
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json)
Hash identifier: VlnyG6Mgi+S7x08IpF54S6lsUM1Xs7e5631wpSYubOY=
Subject key identifier: 4C:74:EC:4D:FF:97:A0:89:B3:E3:4E:91:E2:38:D4:04:F3:DC:58:06
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial: 0815
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
Manifest number: 080D
Signing time: Thu 16 Apr 2026 21:01:42 +0000
Manifest this update: Thu 16 Apr 2026 21:01:41 +0000
Manifest next update: Thu 23 Apr 2026 21:01:41 +0000
Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: eZgrwMqZRBMxaNr8wOwt3HgDnVCge3SOEr1SxxwdcAo=)
2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069 (0x815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Validity
Not Before: Apr 16 21:01:41 2026 GMT
Not After : Apr 23 21:01:41 2026 GMT
Subject: CN=69e14e36-e2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:91:13:c1:17:08:7c:67:e2:f5:9f:a9:84:
29:73:04:99:a0:1c:68:b4:b9:aa:b0:9b:4f:7c:38:
a1:74:92:24:22:e1:69:38:27:dc:45:1d:d5:91:8e:
1f:15:4d:26:1a:63:d6:5f:ce:32:56:03:23:aa:f4:
4c:17:8e:e2:4f:06:fe:f9:6e:40:de:42:d8:05:c5:
8d:8e:f6:cb:05:2c:85:70:19:ce:5e:87:35:3a:6b:
5f:48:00:2e:94:e0:ee:4a:c3:9d:1f:73:58:79:50:
5f:e1:38:a0:37:70:56:2b:86:52:61:2e:cd:b3:72:
6b:f8:35:65:ff:87:bf:cf:32:9c:13:df:1d:76:42:
49:4d:7b:01:eb:a6:b4:51:9b:97:f6:11:5b:15:cd:
04:17:f8:2e:69:b2:cf:48:8e:5f:5d:61:47:d3:30:
4a:d0:d1:43:54:ea:94:95:ac:86:cf:16:3f:f8:f3:
46:be:6b:da:ef:ee:5e:86:bd:da:89:e3:1b:73:8c:
cd:21:61:a1:b4:84:f9:82:04:ca:d1:32:b1:ad:7d:
e3:f1:cb:98:10:cb:b5:6f:ae:1e:7a:49:96:c3:3e:
2b:b4:db:e1:b6:df:4f:10:65:f3:7d:46:ec:89:d9:
61:a7:1b:9c:06:f3:38:90:05:04:6f:58:b4:c1:9d:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:EC:4D:FF:97:A0:89:B3:E3:4E:91:E2:38:D4:04:F3:DC:58:06
X509v3 Authority Key Identifier:
keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:23:84:51:0f:fa:8b:db:b4:d7:4b:75:10:c6:81:8a:3b:
af:48:1b:95:78:c1:bc:a1:5d:76:5d:d1:63:5f:8b:c5:59:f3:
4b:f7:f9:f7:a3:9c:d2:8a:21:d7:3d:0d:cc:b9:c5:75:99:8e:
73:5b:bb:a2:7a:27:68:e7:bc:fa:c8:44:2c:b8:60:ae:c4:d1:
dd:0f:ce:a4:99:bb:86:4a:f2:4e:07:2a:09:87:8a:fa:65:69:
11:60:68:d4:f3:08:e0:8c:d9:22:7d:1f:d4:5d:d8:88:fa:0f:
ae:bf:61:18:5d:93:8c:00:53:a4:9f:16:42:d5:7e:be:bf:04:
b3:91:30:cc:b0:5a:ac:98:78:6e:96:b9:bc:43:04:11:2c:a7:
25:ab:fc:c6:78:5c:05:1d:5c:ef:41:3f:3d:ca:e2:38:d9:f8:
74:df:b1:56:f3:68:97:5a:19:9f:24:93:f9:23:4e:83:d0:b4:
c5:ac:6e:78:13:e9:0e:2b:6d:49:ba:9c:ec:8b:dd:f1:e0:34:
5a:93:54:81:00:f3:0c:98:df:e6:7f:49:50:89:36:04:c8:62:
28:4e:96:50:f9:34:aa:28:20:e2:dc:9f:e3:b8:fd:34:8e:9f:
65:d0:a9:30:08:87:0c:8e:e1:f9:a7:2a:b6:8f:e0:98:c6:a8:
13:6c:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:47 2026 by rpki-client