
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: XPfgu9i0RIMe2AHeDW49elZeCtbduFRrIIseIBSPRnA=
Subject key identifier: A4:5E:89:EA:77:2F:3F:44:26:BB:90:C2:B8:FE:50:9B:E3:48:E1:CC
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 09B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 07CC
Signing time: Thu 22 Oct 2026 22:32:42 +0000
Manifest this update: Thu 22 Oct 2026 22:32:41 +0000
Manifest next update: Thu 29 Oct 2026 22:32:41 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: iBIRnAnAYq8mzyQki1UAKvUZIqq9vkF+XlWE2b5mtF0=)
2: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: BLni4Yd/1+eVE2g8cq842019Ap4OliRK/7Yy17FI8hg=)
3: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: VKLJAvPR/dJeNPU6ujFtgLIN4Jf3zca/l2RnoM6JKwU=)
4: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: khr1muT8Sl3LtUdR7jUBmmwhTuzQABOuoyvVgE3pJEg=)
5: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: KqKf+v1xP+tdZnoxxwJKlPYp9JaK03zEbt6pm0igT4s=)
6: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: s6TGCCNMojg+eyCd+4yo25OhfEDNNwbNEyznpNQc+pk=)
7: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: fF+09FIKGiSq1eldAeFcdIXf3LLndV5yH+O0x8E/FcA=)
8: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: 2il00FZ739DZVGescfv8Cug49vMrwp9IblZJ0ZC/DoY=)
9: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: r3Qs/dln22xhZ3ZXAFMMdEZb+Tcrw42Kr0TOaF2uwn8=)
10: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: 6B35rfEKeNMxUR/KJBocQxmAcHhBBj7eKbxn9uCgQNE=)
11: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 4xDZ2uTtYZ3zXiXzWetySxs/WR4zvBBQ+MNbpwd+/4E=)
12: DC3B564C5B2411F18054A248B6833773.roa (hash: 1AExd7o5z6C1L5zjfymt+MZfkm91TDsK1XNoI1b3j2U=)
13: A39375EE62FA11F19A22F1FA7347A888.roa (hash: 3hVdNm7JKQftwwkRaKd9ZO5EvqFkPNdWJkmVj/Ke5pI=)
14: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: SLCj9anN66mOHlI7TnJKqCN/QIRAStQO4Xz/z4ETHIw=)
15: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: Nj/yW/yhtD95HCCDoYGXWpERKmAgmVlbM13z90WaSdg=)
16: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5+RSo2XaJHGxC8aXqWqW+SBcd+c/AWpW5g4DvaDb8H0=)
17: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: Ltcec8YUrhHMlW0eJHKnBLOWsEySWjWoXSf22fFRz1Y=)
18: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: e0/pverBa6Jpv6AdP9wiuQiGW38MBPBQ9M3kVrGMFq8=)
19: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: fh4USdqimlZSTAlz3RmBqZ+p5/Bn2203e/pYKP4GkQ4=)
20: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: xOVCUi4wDk4f67M33MXCeGdqVlkhSkGVDTufh41ZJmA=)
21: C93A0300695611F1B5B78DB37347A888.roa (hash: YWMHgKS5OKNo+PMP79qLgw4znuOdi05KbityFMjUgHc=)
22: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: p5Ar/Y3yKWyl4wfili7WzV3//onZnjsth1pH0/EPtSU=)
