$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: EJWfu/HwMLireIZTvONQL+y/GvPy+Zqwi9nyGrcXN14= Subject key identifier: 3C:69:8A:E7:56:D4:5C:F8:BB:57:FB:E8:E8:35:EA:54:06:30:57:6A Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 0867 Signing time: Mon 05 Oct 2026 13:06:34 +0000 Manifest this update: Mon 05 Oct 2026 13:06:33 +0000 Manifest next update: Mon 12 Oct 2026 13:06:33 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: 4Z5gOExsl+B3xjbBRxID5lwV5i9p/faAvEmbKGtvoK0=) 2: 279A9F92BCCA11F1B3E262A63211F970.roa (hash: /Et/g6O34DWmELbGFAjhnGdQa6Z2Fc48lHfmp1JqQlc=) 3: 93DF89E6C0BD11F1BB6216436511F970.roa (hash: QtSEK687Ek0oyb8ZqMLbm3CpbJ7EPUUPtobL9I9RXR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 13:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Oct 5 13:06:33 2026 GMT Not After : Oct 12 13:06:33 2026 GMT Subject: CN=6ac3a0da-1b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:22:94:a8:5a:e8:27:e9:ca:7f:8b:60:31: dc:60:cc:d4:d3:92:a9:cd:d2:4e:30:9a:f5:81:fe: 79:62:6f:24:d5:60:17:9f:0a:67:ab:3a:37:26:bd: 55:ea:2f:98:88:b1:06:68:a0:bc:0c:23:ec:91:2f: 9e:9a:3f:57:ab:05:10:c1:40:9a:4c:33:2b:6a:1f: ef:8b:96:06:3f:e3:af:21:94:6f:ea:f5:21:a3:cb: a9:05:63:d9:57:a7:9f:46:6e:fe:83:8c:34:57:76: f5:68:6b:6d:d9:cc:68:80:74:95:5f:6d:ca:dd:5a: e8:17:a9:23:40:b1:39:d2:ce:52:b6:c6:d0:63:17: ba:be:72:e7:90:2f:3e:a3:3d:7b:71:72:96:01:bc: ba:fa:e1:2f:bf:88:ef:1a:6f:87:af:47:9c:56:5a: bc:a4:77:e0:54:04:68:93:56:0b:4d:42:4c:e9:d0: 12:a0:ca:17:04:e3:33:97:d9:e8:89:ff:98:e1:a7: 65:5f:77:d3:73:a1:cf:e6:dc:99:fa:2b:18:a3:67: 2e:10:3a:b0:03:eb:d0:d3:1b:e6:56:a9:e4:bc:4c: 1e:88:c3:81:44:1e:79:cb:7b:ba:3c:ba:9f:7e:ad: 6c:11:9f:c8:07:94:f8:bb:52:36:99:c0:f7:c0:57: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:8A:E7:56:D4:5C:F8:BB:57:FB:E8:E8:35:EA:54:06:30:57:6A X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:62:28:dd:c9:29:29:2d:7e:84:ce:fe:c1:63:60:eb:1c:20: 71:13:5d:c0:bc:0e:c2:3c:d4:43:e8:6d:5e:b1:fe:dc:3a:08: a1:c6:c3:dd:98:b9:77:54:f3:0c:02:48:f1:d1:e6:f8:42:d5: 3a:15:82:e7:a8:54:0b:31:f0:37:ec:4a:e0:93:0c:6f:ee:74: 27:da:e3:61:e5:1d:85:22:7c:4b:72:5e:23:44:15:96:bc:9d: 69:b7:7c:42:25:b0:05:e1:d5:2a:92:6a:a3:42:68:0d:61:84: 9e:6e:32:92:52:c2:99:e1:e6:05:a9:16:91:f7:bb:22:81:b2: 56:61:c1:ed:86:8d:67:31:aa:fd:4d:c6:aa:ac:9b:eb:7b:97: 63:19:5c:6a:1f:6c:3b:0f:c2:ed:f1:35:f5:45:12:f9:cc:7c: a2:d2:eb:04:1b:59:60:10:c2:8e:8a:a3:a1:f2:6d:61:c5:90: a9:39:96:c0:5c:ff:21:83:69:80:d0:58:b2:44:45:49:87:d5: 92:2d:75:e4:f5:2e:21:fe:93:15:74:ce:aa:16:c5:e4:14:ef: db:6c:09:e8:e6:22:e9:24:17:1f:94:b8:13:23:e6:c1:81:5b: ac:12:4f:5f:91:58:b6:9e:42:ea:63:0b:77:76:c0:bd:3e:ad: 78:bb:4e:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjYxMDA1MTMwNjMzWhcNMjYxMDEyMTMwNjMzWjAYMRYwFAYD VQQDEw02YWMzYTBkYS0xYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19cilKha6Cfpyn+LYDHcYMzU05KpzdJOMJr1gf55Ym8k1WAXnwpnqzo3Jr1V 6i+YiLEGaKC8DCPskS+emj9XqwUQwUCaTDMrah/vi5YGP+OvIZRv6vUho8upBWPZ V6efRm7+g4w0V3b1aGtt2cxogHSVX23K3VroF6kjQLE50s5StsbQYxe6vnLnkC8+ oz17cXKWAby6+uEvv4jvGm+Hr0ecVlq8pHfgVARok1YLTUJM6dASoMoXBOMzl9no if+Y4adlX3fTc6HP5tyZ+isYo2cuEDqwA+vQ0xvmVqnkvEweiMOBRB55y3u6PLqf fq1sEZ/IB5T4u1I2mcD3wFf1vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxpiudW 1Fz4u1f76Og16lQGMFdqMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVmIo3ckpKS1+hM7+wWNg6xwgcRNdwLwOwjzUQ+htXrH+3DoIocbD3Zi5d1Tz DAJI8dHm+ELVOhWC56hUCzHwN+xK4JMMb+50J9rjYeUdhSJ8S3JeI0QVlrydabd8 QiWwBeHVKpJqo0JoDWGEnm4yklLCmeHmBakWkfe7IoGyVmHB7YaNZzGq/U3Gqqyb 63uXYxlcah9sOw/C7fE19UUS+cx8otLrBBtZYBDCjoqjofJtYcWQqTmWwFz/IYNp gNBYskRFSYfVki115PUuIf6TFXTOqhbF5BTv22wJ6OYi6SQXH5S4EyPmwYFbrBJP X5FYtp5C6mMLd3bAvT6teLtOLw== -----END CERTIFICATE-----Generated at Tue Oct 6 14:30:08 2026 by rpki-client