
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json)
Hash identifier: W9tECjvFeO/BklsP8j71K5dL6bbSc/hp/zqX5TVHpz4=
Subject key identifier: AF:AF:0F:6D:FD:BE:C3:7D:31:D2:C3:7D:53:7F:4A:95:79:A1:5D:2F
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial: 0846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
Manifest number: 083E
Signing time: Wed 22 Jul 2026 21:33:04 +0000
Manifest this update: Wed 22 Jul 2026 21:33:03 +0000
Manifest next update: Wed 29 Jul 2026 21:33:03 +0000
Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: CgjPGhz7gbJAy3CLKJ+jRg9o3NhrOV/9OBHiUOwcqn8=)
2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Validity
Not Before: Jul 22 21:33:03 2026 GMT
Not After : Jul 29 21:33:03 2026 GMT
Subject: CN=6a613710-fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:da:6c:ad:37:d7:a0:5b:ef:5b:5b:82:aa:
78:39:75:30:34:39:33:6a:22:c5:bc:1e:1f:61:ab:
2c:06:9b:c6:cf:cb:8d:12:07:17:74:84:1f:52:d5:
76:20:4e:a3:ef:ef:73:53:73:e0:de:f3:84:d8:b7:
cb:79:8f:78:41:31:72:fd:78:ed:ff:88:9d:05:b4:
14:5c:6a:41:f0:f7:43:f8:6e:f9:27:bb:70:39:75:
be:34:a3:56:0e:29:a1:b0:f8:27:31:8b:ff:e7:f8:
56:1b:20:6f:7a:5c:f6:9f:6a:7b:12:2a:f1:6d:fb:
00:79:42:c8:13:cf:2a:52:47:a8:2d:2e:ab:2a:bd:
54:7f:a7:f8:5e:22:36:22:b5:8b:a6:b2:23:42:65:
c8:4c:fb:5a:de:4d:dc:fd:60:e9:53:50:e7:3f:ed:
28:35:c8:70:cb:43:a7:8e:f6:de:b4:de:f8:ef:25:
1a:b1:92:22:30:c6:08:b6:f4:2e:95:7d:ff:74:ee:
30:4e:24:74:19:59:65:78:91:11:b8:52:84:20:1a:
97:81:a1:eb:35:d0:03:b3:dc:91:21:fc:ca:f5:c1:
f4:02:30:61:3c:62:68:8f:02:5f:52:0c:b1:0e:1a:
c8:bf:1a:30:cb:63:49:b4:c4:b4:e7:b3:a9:52:40:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:0F:6D:FD:BE:C3:7D:31:D2:C3:7D:53:7F:4A:95:79:A1:5D:2F
X509v3 Authority Key Identifier:
keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:05:2c:87:36:e7:bf:e1:5c:96:6d:fb:cf:d0:31:ba:86:
44:0a:dc:1a:d1:24:3a:5d:45:86:90:2e:cb:d3:2e:0a:e8:87:
91:ce:b8:04:0c:d9:d6:f1:6d:37:90:62:29:aa:e6:57:ef:a2:
9e:99:4c:56:8f:d8:ba:09:08:4a:67:78:05:81:eb:28:cf:ef:
94:9c:6d:40:ea:c2:36:c5:f6:62:d2:51:50:bc:6b:a2:b6:f3:
d7:f7:8f:f8:42:a5:e8:7a:df:26:df:d7:61:70:8f:ad:4d:61:
05:63:60:c6:8e:72:13:32:5d:5b:f5:62:81:cd:fc:99:46:c8:
f6:02:a3:99:df:00:23:be:cb:0c:9e:31:e2:5f:bc:8a:dd:a0:
82:76:26:76:af:21:23:3b:5d:93:3a:97:6a:d5:12:c6:b3:2a:
fd:22:33:d9:66:6b:63:8b:2f:23:ba:52:85:3b:af:99:b7:dc:
c2:f6:34:4c:4b:93:1f:6a:59:d5:19:75:a9:b7:f3:ae:45:35:
47:55:66:92:4f:47:59:08:f5:b3:3f:55:2e:86:de:94:e9:fc:
90:39:73:0a:4d:1e:9b:b9:23:1b:ca:0f:99:df:75:89:04:30:
4b:f9:51:b5:0f:3f:3a:f1:4b:44:20:06:79:ca:a3:5a:f9:e2:
94:0a:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:32 2026 by rpki-client