23: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: R8J13N3HbBaZrpNfd0dDpPDxtE06NzUUaHlAuRV5t2c=)
24: 46F0DC7A661811F1A7C341049C47A888.roa (hash: ulJz/9NmQo8koao2ZSOGsyGUlgazq/Z41hXLJZR/I6A=)
25: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: ghzafIg/0kjxRhwEEzQAR/u8pQaszS9QO+uG2myrS00=)
26: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: h/nMZBhd4REDO+6Yk5wps7TuEmVkRWI/NbQkF/1TlEo=)
27: DEC12D0AC3BC11F18F6E6B185511F970.roa (hash: I5Lpof5aa/ZhVzj8/z2U4fbpf9PtR/OGnP+cCJbzkiY=)
28: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: GIxNd+4ChIthirLAAVDqfw1GeWI/p4K61wuc/lRCAgc=)
29: CA585D04695611F1B5B78DB37347A888.roa (hash: 2w+4FRPq9PLl3sJ8KEWwhZgoS0HJeWcUkVXycyWZGm0=)
30: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: UBDYmezwlsMtTxcxj6emBEmwSeVIYAsuyeL7PbcTCHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 22 22:32:41 2026 GMT
Not After : Oct 29 22:32:41 2026 GMT
Subject: CN=6ada8f0a-a894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:95:06:14:61:11:a9:ca:14:13:c2:b4:b9:eb:
4f:d3:04:60:7d:92:60:e5:48:30:8e:2b:5a:b0:ab:
d0:6f:62:99:4f:f6:8b:16:0a:d7:63:0f:62:8d:e9:
87:91:11:e7:51:1f:31:2f:1b:b3:ea:6a:ab:8d:1c:
5c:31:38:8b:24:6c:02:e3:4d:31:d3:85:6c:9e:ab:
f8:fc:90:ab:b8:3c:b1:97:6e:e7:7b:d5:f0:de:e5:
23:05:31:bd:f4:2c:3c:0c:d5:b9:f2:42:eb:d6:49:
08:0b:5f:e9:0c:16:ad:be:84:f3:ce:0c:50:71:34:
9b:03:b8:e1:83:a3:c5:cf:98:cb:c4:bc:fc:d4:79:
9b:a0:de:f8:c0:91:07:dc:55:33:ce:47:0f:85:61:
9d:d3:1a:07:9c:c6:01:29:2b:41:f5:87:09:da:c6:
c4:c9:20:25:8b:e8:41:07:8b:74:40:61:40:38:d7:
3b:2e:42:5b:c3:3b:13:bd:1f:8a:5d:ee:df:99:16:
33:2b:9b:96:0f:36:70:a7:05:ce:95:0b:ed:ff:25:
7c:0e:68:ed:f2:c0:fd:ab:20:63:b2:fe:40:6f:be:
e7:38:1f:87:71:3a:ab:4a:bb:6d:4c:a4:d5:41:ad:
8f:61:00:e8:2e:d2:1a:36:86:8c:d1:17:23:3f:8d:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:89:EA:77:2F:3F:44:26:BB:90:C2:B8:FE:50:9B:E3:48:E1:CC
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:ed:30:b8:46:db:14:d9:8b:c6:4c:48:76:e1:ba:d4:5c:
bb:b5:36:3a:ad:b5:17:63:44:67:33:82:d8:5e:da:cd:5b:b9:
3e:a8:d5:11:a7:e2:c3:ae:6c:a1:1c:bf:47:ea:ab:01:05:9b:
64:7d:a9:79:bc:bf:dc:df:fe:6c:fe:96:12:ea:42:e1:d1:fe:
aa:9a:2c:30:57:90:a3:14:b5:83:61:02:13:68:22:86:7b:d2:
42:6f:1e:f3:2e:b1:11:fb:d2:db:7c:79:b5:c4:07:ee:ee:88:
a8:73:b9:b8:2b:db:4d:d6:81:c3:a6:0d:cf:09:af:e2:9b:b4:
56:cf:97:07:0f:a1:d4:fd:48:f4:b5:d6:04:a9:96:a6:32:c7:
13:c9:f4:7c:5d:d7:a1:6d:88:5b:9d:a6:5d:00:06:b9:d7:f6:
ae:88:09:96:63:d7:2e:db:0a:13:18:4b:38:20:9b:c1:17:9e:
59:33:44:98:78:9a:4a:6b:db:b4:63:f1:1d:0b:d2:ba:d0:7e:
06:5d:4f:86:9d:ed:b3:8a:cc:97:6d:ce:69:14:a9:ed:6c:6d:
41:82:64:28:b3:4c:37:67:00:c7:62:03:8b:a7:60:ca:e7:d2:
0e:e6:1a:db:7e:70:ba:6c:70:33:8f:f9:43:08:a5:90:26:82:
03:e8:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:44:47 2026 by rpki-client