
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: 9wd4cTecXQiFxxTvIs/G8jUHtqxt/yFUaH/U9uyjsIs=
Subject key identifier: D9:F7:D1:B5:96:EA:E7:A5:0B:8B:D6:6B:60:E8:34:F0:73:CA:7A:97
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 09B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 07C6
Signing time: Sat 10 Oct 2026 22:44:40 +0000
Manifest this update: Sat 10 Oct 2026 22:44:40 +0000
Manifest next update: Sat 17 Oct 2026 22:44:40 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: QESzrkr4VgO+XQijbzSLaeC4gb5RTzUo4d2SmTz4S+M=)
2: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: p5Ar/Y3yKWyl4wfili7WzV3//onZnjsth1pH0/EPtSU=)
3: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: 2il00FZ739DZVGescfv8Cug49vMrwp9IblZJ0ZC/DoY=)
4: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: GIxNd+4ChIthirLAAVDqfw1GeWI/p4K61wuc/lRCAgc=)
5: C93A0300695611F1B5B78DB37347A888.roa (hash: YWMHgKS5OKNo+PMP79qLgw4znuOdi05KbityFMjUgHc=)
6: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: fh4USdqimlZSTAlz3RmBqZ+p5/Bn2203e/pYKP4GkQ4=)
7: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: SLCj9anN66mOHlI7TnJKqCN/QIRAStQO4Xz/z4ETHIw=)
8: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: khr1muT8Sl3LtUdR7jUBmmwhTuzQABOuoyvVgE3pJEg=)
9: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: fF+09FIKGiSq1eldAeFcdIXf3LLndV5yH+O0x8E/FcA=)
10: CA585D04695611F1B5B78DB37347A888.roa (hash: 2w+4FRPq9PLl3sJ8KEWwhZgoS0HJeWcUkVXycyWZGm0=)
11: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: xOVCUi4wDk4f67M33MXCeGdqVlkhSkGVDTufh41ZJmA=)
12: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 4xDZ2uTtYZ3zXiXzWetySxs/WR4zvBBQ+MNbpwd+/4E=)
13: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5+RSo2XaJHGxC8aXqWqW+SBcd+c/AWpW5g4DvaDb8H0=)
14: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: h/nMZBhd4REDO+6Yk5wps7TuEmVkRWI/NbQkF/1TlEo=)
15: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: KqKf+v1xP+tdZnoxxwJKlPYp9JaK03zEbt6pm0igT4s=)
16: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: s6TGCCNMojg+eyCd+4yo25OhfEDNNwbNEyznpNQc+pk=)
17: DEC12D0AC3BC11F18F6E6B185511F970.roa (hash: I5Lpof5aa/ZhVzj8/z2U4fbpf9PtR/OGnP+cCJbzkiY=)
18: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: Nj/yW/yhtD95HCCDoYGXWpERKmAgmVlbM13z90WaSdg=)
19: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: e0/pverBa6Jpv6AdP9wiuQiGW38MBPBQ9M3kVrGMFq8=)
20: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: Ltcec8YUrhHMlW0eJHKnBLOWsEySWjWoXSf22fFRz1Y=)
21: DC3B564C5B2411F18054A248B6833773.roa (hash: 1AExd7o5z6C1L5zjfymt+MZfkm91TDsK1XNoI1b3j2U=)
22: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: BLni4Yd/1+eVE2g8cq842019Ap4OliRK/7Yy17FI8hg=)
23: A39375EE62FA11F19A22F1FA7347A888.roa (hash: 3hVdNm7JKQftwwkRaKd9ZO5EvqFkPNdWJkmVj/Ke5pI=)
