
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: eXZbBH3l+ONMu15io1DKjg3DCMCC/sfAgyB2oR/TNtg=
Subject key identifier: 4C:1E:26:61:03:EC:9B:75:B8:35:73:35:79:45:65:E1:20:46:BE:AA
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 073D
Signing time: Wed 04 Mar 2026 22:21:51 +0000
Manifest this update: Wed 04 Mar 2026 22:21:51 +0000
Manifest next update: Wed 11 Mar 2026 22:21:51 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: Aj2rmL5tPaaaMWRQa+IIPoEk/INiSgeaNgkSZiZq0Qs=)
2: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
3: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: yhi2Tkw0GGKeFUshsC9P2AdxggVs4mgh5LXy2qIJrfA=)
4: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
5: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: afqLSqK+g44LudiUvgfKC16tZ8/+h2VJBHZlNpKW/eQ=)
6: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
7: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: vP8lL4o3HuYHEtxmFVFrIPK3xiCpCNcYIvaXF6iQ6qc=)
8: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
9: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
10: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
11: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
12: 757D79F84A8611F08884C659C4F9AE02.roa (hash: dP3lIgCP3vs1WOQFtOzcxup1ukptUZIrUzaEmi5dq2w=)
13: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: dfyBO68PAQBqMnaLR2chufMyxD14C0gNqFDFvWt4lAg=)
14: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
15: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: lN+Yig4ktb2IRRkSds0TAyhAANJ0TrEtkfnkXcROlAM=)
17: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
18: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: 9gSOHUSohY5yQcA++Pc2d1nHGBBiQSxhi7l5jPbZY9k=)
19: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
20: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
21: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
22: 72DF94424A8611F08884C659C4F9AE02.roa (hash: vo0Z9lnn3ID47G8AGl41mzrUJ1r+LNl3V8kwSFSFJD0=)
23: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
24: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
25: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
26: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: uds0/X1pk0xXW6c9nGAdHPkZUIT2pPHS7QCepyhgoUE=)
27: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
28: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 22:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Mar 4 22:21:51 2026 GMT
Not After : Mar 11 22:21:51 2026 GMT
Subject: CN=69a8b07f-9d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:73:64:cf:99:14:e0:2b:b7:b6:66:62:fd:
69:d2:a3:04:2b:e9:0d:c3:88:d1:9b:2a:aa:b3:23:
9a:93:f1:91:6b:95:ff:5a:a6:d6:db:09:11:ce:3a:
10:0c:c0:31:57:c8:76:91:79:ec:3d:31:13:47:e5:
70:b2:ce:0c:41:bd:b7:88:a3:16:8d:cc:80:e0:27:
6a:3b:4d:e5:ce:d5:83:38:bd:02:7a:2d:98:cb:19:
2f:1e:f9:43:d3:82:f7:c1:57:47:dd:c3:f7:c9:21:
9a:e7:b1:16:b2:01:64:3e:69:c9:01:8c:fb:5d:12:
96:f5:97:61:a1:e7:7b:00:cb:d4:f9:c4:e3:74:94:
d9:1b:f6:a4:5e:d7:0a:08:30:d7:54:8c:91:9c:56:
53:f9:85:83:33:3b:f6:17:c8:da:4c:f3:eb:21:3f:
0d:fb:19:32:d3:72:42:9c:a2:ce:dc:99:5f:2d:51:
ab:87:f5:a1:b8:e2:38:50:b6:4d:ab:e5:b8:91:44:
eb:e8:23:b7:c6:d0:88:dd:7c:8b:9c:8e:7d:70:db:
49:7e:64:75:8c:0b:22:24:80:81:6c:53:ce:4d:d1:
71:4a:cb:d6:24:bf:6f:2e:50:9b:bb:2d:91:95:52:
81:d0:da:34:b5:de:bd:93:c4:76:0b:ab:da:31:f6:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:26:61:03:EC:9B:75:B8:35:73:35:79:45:65:E1:20:46:BE:AA
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:53:81:f8:92:32:d9:a0:b3:2e:56:63:8c:1b:55:cc:d3:06:
c5:cd:5b:4a:0e:10:01:a7:ba:64:d1:71:69:3a:06:b8:4d:5a:
f9:85:48:76:b3:c8:27:88:34:bc:62:9b:89:5f:06:04:1c:28:
68:6f:0a:3e:ea:66:7e:82:b1:38:41:d5:e0:07:86:db:f8:4e:
0c:85:bd:a8:e5:2d:92:51:41:30:ce:a9:63:26:a1:04:cd:0f:
51:d6:0b:c4:45:4b:03:d1:74:2a:f8:03:3c:3b:9b:a4:6c:0b:
22:7b:ff:03:a2:14:b3:87:1e:05:7d:eb:a9:d5:ad:be:e1:4a:
c2:5a:c1:55:ca:43:7e:cc:82:f7:4d:2a:40:ce:17:e4:ff:db:
7a:42:a7:2e:b2:78:8e:31:f1:84:9b:92:e6:6f:2a:33:d5:66:
b8:19:b6:b9:0f:28:6b:ba:19:36:de:64:25:65:d0:8c:88:d8:
a7:ed:3d:bd:e7:85:c6:3c:49:78:29:58:c7:61:03:15:36:28:
c7:3e:a4:09:d3:ec:ca:bc:1a:7a:bb:14:d0:0f:d9:f9:63:6c:
5c:25:0e:95:fe:42:47:f9:97:68:4e:9b:78:9d:89:a7:6f:c7:
8c:f3:e9:6c:c5:7e:f3:c3:e8:25:aa:88:b5:76:5e:4d:69:e0:
34:74:ba:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjYwMzA0MjIyMTUxWhcNMjYwMzExMjIyMTUxWjAYMRYwFAYD
VQQDEw02OWE4YjA3Zi05ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03JzZM+ZFOArt7ZmYv1p0qMEK+kNw4jRmyqqsyOak/GRa5X/WqbW2wkRzjoQ
DMAxV8h2kXnsPTETR+Vwss4MQb23iKMWjcyA4CdqO03lztWDOL0Cei2YyxkvHvlD
04L3wVdH3cP3ySGa57EWsgFkPmnJAYz7XRKW9Zdhoed7AMvU+cTjdJTZG/akXtcK
CDDXVIyRnFZT+YWDMzv2F8jaTPPrIT8N+xky03JCnKLO3JlfLVGrh/WhuOI4ULZN
q+W4kUTr6CO3xtCI3XyLnI59cNtJfmR1jAsiJICBbFPOTdFxSsvWJL9vLlCbuy2R
lVKB0No0td69k8R2C6vaMfY0BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEweJmED
7Jt1uDVzNXlFZeEgRr6qMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D
QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAilOB+JIy2aCzLlZjjBtVzNMGxc1bSg4QAae6ZNFxaToGuE1a+YVIdrPIJ4g0
vGKbiV8GBBwoaG8KPupmfoKxOEHV4AeG2/hODIW9qOUtklFBMM6pYyahBM0PUdYL
xEVLA9F0KvgDPDubpGwLInv/A6IUs4ceBX3rqdWtvuFKwlrBVcpDfsyC900qQM4X
5P/bekKnLrJ4jjHxhJuS5m8qM9VmuBm2uQ8oa7oZNt5kJWXQjIjYp+09veeFxjxJ
eClYx2EDFTYoxz6kCdPsyrwaersU0A/Z+WNsXCUOlf5CR/mXaE6beJ2Jp2/HjPPp
bMV+88PoJaqItXZeTWngNHS6hw==
-----END CERTIFICATE-----
Generated at Fri Mar 6 04:01:35 2026 by rpki-client