cQRMrvzPu3EiOymkv89piyVqBkH7A4f7y8zUzIt Yf/5sNGDpWguu7Jqr2SqV978FjbKP5E2t9X2tpWZT0q/KG+C4BFmQp8Ak+ILZ4ED cLcyjxcwDw7SYpdRwOyJGw7UAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:51 2026 by rpki-client