
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier: 5EDSsqzuVZFgVfHTqFKMWBUi4E2CjzN6Vn7xYy+sJ9c=
Subject key identifier: 6A:3D:2F:C8:B6:6E:BA:52:CC:7A:18:EF:13:B2:74:CB:04:AF:8F:62
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number: 03E8
Signing time: Wed 25 Mar 2026 00:18:55 +0000
Manifest this update: Wed 25 Mar 2026 00:18:55 +0000
Manifest next update: Wed 01 Apr 2026 00:18:55 +0000
Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: JxJtPr3fuYhszhTJZGDLs2GnJbHWiM6wN4ZTFbE9RMw=)
2: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=)
3: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=)
4: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=)
5: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=)
6: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=)
7: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=)
8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=)
9: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=)
10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=)
11: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=)
12: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Mar 25 00:18:55 2026 GMT
Not After : Apr 1 00:18:55 2026 GMT
Subject: CN=69c329ef-bb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:50:07:26:3a:6b:dd:bb:12:d9:af:2d:9f:
61:10:b7:f2:01:ea:c5:4c:0d:1e:42:02:49:37:d6:
29:a0:6e:6c:cf:c8:1b:f7:4d:df:41:49:28:8a:a6:
61:c4:03:ba:d0:c0:a8:a6:17:c6:ac:30:5e:61:3a:
a7:4d:ec:3a:8a:0c:6f:1a:f6:c8:51:3a:60:da:7c:
15:91:41:7b:b6:37:f0:61:43:de:74:b3:c2:92:e4:
5e:45:51:af:02:41:bf:4e:2e:69:67:41:9b:58:6a:
f6:22:1e:64:bb:31:51:1b:f8:c3:97:f5:c8:d7:1a:
bf:a5:e6:da:0f:e8:59:a8:c4:c4:b5:33:e9:d1:47:
6f:9a:84:f0:09:bd:cd:4d:58:9f:57:46:a2:50:5b:
26:e8:3c:fa:a7:a1:9e:77:e9:f7:2f:9c:29:25:dd:
c5:d3:84:17:12:c1:76:91:e9:ba:5b:32:a5:a6:37:
26:fc:6b:39:3a:ac:9b:88:76:92:4a:59:da:8d:cb:
b6:4f:d5:51:48:69:e9:8e:d6:a1:5a:64:47:41:bb:
9e:51:88:c9:a7:57:a7:2d:9b:c2:cf:2b:59:49:e5:
aa:9a:a4:0e:a0:06:f3:b6:3e:1e:de:cd:41:6c:b1:
36:c6:af:24:19:e9:b6:d8:7d:54:c0:c9:c6:cc:72:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3D:2F:C8:B6:6E:BA:52:CC:7A:18:EF:13:B2:74:CB:04:AF:8F:62
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:ba:75:3f:04:0f:10:c8:f4:6c:41:9c:4e:8e:e4:67:18:
32:16:23:9e:00:40:1b:43:0f:02:e4:f4:7c:31:0d:a6:4a:11:
b5:cd:76:58:b9:78:37:89:68:97:90:c2:7b:c9:49:5d:0d:7e:
f4:f0:7c:22:46:b9:86:ac:fa:86:46:49:21:d0:c6:92:80:06:
4c:b8:f2:df:82:e6:28:1c:2c:a1:26:2d:06:45:65:25:7e:2b:
70:94:fc:2f:f4:b3:b8:64:3a:ed:a5:45:5a:58:78:76:6c:ea:
65:5c:c7:fb:41:f2:0a:25:d0:fd:6b:26:6b:7b:83:fc:07:29:
36:68:18:cf:cf:b6:9f:4e:ff:40:fc:38:bd:63:ac:cc:81:d6:
d1:d8:5b:61:e1:25:1c:20:3f:a2:d2:1f:e5:54:69:6e:2e:f1:
84:69:8a:d2:09:61:57:5a:cc:74:7e:37:3f:ea:fd:db:96:bc:
d6:d4:6c:48:27:f1:53:09:7f:70:28:4c:b4:ee:c5:a3:6e:6b:
28:54:c2:a5:13:7b:00:87:33:50:3c:a0:12:80:b6:33:76:f0:
eb:e9:c2:5e:9c:9d:39:56:ba:24:e2:87:cc:88:f1:ef:c4:d8:
96:67:b3:e3:6d:90:1a:e7:a9:54:85:57:1b:89:2f:4e:91:7e:
0f:56:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:47:53 2026 by rpki-client