$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: aBm5Hhe/ZnjjPa+V43X3FB5R6VtxRYAQ54jnmURZ3LA= Subject key identifier: 6B:10:84:7D:C6:30:B5:E8:1D:3A:62:EE:CF:20:8F:DC:92:1F:A1:78 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0841 Signing time: Tue 28 Jul 2026 21:25:23 +0000 Manifest this update: Tue 28 Jul 2026 21:25:23 +0000 Manifest next update: Tue 04 Aug 2026 21:25:23 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: 32UrOEThwsPcqK6bdxZ7PDkQmZqif+/N3AtK6pPWYJk=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Jul 28 21:25:23 2026 GMT Not After : Aug 4 21:25:23 2026 GMT Subject: CN=6a691e43-39bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:80:80:e3:ff:92:e2:a0:05:22:28:70:56: 6e:c3:a3:f8:04:54:eb:3f:14:a8:cd:11:83:62:ef: cf:d6:16:a8:2f:09:fe:bf:1f:b1:db:99:f2:3e:c4: 7a:81:92:7e:fa:3d:5e:db:db:b9:88:65:64:26:05: f3:ad:e6:52:24:1e:e7:97:17:2d:e8:7c:db:ac:03: d1:0d:97:98:93:66:0e:35:21:d9:d0:0c:2a:9c:26: a8:64:44:4b:63:30:c6:04:20:8a:71:b6:29:d0:d1: 2c:10:ad:0a:b2:4d:fd:53:e0:5e:c3:a8:b8:26:d3: 9b:4f:25:fb:cf:4f:64:f2:9d:f5:7b:b9:c4:54:71: 8a:e2:bd:b8:ed:48:62:75:02:aa:ba:d3:6c:84:2b: ca:ff:7f:98:22:d9:ed:7b:42:a1:3e:6e:a9:9a:d0: bf:db:ca:df:0f:7b:9e:ec:5c:ff:da:be:6e:95:ed: 07:06:c5:25:ae:f7:0b:9f:69:f3:5d:29:ef:73:1a: a4:fb:fe:ab:3d:aa:da:9e:16:43:b6:18:c9:f6:93: ba:c7:2e:4f:54:ac:e5:7b:2f:eb:e2:7c:d6:00:49: af:19:d9:07:b2:ec:4d:24:4b:97:ef:c3:bb:c9:91: 27:fe:d1:12:0a:63:aa:81:90:5b:31:9c:71:93:16: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:10:84:7D:C6:30:B5:E8:1D:3A:62:EE:CF:20:8F:DC:92:1F:A1:78 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5c:23:3a:d0:ab:44:94:65:35:a2:bd:ce:69:90:9b:89:44: 36:ef:d1:e6:c2:a8:33:71:19:f2:2d:d9:3e:5a:ff:91:f6:91: fc:ed:00:6d:4a:c5:ec:92:13:d9:37:3f:d7:ee:0c:85:81:5a: 3d:aa:25:dd:c1:ac:67:26:97:ce:7e:e4:7e:95:fd:62:ce:c2: 6a:57:f8:92:57:8e:06:79:6f:61:b9:96:be:e1:7f:ee:a9:cd: 7c:06:0d:de:61:2a:91:88:0c:8b:6b:cb:d7:21:62:86:86:3b: fc:15:be:f3:1a:30:05:17:80:69:05:60:b1:80:d9:c0:24:45: 77:82:9f:6a:25:36:02:e2:ec:81:ff:95:54:e7:89:77:16:b0: 50:2f:c3:71:b1:18:6d:93:2b:44:50:bb:0b:6a:a4:bd:65:3b: c5:a3:41:ba:6f:d0:ba:1f:51:9e:aa:f0:8f:d9:00:dd:71:21: 48:1d:74:99:66:68:05:ae:5a:01:7e:7c:5b:8e:41:3b:b7:aa: 67:04:f1:a3:10:10:17:b5:8d:6b:31:a3:57:37:fa:6c:97:fd: f2:fa:23:84:02:1e:18:a0:c7:d3:21:7d:8e:16:82:27:89:06: 0c:0a:46:38:4e:0c:02:ef:88:36:15:f4:f8:72:e4:a0:23:b2: e0:57:1f:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYwNzI4MjEyNTIzWhcNMjYwODA0MjEyNTIzWjAYMRYwFAYD VQQDEw02YTY5MWU0My0zOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8+AgOP/kuKgBSIocFZuw6P4BFTrPxSozRGDYu/P1haoLwn+vx+x25nyPsR6 gZJ++j1e29u5iGVkJgXzreZSJB7nlxct6HzbrAPRDZeYk2YONSHZ0AwqnCaoZERL YzDGBCCKcbYp0NEsEK0Ksk39U+Bew6i4JtObTyX7z09k8p31e7nEVHGK4r247Uhi dQKqutNshCvK/3+YItnte0KhPm6pmtC/28rfD3ue7Fz/2r5ule0HBsUlrvcLn2nz XSnvcxqk+/6rParanhZDthjJ9pO6xy5PVKzley/r4nzWAEmvGdkHsuxNJEuX78O7 yZEn/tESCmOqgZBbMZxxkxZqtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsQhH3G MLXoHTpi7s8gj9ySH6F4MB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAilwjOtCrRJRlNaK9zmmQm4lENu/R5sKoM3EZ8i3ZPlr/kfaR/O0AbUrF7JIT 2Tc/1+4MhYFaPaol3cGsZyaXzn7kfpX9Ys7Calf4kleOBnlvYbmWvuF/7qnNfAYN 3mEqkYgMi2vL1yFihoY7/BW+8xowBReAaQVgsYDZwCRFd4KfaiU2AuLsgf+VVOeJ dxawUC/DcbEYbZMrRFC7C2qkvWU7xaNBum/Quh9Rnqrwj9kA3XEhSB10mWZoBa5a AX58W45BO7eqZwTxoxAQF7WNazGjVzf6bJf98vojhAIeGKDH0yF9jhaCJ4kGDApG OE4MAu+INhX0+HLkoCOy4Fcfqw== -----END CERTIFICATE-----Generated at Wed Jul 29 08:58:42 2026 by rpki-client