
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier: //KjlM81jIVJSE2i0MKCTIo5sWeIRFFcTazhbahjdLk=
Subject key identifier: 6D:EF:C7:3E:37:D4:12:80:B2:F2:7D:EC:29:9D:B1:D5:51:5B:1E:54
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 0426
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number: 03DA
Signing time: Sun 01 Mar 2026 01:32:22 +0000
Manifest this update: Sun 01 Mar 2026 01:32:21 +0000
Manifest next update: Sun 08 Mar 2026 01:32:21 +0000
Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: zIhg688+H8knMeY0upn6rmsTK+v70HHm2/uqTisVGNA=)
2: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
4: 22A96640A36111F08EA36434C4F9AE02.roa (hash: tQ0ZjbC9o07urDkHmNDFjc4gFzKzs7vpf1dxh+g7k+o=)
5: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
6: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
7: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
8: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
9: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
10: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
12: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Mar 1 01:32:21 2026 GMT
Not After : Mar 8 01:32:21 2026 GMT
Subject: CN=69a39726-eaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:f9:85:c0:2d:e1:f4:4d:31:e4:9e:23:f1:
c5:46:fc:fd:ae:32:f0:93:8d:9c:50:75:6b:19:fe:
1c:8c:16:3e:68:3e:10:1c:fb:2c:fc:b2:c5:5d:66:
19:d8:e7:be:a6:59:c9:81:37:b4:91:11:ee:1b:01:
ea:d0:79:57:29:45:67:a6:03:03:be:7f:50:28:32:
1a:2a:e4:97:cf:3a:3c:ae:6c:6a:a4:00:ec:52:fd:
02:06:3c:aa:20:ad:8d:1c:54:7d:cd:f7:51:94:d8:
c5:64:21:17:23:78:47:2b:14:d6:2f:34:a9:eb:9c:
b7:91:99:f4:b0:9b:57:d1:3a:a2:9b:60:a6:03:5a:
b5:bc:26:3d:6c:1c:8d:a6:e2:06:b9:f7:36:bc:c8:
e9:4c:c2:2d:aa:5d:92:a6:dc:d2:43:27:e7:bc:44:
14:33:41:6f:57:56:ac:c9:b0:d0:64:af:06:c1:15:
3b:63:e4:f3:d7:ea:df:29:a2:da:75:5c:0d:83:7b:
87:e7:61:b1:95:e4:ec:71:2c:d2:73:c6:2d:11:c6:
34:01:71:04:19:d5:43:63:a5:4a:82:ff:4d:6e:60:
26:75:2a:27:1b:b8:90:99:eb:ac:53:db:50:40:c7:
03:72:36:ac:89:40:19:ab:6b:db:a2:71:64:39:27:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:C7:3E:37:D4:12:80:B2:F2:7D:EC:29:9D:B1:D5:51:5B:1E:54
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b0:89:38:ee:b2:a9:92:01:94:b3:0b:23:60:85:5c:e7:80:
77:1f:28:d7:0f:18:53:81:b1:88:12:99:7f:03:ca:06:10:3f:
0c:7f:9c:28:4e:ec:bc:85:ed:7d:1f:ad:4e:17:83:e2:c3:63:
8a:81:cd:99:0c:67:78:1b:e1:fa:4b:b3:01:e1:8a:27:5e:19:
52:57:19:6e:9e:00:68:95:05:14:d3:31:ef:b4:e7:13:52:38:
c9:f4:99:f4:4a:d1:94:08:13:a1:e4:0a:60:62:49:16:da:2f:
e5:83:c9:37:31:8b:4a:d9:48:4f:53:41:a3:28:30:c0:62:11:
5d:ec:00:ad:31:8d:d3:b5:b5:a8:84:98:06:b1:03:bb:ae:10:
a2:10:b0:58:dc:d5:c5:eb:a7:87:bb:ce:eb:f7:cb:9b:df:8f:
e4:13:5e:5c:cf:1f:8b:51:f6:63:6d:f3:72:5f:28:91:d3:df:
96:15:2d:9a:1b:26:e1:2e:e0:14:34:50:1c:92:b6:5c:b3:76:
7f:a7:ec:d8:0e:41:c0:92:9c:a7:f7:5a:9a:f3:21:94:73:ea:
7f:5b:5c:76:f6:40:82:51:a3:94:de:3c:98:be:b7:79:23:79:
24:e0:fb:62:43:28:cb:5a:32:4c:60:1f:f4:14:ee:c9:7e:8d:
12:3a:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:38 2026 by rpki-client