
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: T2B+LN0MPMmEfEzOiQLhAj2KYcM7vx6iiNDteZFU0IA=
Subject key identifier: 77:DD:95:92:C7:41:25:89:67:7C:3C:5A:F3:B7:B5:1C:4D:C5:6F:A2
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0739
Signing time: Sat 28 Feb 2026 23:20:21 +0000
Manifest this update: Sat 28 Feb 2026 23:20:21 +0000
Manifest next update: Sat 07 Mar 2026 23:20:21 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: QUhhBUPYVqdiVZAGO4oAEGe36FHZJn3nemklCkX12eE=)
2: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: 9qE5tH+GYYqFJwxWgzlrWBSGQqpmQPy8LrvB9rE1fSA=)
3: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=)
4: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: hW/EOdfJpm7b8Mfhyah0mZlvXbd3DryDfNnkrETcIns=)
5: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=)
6: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=)
7: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=)
8: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=)
9: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=)
10: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: LcPWm9ZDnNP1sDZFVkma2o5PQ6jPkVljqIjWid9fl7Q=)
11: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 4s7EOK7fOyD0bh+PebzMoqJJ+Hie7EREL6lA7IpDGp8=)
12: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=)
13: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=)
14: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=)
15: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: pJb6vWrEK8AbvQaHM16naue6yxDiNpuJBWd0vzldJcA=)
16: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=)
17: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=)
18: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=)
19: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=)
20: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=)
21: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=)
22: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=)
23: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=)
24: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=)
25: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=)
26: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=)
27: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=)
28: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Feb 28 23:20:21 2026 GMT
Not After : Mar 7 23:20:21 2026 GMT
Subject: CN=69a37835-0b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:71:43:f7:5e:a4:ba:df:95:12:10:8b:e0:
9c:63:43:5d:d5:8f:99:80:48:e4:e8:8b:f8:a4:fd:
2c:8d:b5:58:26:af:94:48:1f:3b:d8:9d:fd:1e:3d:
6b:a2:f3:2e:b4:1d:55:25:d6:2e:28:9a:24:a0:02:
20:82:21:5d:60:41:92:27:b1:a8:bc:b8:a7:cf:df:
42:11:24:dd:3a:97:89:3f:33:c3:9d:a0:bc:e4:62:
18:31:64:d5:20:7c:74:bd:e4:91:bb:f2:6b:f5:11:
af:84:be:3c:22:97:81:83:8c:56:a7:80:38:bd:95:
2a:d8:22:f6:d5:97:0b:22:91:b2:20:99:56:f7:e1:
91:9a:52:15:8c:4f:42:e6:a2:3f:56:d8:cc:df:54:
74:85:2f:d7:85:28:2b:5d:29:33:ee:83:ad:c9:4c:
7e:75:4c:ad:ea:fa:ab:04:12:34:69:87:3a:fd:a6:
63:eb:61:32:68:ac:a6:d7:81:7e:2f:ac:bd:30:5c:
b9:40:59:c7:a5:a8:67:81:a1:1d:84:74:e8:fc:dd:
85:33:eb:38:7e:90:20:7e:53:44:90:94:65:0c:e5:
ab:bf:47:9f:ae:07:f1:6c:74:7d:23:f2:a2:24:31:
a0:9a:72:c2:d7:10:76:ff:b1:25:66:b7:8f:7e:c6:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:95:92:C7:41:25:89:67:7C:3C:5A:F3:B7:B5:1C:4D:C5:6F:A2
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:71:ea:ea:70:f8:c8:b5:95:b3:24:a8:22:3d:3a:f4:28:
04:c5:f9:fa:ee:b0:e1:f3:c0:20:f6:b5:20:47:1d:09:f7:f4:
64:e3:9e:55:39:6a:56:28:53:e9:76:d6:b6:94:68:aa:41:db:
dc:aa:41:64:0f:e7:5e:c2:a1:24:6b:2e:52:98:5c:83:3e:01:
f4:af:42:84:39:5a:f8:7e:73:48:6e:39:0d:09:af:54:15:67:
3c:1b:2d:56:19:03:ed:bd:08:25:2f:f0:80:84:eb:45:87:05:
c1:48:ed:17:dd:30:d4:fa:d9:80:2d:70:05:bb:64:e2:34:14:
2b:38:32:8a:66:8f:b5:5e:f8:56:df:53:d0:12:d5:59:92:23:
2d:9a:6d:d6:bf:5d:12:0e:25:aa:c1:d5:04:ea:51:7e:77:85:
58:6f:41:9e:39:82:e3:61:89:57:5c:ff:7a:08:e0:b0:1b:5a:
59:41:96:41:b4:79:6c:0b:ef:63:fc:d2:25:49:43:84:2a:e4:
01:d4:a9:d8:66:25:7d:c3:8a:48:52:bf:3e:d2:31:0d:9a:4e:
4c:7b:25:97:c9:d7:56:2a:c9:c7:64:04:dc:00:9c:df:db:64:
8c:8a:62:46:31:8f:85:cf:b8:86:a3:fc:74:c8:b2:cf:9f:6e:
0b:2b:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:34 2026 by rpki-client