
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier: W65nyQPUOqgefZtT5aZSzue6LU6z6/53MQST5XATCYc=
Subject key identifier: A5:10:02:73:CF:38:2D:D9:2E:FC:B6:2B:3E:CC:88:7B:47:ED:FD:4B
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 0498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number: 042B
Signing time: Mon 27 Jul 2026 01:30:47 +0000
Manifest this update: Mon 27 Jul 2026 01:30:46 +0000
Manifest next update: Mon 03 Aug 2026 01:30:46 +0000
Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: KS1B+eMz+7lOgC0qyc7mVfB3VawB/8CEn6T0VQFPQ5g=)
2: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=)
3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=)
4: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=)
5: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=)
6: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=)
7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=)
8: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=)
9: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=)
10: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=)
11: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=)
12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Jul 27 01:30:46 2026 GMT
Not After : Aug 3 01:30:46 2026 GMT
Subject: CN=6a66b4c6-4894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:1e:0a:52:51:a7:63:81:2f:4e:24:d2:6d:
ce:f1:fb:97:d4:a3:36:ca:ba:e9:54:9a:1c:ce:1b:
47:72:98:91:31:d2:7d:c4:35:b0:67:00:ae:d2:a1:
09:be:51:91:be:f6:cc:1a:82:ee:59:62:ec:ba:35:
c7:a2:91:e0:60:4f:08:97:52:84:e9:d0:e8:0a:3f:
63:0b:9a:57:39:f5:10:8f:6f:bd:f5:81:da:a6:cc:
ef:c5:1a:9b:06:04:e1:22:f4:61:ca:1f:29:c9:db:
00:28:92:8a:fe:5f:ad:76:1a:0c:a2:97:fe:f9:74:
50:95:2e:98:41:2a:8f:b1:ad:a3:92:7e:c9:d9:f2:
1e:96:83:00:7b:14:21:ba:0f:cd:bf:5a:0d:09:14:
fd:31:a3:84:5c:6d:7d:a5:2c:7b:e6:d0:76:99:41:
7d:30:05:97:ac:70:97:15:93:55:50:0e:f0:a0:87:
d4:5a:37:62:64:b0:49:d1:f9:44:d8:ee:d2:bd:e5:
41:1a:9a:25:08:86:89:b1:c6:9a:fa:67:01:6b:01:
d9:c2:60:10:f5:21:ed:36:91:76:6f:f6:38:d4:ed:
89:75:a6:17:88:55:d1:30:a0:3e:b3:53:53:b8:56:
be:87:37:ad:d4:f6:68:c2:dd:20:da:02:7a:62:d0:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:02:73:CF:38:2D:D9:2E:FC:B6:2B:3E:CC:88:7B:47:ED:FD:4B
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:57:07:d8:66:73:7a:89:be:7b:75:5f:56:ba:9b:59:29:
c2:b7:d1:ac:1d:7d:c8:e5:d6:12:58:1e:98:97:30:8c:75:c3:
e8:cf:76:b8:82:25:c0:82:dd:72:c5:c8:59:26:d6:0f:f3:52:
80:1c:44:4b:2b:06:0a:29:4a:c8:2b:c3:e6:12:96:62:fc:44:
67:9f:15:80:15:83:5c:48:e4:f7:bd:1e:d9:37:24:49:46:a6:
ba:d8:af:bf:c2:5d:bb:e2:4f:5e:61:1f:fc:b7:5c:20:bb:06:
40:41:11:1d:11:91:df:06:4b:63:1b:a5:0d:a8:96:16:c0:bf:
ea:b3:1f:46:a6:cc:81:19:5d:f2:e4:40:28:08:91:bd:c1:de:
03:f1:d0:aa:95:ee:34:3e:0e:6e:a8:64:0a:56:8e:dd:63:d4:
d7:f3:8c:6c:48:3e:9d:8f:1d:5f:e0:be:65:15:ee:3c:2d:6b:
4d:e5:7f:64:d9:88:0e:71:d0:e0:2b:03:c1:61:6b:01:62:09:
25:29:5b:e9:d7:19:e8:34:67:2c:3d:8b:d0:44:40:9c:30:0d:
c7:04:da:59:6d:b2:bb:aa:85:28:12:52:d5:25:b8:d6:e8:ad:
66:65:27:78:a2:1e:4f:1a:72:63:24:19:e8:07:93:70:57:9c:
8b:5a:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:24 2026 by rpki-client