
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: TBaOKyuxJwzfFHXlwGmFi73JY5StQIWJvP2jLuLRkQM=
Subject key identifier: 32:19:10:E0:B3:EF:07:C4:F2:1E:CE:96:D4:BF:7F:27:F5:42:39:40
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 092C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 076A
Signing time: Tue 12 May 2026 22:46:47 +0000
Manifest this update: Tue 12 May 2026 22:46:47 +0000
Manifest next update: Tue 19 May 2026 22:46:46 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: fjFPP5Gqas/DFlVkU9JCqzX1kON3tJzPG1QWVKqNBMY=)
2: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
3: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
4: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: yhi2Tkw0GGKeFUshsC9P2AdxggVs4mgh5LXy2qIJrfA=)
5: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
6: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: V1RW8W7dqic9L1K5+YBO2JCGFRP7qQnUqHH9i5+a7KE=)
7: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
8: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
9: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
10: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
11: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
12: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
13: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
14: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
15: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: afqLSqK+g44LudiUvgfKC16tZ8/+h2VJBHZlNpKW/eQ=)
16: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
17: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: aSrQY3U/P84RsKFHcVW17Pl1yzLmkmD0Vpz6zbzIlEQ=)
18: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: uds0/X1pk0xXW6c9nGAdHPkZUIT2pPHS7QCepyhgoUE=)
19: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
20: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
21: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
22: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
23: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: QhZqt/cqxOV2BObKWqDt9Jj+f6MiEWHCSIA5vvvZHUw=)
24: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
25: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: May 12 22:46:47 2026 GMT
Not After : May 19 22:46:46 2026 GMT
Subject: CN=6a03add7-6ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:c0:ea:87:f1:a1:76:73:0c:ce:c2:04:83:
5c:11:58:d7:4e:88:42:f4:65:1e:2a:38:dd:de:86:
4d:6f:49:b5:b3:b2:6a:52:a1:af:97:b4:ae:88:7a:
a5:45:4a:c0:3f:93:32:16:e9:ab:60:9a:b7:b4:4b:
8c:f4:6e:28:b9:0c:63:76:72:8b:58:ea:91:80:4f:
24:bf:72:aa:c6:95:87:6a:8a:58:02:99:b4:b9:f6:
9b:5d:36:1a:22:9a:c5:2b:c3:a8:8d:6d:df:71:39:
e7:1f:4b:09:f0:08:d8:8f:7e:78:5c:35:14:fa:30:
fd:4d:89:9e:f0:e8:5a:f6:4b:6e:b1:d4:28:87:60:
82:89:5a:95:e7:f3:39:56:4b:9a:ad:62:3e:98:ff:
5b:96:73:1c:25:54:bc:ec:22:f7:97:2f:d5:7f:b0:
f4:93:f3:fe:43:b8:11:92:c1:08:31:77:27:1f:81:
9c:cf:bd:39:07:5e:0c:d7:83:ca:f9:99:66:a6:52:
7a:5e:ee:95:08:79:46:44:00:85:cc:a7:01:0f:c8:
41:5f:05:59:68:e7:9d:ef:31:f8:c5:dc:af:76:05:
e7:fe:22:8e:42:95:ca:34:85:78:2e:cc:df:38:0f:
75:ae:55:93:36:82:16:91:fd:e7:32:44:e0:68:66:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:10:E0:B3:EF:07:C4:F2:1E:CE:96:D4:BF:7F:27:F5:42:39:40
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:75:be:de:00:08:d4:d5:72:55:e0:0e:e7:96:ee:bb:a6:b3:
5d:3e:40:fb:af:06:a1:38:73:36:84:31:6b:cf:22:f4:af:9d:
0d:77:0d:a2:ca:12:f1:1c:0f:29:22:8e:27:07:c2:8d:7b:a4:
b2:72:87:35:f7:a8:73:dd:7f:ef:c2:0e:a7:bd:ab:03:08:17:
55:72:10:ae:0e:6e:cf:ad:21:13:a9:dd:3a:46:47:65:00:f7:
da:d0:2e:1e:74:52:9b:10:f1:2d:9e:39:f4:86:3a:a7:07:2d:
cf:6f:4d:fb:ec:cb:5f:f9:80:c1:97:6b:ba:4c:17:93:2f:2b:
9f:7f:20:22:ba:d8:c0:4f:c3:1e:6b:fe:fd:b0:e6:a0:52:bd:
86:33:cd:31:6e:9e:a5:d5:ff:62:7f:40:d8:11:57:90:06:1c:
9a:40:39:ed:17:a8:a9:c1:bd:37:3c:04:cf:af:64:ad:75:25:
11:12:e4:d3:f9:34:78:a2:ed:b2:2f:88:1a:87:9b:ae:e7:29:
ba:7f:20:96:b6:a6:82:bf:ae:1d:7b:e5:2d:2a:96:3c:bd:3b:
78:5c:5c:1f:e1:d2:65:d4:9f:f4:d7:c9:bb:5b:51:d9:2d:ed:
4f:6b:5e:10:7f:82:8c:0f:46:7c:38:c4:4f:1c:7c:63:24:99:
9f:5a:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:55 2026 by rpki-client