24: 46F0DC7A661811F1A7C341049C47A888.roa (hash: ulJz/9NmQo8koao2ZSOGsyGUlgazq/Z41hXLJZR/I6A=)
25: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: r3Qs/dln22xhZ3ZXAFMMdEZb+Tcrw42Kr0TOaF2uwn8=)
26: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: ghzafIg/0kjxRhwEEzQAR/u8pQaszS9QO+uG2myrS00=)
27: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: UBDYmezwlsMtTxcxj6emBEmwSeVIYAsuyeL7PbcTCHU=)
28: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: VKLJAvPR/dJeNPU6ujFtgLIN4Jf3zca/l2RnoM6JKwU=)
29: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: 6B35rfEKeNMxUR/KJBocQxmAcHhBBj7eKbxn9uCgQNE=)
30: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: R8J13N3HbBaZrpNfd0dDpPDxtE06NzUUaHlAuRV5t2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482 (0x9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 10 22:44:40 2026 GMT
Not After : Oct 17 22:44:40 2026 GMT
Subject: CN=6acabfd8-5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:87:b9:17:0e:2f:bd:19:fc:8c:a2:32:ae:
49:71:8d:14:6c:22:ff:e2:f0:21:55:a0:e6:73:b1:
27:4f:af:5d:ff:04:09:77:81:2f:65:bb:e1:85:e0:
64:d3:c2:18:7a:2a:9d:25:50:d9:b4:b1:ad:b4:7b:
fe:39:f3:cf:9e:c6:79:9c:f5:cb:f6:8e:2d:07:40:
15:9a:05:82:c3:68:d1:7d:5f:32:d1:09:0d:6c:e8:
3d:36:48:7a:4c:cc:ff:06:9d:1c:b2:60:97:db:de:
aa:e2:02:e8:6e:62:da:9f:9c:b9:8d:c5:c5:93:19:
95:77:7a:f1:d7:3a:c2:78:cb:1e:87:dc:0b:1f:0b:
6a:b3:3c:6d:15:2b:55:0d:61:db:bb:37:d5:92:49:
76:43:71:06:a8:bc:92:7d:22:36:fc:ef:8e:60:89:
b2:ca:db:df:22:a8:a0:d6:03:67:38:28:6f:55:0a:
2b:ed:72:23:61:be:47:b8:fe:b6:97:a5:77:96:f9:
cb:7d:fb:d4:8a:07:1c:47:ac:f2:8e:f6:47:26:d4:
39:6b:93:69:1b:07:f6:92:48:a5:72:90:75:44:ce:
0f:1f:96:23:64:51:71:d8:88:9f:76:ad:24:4e:85:
1b:8b:58:00:5a:e9:1a:10:9d:7e:4a:a7:75:ac:20:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F7:D1:B5:96:EA:E7:A5:0B:8B:D6:6B:60:E8:34:F0:73:CA:7A:97
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:27:82:24:b7:26:dc:a2:a7:04:4f:2c:26:f3:68:07:f4:ef:
97:a6:96:96:2b:42:ad:bc:25:44:ae:a1:c8:90:b9:48:4c:c1:
75:7f:cc:7d:71:7e:a2:27:0d:8e:6c:bf:64:f7:8d:d6:fd:8d:
f3:f7:ca:fe:f0:6e:f3:e1:90:4b:9a:55:b7:cf:68:8f:e3:9a:
b7:99:d1:3f:57:7c:d8:6a:6e:0f:c9:2b:2f:75:0e:e1:a8:e9:
38:47:09:7b:80:94:6e:79:de:6a:b4:c2:49:06:a0:f0:c2:ae:
d3:16:1c:71:b5:c2:40:26:0a:b0:9e:0e:93:76:8f:0c:be:d6:
7e:24:53:ea:fa:98:4d:80:73:b1:e6:29:ad:76:8b:ff:03:5e:
27:44:35:b0:54:ad:a2:87:6a:d2:9c:92:4b:9d:c8:b4:4a:11:
bb:ca:08:0c:de:b0:cc:d1:7d:2d:3a:a5:4d:98:2f:cd:16:a6:
2e:27:0c:1e:4f:ea:60:58:a1:48:73:39:38:a8:ee:e1:90:4d:
48:72:f7:75:11:cf:e0:c1:96:18:eb:10:6d:ba:14:6b:46:f6:
07:54:a2:08:9e:3c:48:8d:a7:4b:87:96:49:4d:df:ba:76:a6:
01:f6:76:1e:e5:ae:78:a8:95:d8:b6:f7:d9:58:50:17:76:95:
29:49:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:32:14 2026 by rpki-client