
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: ag2DTZLLnOEb3xlQwy278MgLMIV5kNAtqOh7eM2nsLI=
Subject key identifier: FB:F1:05:59:60:CF:5C:DF:1F:2C:0E:DE:DC:B8:FE:F3:E8:48:12:B4
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0755
Signing time: Thu 16 Apr 2026 22:38:30 +0000
Manifest this update: Thu 16 Apr 2026 22:38:29 +0000
Manifest next update: Thu 23 Apr 2026 22:38:29 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: /MUuY8TQyd1SWlGT2jxlTlQIZbHftpEvleHhYoqh5zI=)
2: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
3: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
4: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
5: 72DF94424A8611F08884C659C4F9AE02.roa (hash: vo0Z9lnn3ID47G8AGl41mzrUJ1r+LNl3V8kwSFSFJD0=)
6: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: vP8lL4o3HuYHEtxmFVFrIPK3xiCpCNcYIvaXF6iQ6qc=)
7: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
8: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: yhi2Tkw0GGKeFUshsC9P2AdxggVs4mgh5LXy2qIJrfA=)
9: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
10: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
11: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: afqLSqK+g44LudiUvgfKC16tZ8/+h2VJBHZlNpKW/eQ=)
12: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
13: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
14: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
15: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
16: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
17: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: aSrQY3U/P84RsKFHcVW17Pl1yzLmkmD0Vpz6zbzIlEQ=)
18: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: uds0/X1pk0xXW6c9nGAdHPkZUIT2pPHS7QCepyhgoUE=)
19: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
20: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
21: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
22: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: dfyBO68PAQBqMnaLR2chufMyxD14C0gNqFDFvWt4lAg=)
23: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
24: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
25: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
26: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: lN+Yig4ktb2IRRkSds0TAyhAANJ0TrEtkfnkXcROlAM=)
27: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
28: 757D79F84A8611F08884C659C4F9AE02.roa (hash: dP3lIgCP3vs1WOQFtOzcxup1ukptUZIrUzaEmi5dq2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Apr 16 22:38:29 2026 GMT
Not After : Apr 23 22:38:29 2026 GMT
Subject: CN=69e164e6-3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:2b:e2:af:0e:c6:4f:c8:bb:0a:a1:69:a0:
14:72:1e:67:cf:60:94:81:2d:4d:c3:43:26:77:01:
98:58:b5:f1:fe:32:cd:24:8a:9a:e6:0e:c0:23:f1:
c1:0e:98:1c:8d:d5:f1:76:4c:bd:42:be:e1:a5:48:
5b:de:8e:b4:5b:93:2a:aa:0c:ed:f7:1f:28:2a:4d:
0a:0a:55:e2:8f:66:99:1c:92:3a:46:50:be:50:c1:
e3:5b:18:28:a2:88:ca:0f:01:03:b0:09:eb:01:c3:
82:10:44:42:7e:c4:0b:20:1d:b2:09:22:14:af:fa:
f4:1d:a0:57:df:3d:63:77:9e:c4:33:2a:38:c3:66:
ff:86:94:0d:29:c4:f9:57:3b:3d:30:58:18:8e:26:
d8:13:d3:b3:1c:e8:b5:40:fe:3a:74:69:35:9c:28:
b3:69:60:62:d6:3a:92:ce:6f:df:fb:f1:e6:e6:52:
33:ee:02:8e:3e:8e:42:80:8d:0b:15:5e:74:9a:9b:
46:91:80:cb:3f:6f:af:f8:af:2f:8b:c2:74:0a:1f:
92:df:35:32:ab:da:af:3b:d2:2c:95:83:61:63:a5:
83:00:de:32:42:ad:1b:55:3c:23:ba:04:3e:91:c7:
30:b6:89:49:0d:ee:0b:9d:9f:d1:a2:fb:dd:7b:1d:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:05:59:60:CF:5C:DF:1F:2C:0E:DE:DC:B8:FE:F3:E8:48:12:B4
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ba:10:ea:d2:c9:69:e4:5b:f4:f3:4b:c7:4b:9c:0d:40:04:
d7:c7:36:3a:53:d1:b1:c6:ee:29:4c:e0:11:d0:6a:60:e0:b1:
38:ff:b9:99:27:c4:dd:57:3c:a7:dd:e5:3b:ed:77:c3:67:7c:
fb:d1:a1:9e:aa:5f:90:a5:aa:3b:b6:a3:56:c4:7f:7c:fe:69:
72:da:df:58:43:c0:bb:97:a8:99:81:9c:70:df:0f:a1:0a:4d:
7f:a9:ff:ec:85:1e:50:8b:17:dc:0c:7e:c4:76:cc:33:cd:70:
04:0d:60:87:9e:ef:cf:88:70:6b:25:92:d5:23:20:47:9a:97:
b8:de:af:81:35:23:c0:3a:25:fb:93:7d:ac:96:00:87:4e:01:
7e:f8:03:c4:30:dd:22:66:3a:06:01:24:f1:52:07:a0:47:b3:
3c:1b:db:74:e7:19:fb:2e:fa:d0:52:c4:f8:85:ad:08:a4:d6:
1b:a6:16:3c:95:d4:83:d5:54:4c:b8:1d:65:12:72:58:1a:c4:
91:5f:b2:9a:4c:91:30:b2:66:d5:f0:20:14:c4:44:a0:6a:5a:
24:8d:63:3f:a6:3d:8f:fc:59:1d:51:9c:c7:b4:16:f5:71:ec:
69:74:a5:b5:1b:c3:53:80:77:44:5c:39:07:64:18:ad:18:bb:
3e:fd:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:25 2026 by rpki-client