
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: Lw2X4Om3s/IwkyB9GhnROkgqq1+KMDQeTkSsTt+VXt0=
Subject key identifier: 48:A3:E1:2E:D1:BE:DD:F9:D2:E0:8A:F4:51:84:DF:43:03:02:98:EE
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0967
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0799
Signing time: Mon 20 Jul 2026 23:17:39 +0000
Manifest this update: Mon 20 Jul 2026 23:17:38 +0000
Manifest next update: Mon 27 Jul 2026 23:17:38 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: i9vQzhAqGdWk2LM057JwnM0g+23RasSPUERx5QkSgNE=)
2: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
3: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
4: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
5: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: QhZqt/cqxOV2BObKWqDt9Jj+f6MiEWHCSIA5vvvZHUw=)
6: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: E74sscn7jBU1qbk4XN9ixBviKFSvXv7wKrb6AXIefuo=)
7: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
8: DC3B564C5B2411F18054A248B6833773.roa (hash: FRlTztebrzKN5gTiqkicNfd899UvBHsCJgIh/4JZ0Ss=)
9: CA585D04695611F1B5B78DB37347A888.roa (hash: EnIugJVDnkN0xw63vZjfnJBWwmyS/wsHXlu1ZIgBl2o=)
10: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
11: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
12: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
13: A39375EE62FA11F19A22F1FA7347A888.roa (hash: z48mclVW3Hic6NacC39C75BgFW2TMRtoADMji1POyXI=)
14: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
15: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: 6JnZ2Rfkl+jpMosCCBlC1Q8UNFhoX1SLQq1/RqNVuVA=)
16: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
17: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
18: C93A0300695611F1B5B78DB37347A888.roa (hash: WO68xeZlgZ/rGRC3JJxN4rvFYlRy1+rlfvCU4tjLXK4=)
19: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: Z3Drs1krPdarIfTl1vlof7LIzPwGyPRsMoJWefojANA=)
20: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
21: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
22: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
23: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
24: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
25: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: NCEN0rJIp6F2P9KsjO95SUkZxtB8d9XTNbjmGEq2cXY=)
26: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
27: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
28: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
29: 46F0DC7A661811F1A7C341049C47A888.roa (hash: AHaOK9qgjWwhnm1JN3/XhlicNxlQpEV5zDvwOjLvC0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jul 20 23:17:38 2026 GMT
Not After : Jul 27 23:17:38 2026 GMT
Subject: CN=6a5eac93-037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:04:bc:ef:37:e2:09:28:30:b6:4c:28:3f:
1f:ab:d8:a9:95:9a:e6:90:b5:de:93:77:13:26:05:
da:ff:a6:d3:af:71:23:2c:48:99:a3:8f:8b:56:72:
bc:60:2b:86:2c:a9:36:89:3a:20:bb:9d:3e:ef:ff:
49:5b:f1:27:63:13:1f:72:9d:38:59:c2:42:72:77:
20:0d:a8:80:95:e2:39:9e:44:2f:81:e4:c1:7f:30:
4d:85:80:f4:de:77:5f:45:98:91:84:74:98:cc:b1:
8c:dd:42:bc:f3:92:d0:39:36:95:84:f8:b1:b7:a3:
77:e8:61:e3:f7:f4:09:d1:cd:d5:f5:77:71:95:f6:
36:31:d0:06:31:b3:a2:6f:df:cc:40:e4:80:c0:8b:
15:c5:19:89:64:47:b7:db:65:88:6b:36:79:c6:81:
75:ce:14:9e:ee:4e:4f:7e:5d:bb:99:58:f1:cb:30:
dd:c6:f4:e8:31:fc:a4:ea:3b:60:f4:bf:44:96:69:
c2:4a:ac:9d:60:07:12:a1:19:c8:9f:d7:79:84:82:
e4:47:17:3c:44:bb:46:67:80:98:86:8a:00:1a:42:
e0:6a:81:bc:0d:36:f4:cc:8d:0a:1e:70:0e:ec:87:
86:c2:ec:65:b6:69:5d:42:ba:ea:ac:90:a1:b3:df:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:E1:2E:D1:BE:DD:F9:D2:E0:8A:F4:51:84:DF:43:03:02:98:EE
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:86:dc:b5:63:ea:a8:1e:21:7e:3e:03:36:66:45:ca:7d:
7e:b3:8b:7a:0f:3e:bc:f2:63:78:23:50:5c:5a:0d:05:92:36:
6a:98:4d:6c:ea:67:1a:d2:81:f0:65:7b:d2:75:4c:a3:36:0c:
2f:88:a4:37:2c:8f:c8:e6:55:22:2f:26:fe:c5:5e:dd:68:9d:
c4:fb:fa:6a:0b:5a:6c:5e:84:73:05:8a:4e:04:fb:c8:5a:db:
21:ca:dc:0a:c6:3b:b6:df:78:e5:be:e4:85:ee:5d:19:33:1e:
4c:96:f7:49:8f:2e:1a:9d:c2:64:f1:c2:b2:ed:7e:eb:a5:61:
b0:72:c0:c9:a8:8d:5c:0e:f8:a5:73:fd:e5:d6:b6:a7:62:23:
a0:d4:13:2c:e7:51:6c:83:08:e0:47:97:b4:60:11:b5:63:97:
24:cd:24:76:77:b3:c8:3a:74:3e:4d:4c:28:40:b6:e8:91:fe:
b8:02:12:43:5c:4f:af:ba:72:07:aa:fd:e0:33:dc:58:b6:08:
18:39:4b:4e:88:02:5e:42:2c:e5:86:5c:67:6c:5b:ad:fc:36:
75:43:39:a6:d0:17:3e:d2:ee:7d:09:2f:03:25:36:e2:e3:bd:
22:e1:5d:d1:ac:53:0e:db:8f:33:bd:33:97:e9:65:b8:d0:3d:
fa:59:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:54 2026 by rpki-client