$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: Hh0Ad8HD6FMMktt2nJgP25xQ7X/1Tk1mGH19dhTkgdU= Subject key identifier: 5D:EA:D1:E1:87:6E:3A:BA:56:48:F6:A2:F8:5A:48:70:C6:DC:E9:06 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 085C Signing time: Fri 18 Sep 2026 20:52:54 +0000 Manifest this update: Fri 18 Sep 2026 20:52:53 +0000 Manifest next update: Fri 25 Sep 2026 20:52:53 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: 5qlKoEqFKRUIYNqMak78BvdI7k0KSxgcI57WtXjjYwI=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Sep 18 20:52:53 2026 GMT Not After : Sep 25 20:52:53 2026 GMT Subject: CN=6aada4a5-e969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:bb:28:55:d4:45:a9:74:b9:5b:55:43:29: d9:2e:65:e2:16:d1:48:b0:33:ec:42:4a:ae:90:97: 0b:6a:b3:56:a3:ff:1b:c9:23:c6:93:2c:6c:ef:49: 36:6f:18:1f:46:1d:14:1d:65:a5:e4:e3:2e:6a:57: e1:93:5b:e4:da:98:bb:ee:1b:3b:44:33:58:12:4b: 37:9c:01:07:0a:18:35:eb:c5:d3:c7:35:0b:75:ae: fd:d3:a0:b7:30:3e:1e:7e:6a:ff:d5:c0:b8:f5:1b: ee:14:dc:c3:54:a0:69:0d:14:4b:98:fa:bf:a8:82: d6:7f:19:c5:ff:eb:df:60:99:a7:12:5a:88:85:54: 70:dd:d6:f1:2b:87:1b:e1:a6:be:a5:d9:95:7e:1e: 22:13:69:53:ac:ab:17:96:f5:0e:23:57:1d:61:0e: 60:0c:57:f1:47:62:95:1c:fd:f8:8f:3f:63:5d:1d: 83:12:5b:93:35:e1:2e:80:c8:62:b7:d7:a6:e9:54: 24:2c:12:f9:dc:65:d2:77:51:fd:66:fa:c5:89:c9: 1e:a8:7c:e0:1f:07:49:b7:ec:00:8a:2e:f4:86:1c: 89:6d:47:47:42:81:11:06:8d:d6:67:cf:04:75:16: 0f:3a:b7:64:ee:ed:aa:aa:86:84:5b:ea:f4:aa:fc: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EA:D1:E1:87:6E:3A:BA:56:48:F6:A2:F8:5A:48:70:C6:DC:E9:06 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:65:1d:f6:e6:71:56:7b:c0:cb:fd:78:03:df:1a:e7:ec: 00:58:1b:d8:4c:88:9c:60:8b:6b:bb:63:6b:1d:ce:2f:95:65: 23:43:4a:e6:ae:b2:3f:a6:63:ac:93:59:77:7f:b4:48:4b:d4: b0:32:68:5b:ce:f5:99:2e:ae:7d:09:62:1d:26:78:17:6d:f2: 40:2f:13:51:13:4f:98:5f:55:cd:dd:e6:25:fc:be:3f:cc:57: c0:a2:e7:1d:c0:ff:b7:80:c6:7e:77:9c:54:39:d7:17:db:8d: e8:ef:72:aa:ca:0f:87:6f:a2:2b:a5:fc:40:db:81:91:fe:90: 0e:6a:41:b9:76:5b:14:f4:51:92:26:6c:5b:d6:02:20:de:09: 91:b0:2f:9c:22:58:84:a4:91:20:b0:9e:03:0b:da:46:6c:a8: 9b:b6:19:f2:30:5a:cb:a7:d9:84:17:f4:e1:2d:4a:7f:1e:39: 7a:c5:fc:51:ba:e7:a4:d7:44:6b:dd:04:13:f0:bb:25:60:8f: 9d:0e:57:62:15:3a:08:a6:76:37:1d:3a:30:d6:9b:e5:ae:9a: cd:72:62:b7:75:ea:e4:3f:0a:46:02:c5:cd:1a:ab:14:0f:a9: 1c:ba:f4:6b:0a:7e:b2:79:e6:2e:d7:2b:bb:0c:25:0a:b6:85: 56:81:ef:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYwOTE4MjA1MjUzWhcNMjYwOTI1MjA1MjUzWjAYMRYwFAYD VQQDEw02YWFkYTRhNS1lOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY27KFXURal0uVtVQynZLmXiFtFIsDPsQkqukJcLarNWo/8bySPGkyxs70k2 bxgfRh0UHWWl5OMualfhk1vk2pi77hs7RDNYEks3nAEHChg168XTxzULda7906C3 MD4efmr/1cC49RvuFNzDVKBpDRRLmPq/qILWfxnF/+vfYJmnElqIhVRw3dbxK4cb 4aa+pdmVfh4iE2lTrKsXlvUOI1cdYQ5gDFfxR2KVHP34jz9jXR2DEluTNeEugMhi t9em6VQkLBL53GXSd1H9ZvrFickeqHzgHwdJt+wAii70hhyJbUdHQoERBo3WZ88E dRYPOrdk7u2qqoaEW+r0qvwZNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3q0eGH bjq6Vkj2ovhaSHDG3OkGMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRVlHfbmcVZ7wMv9eAPfGufsAFgb2EyInGCLa7tjax3OL5VlI0NK5q6yP6Zj rJNZd3+0SEvUsDJoW871mS6ufQliHSZ4F23yQC8TURNPmF9Vzd3mJfy+P8xXwKLn HcD/t4DGfnecVDnXF9uN6O9yqsoPh2+iK6X8QNuBkf6QDmpBuXZbFPRRkiZsW9YC IN4JkbAvnCJYhKSRILCeAwvaRmyom7YZ8jBay6fZhBf04S1Kfx45esX8UbrnpNdE a90EE/C7JWCPnQ5XYhU6CKZ2Nx06MNab5a6azXJit3Xq5D8KRgLFzRqrFA+pHLr0 awp+snnmLtcruwwlCraFVoHv3A== -----END CERTIFICATE-----Generated at Sun Sep 20 21:56:28 2026 by rpki-client