
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: s1A4sd36uEGXgDqDhpZXOUAcgvmakJ/jwh7ivNlQXbo=
Subject key identifier: A2:09:54:B0:51:D2:63:2B:BA:94:9E:99:5E:38:34:31:80:17:63:DD
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 093D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0778
Signing time: Tue 02 Jun 2026 22:42:31 +0000
Manifest this update: Tue 02 Jun 2026 22:42:31 +0000
Manifest next update: Tue 09 Jun 2026 22:42:31 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: dHMk7x4MaGJmgbliWT4TxO3vJPXzQpWaJ/Ql5nnKofc=)
2: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
3: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
4: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
5: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: uds0/X1pk0xXW6c9nGAdHPkZUIT2pPHS7QCepyhgoUE=)
6: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
7: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
8: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
9: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
10: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
11: 98F9F70C5B2511F1B00235D7B6833773.roa (hash: +TGuUMvbCGYkRNYrY9pC0xfVK7JXDdDIJCHDNxCJsso=)
12: 97FAD4A25B2511F1B00235D7B6833773.roa (hash: CG/M1CgAwoe0x2eUcbFSAucdH4ccfac549wLJCugalo=)
13: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
14: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
15: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: QhZqt/cqxOV2BObKWqDt9Jj+f6MiEWHCSIA5vvvZHUw=)
17: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
18: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
19: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: aSrQY3U/P84RsKFHcVW17Pl1yzLmkmD0Vpz6zbzIlEQ=)
20: DC3B564C5B2411F18054A248B6833773.roa (hash: FRlTztebrzKN5gTiqkicNfd899UvBHsCJgIh/4JZ0Ss=)
21: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
22: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
23: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: V1RW8W7dqic9L1K5+YBO2JCGFRP7qQnUqHH9i5+a7KE=)
24: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
25: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
26: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 22:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 2 22:42:31 2026 GMT
Not After : Jun 9 22:42:31 2026 GMT
Subject: CN=6a1f5c57-5c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:e8:bf:2a:70:3f:dd:82:35:4f:a0:71:30:
37:e7:01:b6:94:69:93:7c:83:cb:81:d9:81:f9:bb:
10:b6:50:6b:96:cf:01:a3:34:0a:be:69:44:0f:30:
25:fa:72:4e:f1:e0:30:5d:fe:73:96:86:24:30:6a:
5e:0e:f5:c7:c7:95:f2:ea:ed:fd:bc:fd:a8:eb:f9:
97:a8:fa:0e:94:46:64:be:a1:d5:38:30:26:24:7c:
76:14:bd:a4:87:7d:58:7a:89:df:46:fc:20:b8:6e:
b8:45:f3:b0:51:05:60:b0:3e:a2:ae:a0:90:8d:b6:
09:95:dc:ed:f8:67:d5:b2:d7:f0:c3:b0:ef:b9:58:
59:eb:6a:82:c7:ea:99:f9:7b:28:2b:ec:db:dc:28:
3d:b4:5e:15:e6:6a:63:1d:de:b4:bd:c4:54:b4:cf:
48:2f:b7:11:06:72:b4:6d:40:c5:ce:63:61:af:3e:
68:19:7d:b4:1d:33:b9:2b:a7:f8:56:2d:ff:bd:13:
06:e5:e9:6a:f4:0e:16:3e:e0:7b:18:74:34:b2:70:
ff:2c:4c:77:5e:01:14:34:14:ee:a6:d7:bd:30:a7:
cc:5d:5e:36:70:1f:1b:11:80:74:ae:44:65:af:ff:
3a:f9:dd:4d:e5:44:a8:4d:49:05:e2:37:63:ed:ec:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:54:B0:51:D2:63:2B:BA:94:9E:99:5E:38:34:31:80:17:63:DD
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:40:6a:c7:89:0e:64:c7:e2:a3:a0:3a:e4:cb:37:c8:ba:ad:
b7:0c:e6:fc:0a:cb:0b:58:b6:91:9e:6a:55:46:0e:f5:f1:6a:
07:97:91:8d:9c:ad:61:1c:8f:c2:56:55:9b:18:22:72:f1:0b:
0b:21:5d:18:48:d6:25:a7:e0:df:9a:f3:dd:42:56:a8:0e:cc:
03:19:54:9b:d4:cb:62:57:8c:6a:3c:34:83:ad:c2:93:8d:18:
43:7c:30:a4:42:a6:9f:71:ce:aa:97:cf:f2:1b:bf:54:12:e9:
a6:fe:df:03:c7:4e:64:72:de:3d:63:b0:28:be:87:8d:03:4a:
09:50:a2:ed:9b:b8:a3:1e:64:53:ad:3c:20:2b:dd:cd:24:80:
94:43:79:6b:be:87:4b:d5:d9:3a:ba:64:53:6f:33:b6:fe:12:
36:8e:b6:ff:9a:30:5f:4f:24:23:69:6b:47:08:49:e7:23:69:
f1:e5:1b:d1:b0:f8:45:ec:a9:cb:ce:3c:89:15:aa:78:d5:45:
9e:0b:f3:a8:64:1d:51:49:ed:b8:ac:0d:d4:42:92:43:03:82:
a8:6c:6f:b1:ae:0f:36:c2:8b:d5:25:3d:5d:05:b6:bf:b1:14:
c8:d0:db:ad:2b:da:e0:07:d3:30:3b:e5:a3:c5:4b:6d:57:c6:
3b:75:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:07 2026 by rpki-client