
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json)
Hash identifier: ilkSH5JsGa7RmEIunTJpZiFQNGCAw0WvF2lBW0gwP8g=
Subject key identifier: 84:A4:DF:80:BC:4E:CE:98:48:D6:2B:F0:61:58:DD:E5:40:85:83:A9
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial: 0832
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
Manifest number: 082A
Signing time: Fri 12 Jun 2026 21:05:12 +0000
Manifest this update: Fri 12 Jun 2026 21:05:12 +0000
Manifest next update: Fri 19 Jun 2026 21:05:12 +0000
Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: hi5t/kjtrWmHlu3BnwHZCJYn0oSX4G0XCRtg50kKo14=)
2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Validity
Not Before: Jun 12 21:05:12 2026 GMT
Not After : Jun 19 21:05:12 2026 GMT
Subject: CN=6a2c7488-3d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:ef:92:21:c9:e1:53:94:c3:22:fe:49:08:
1d:5f:a9:76:a8:22:1d:e2:7a:7a:3a:8e:b8:3d:cf:
2e:33:50:a7:73:25:9a:fd:d9:2d:4a:74:62:8e:2f:
cc:12:b0:a9:0e:7d:f1:1c:9a:b5:7d:da:c7:9f:c7:
67:e9:3b:27:9a:fc:da:b8:51:1e:60:2f:bd:de:e2:
13:5f:69:f2:06:bd:9a:ee:e2:93:6f:36:46:a5:17:
df:51:95:42:04:ae:09:a4:18:b7:75:e6:08:b8:48:
b7:4c:94:02:92:68:dc:6a:3e:23:4c:f4:48:c4:ad:
26:cd:9e:01:d1:48:b3:fb:14:f1:e0:57:e7:39:6e:
e2:5a:4a:3a:be:28:8c:09:12:23:b0:9c:c8:98:ef:
d7:fd:6d:a1:e9:e4:7f:b5:93:ec:28:90:b9:85:31:
af:5c:a2:cb:62:a8:86:4b:83:a8:64:54:7c:e3:ae:
11:f9:e7:25:9d:99:a2:a1:ad:de:20:97:8c:0b:1c:
e6:89:b6:97:39:d3:94:ca:2d:2b:6b:27:d8:eb:45:
1d:fc:56:60:c5:b0:fe:d9:2f:97:06:c8:7b:90:b1:
0e:c5:1f:17:e6:43:3c:e5:3c:5a:fc:f3:85:8e:14:
5f:35:11:7e:e7:a5:81:3a:f8:e1:af:34:98:74:d2:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:DF:80:BC:4E:CE:98:48:D6:2B:F0:61:58:DD:E5:40:85:83:A9
X509v3 Authority Key Identifier:
keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c3:40:36:28:ca:61:e4:50:b2:63:67:f9:48:e0:e3:77:1e:
bd:d9:dc:4f:23:14:1c:ba:09:0f:d9:ad:16:ae:7b:f7:59:48:
e4:85:28:b6:2e:75:cd:a7:f5:ae:9c:d5:50:74:65:0f:ec:f3:
46:31:25:53:df:97:8e:38:73:38:da:b2:f2:db:33:44:cc:68:
c9:54:7b:dc:20:07:66:a6:18:08:ba:6e:ad:58:eb:ed:ee:4b:
93:19:b4:94:43:d2:ed:f2:22:76:d7:9c:22:7c:7d:ef:ce:15:
79:ad:b0:a1:97:c7:78:a3:a1:89:12:9e:32:97:63:99:3d:3b:
4d:ce:46:46:65:10:3a:0c:07:35:6e:ef:5c:19:34:5d:c0:5a:
d6:84:1f:db:10:bf:16:59:d9:5f:dc:3b:1d:c1:ab:9c:8b:7e:
93:4a:67:75:f5:fc:2d:72:72:05:3f:ef:a3:9f:f5:4c:38:1b:
89:08:e2:5e:b9:b5:9f:9b:07:fc:5d:5e:6a:55:6c:3f:3c:86:
c7:9f:e5:95:ab:9c:06:ff:e0:b6:c9:7e:09:50:e9:d1:2e:ff:
e8:62:51:1e:d1:d7:8e:dd:e1:50:3e:91:01:7d:b5:94:f4:f5:
16:7d:5c:d6:eb:be:2c:50:db:96:1a:ae:8c:0b:de:b9:51:13:
bf:9f:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:14 2026 by rpki-client