$ rpki-client -vvvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: amaDsQ1z+RUGRyo+McwZ/VRR8N6ZeXdht/At3pUYk9U= Subject key identifier: 90:55:DD:C9:9B:4C:CB:A6:8F:5E:DE:31:F6:66:0A:63:9D:CF:A4:5E Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 0449 Signing time: Tue 22 Sep 2026 23:57:30 +0000 Manifest this update: Tue 22 Sep 2026 23:57:30 +0000 Manifest next update: Tue 29 Sep 2026 23:57:30 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: NqCaSGTosSl4Xmp1kRBUEhKYhIhMuHUpMbbzAP0KvsQ=) 2: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=) 3: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=) 4: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=) 5: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=) 6: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=) 7: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=) 8: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=) 9: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=) 10: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=) 11: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=) 12: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: Sep 22 23:57:30 2026 GMT Not After : Sep 29 23:57:30 2026 GMT Subject: CN=6ab315ea-9560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:2e:21:d5:ff:36:28:37:83:30:5e:23:91: a7:ef:76:f9:bb:8b:b4:f7:03:48:f8:1a:9d:34:4b: 29:cf:c8:4b:41:b4:a7:08:a2:eb:8e:7d:91:84:92: d0:b5:24:d5:06:0e:e6:02:04:a8:f7:fc:8c:ad:d9: 9f:fb:4b:8c:5b:c8:f2:5e:1c:00:54:65:42:ec:ea: 6a:ab:f2:5a:11:85:6d:6c:4d:dc:d7:69:dd:84:0f: e0:f1:e5:c6:41:fd:89:50:47:65:f3:c6:50:55:7c: a1:fb:64:b8:de:0f:d8:37:7c:54:61:9e:63:f9:e2: c8:c9:c7:0b:ed:15:25:4c:ce:a2:2a:62:ce:f4:07: 91:1e:c1:ec:da:9d:5a:ce:cf:45:df:7d:60:43:bb: c9:ef:69:74:1f:8e:32:5b:de:ad:06:39:e9:88:7c: 31:bf:80:7d:31:1d:9c:d8:73:25:72:55:f4:5a:ad: a1:42:60:7e:a9:99:1e:90:52:f8:ba:d0:e9:8b:d2: a8:3b:9d:3a:bc:f5:c6:25:03:33:8b:bf:09:4d:f9: 1b:d2:98:f0:07:a9:ab:7e:9e:51:29:98:71:b7:6d: af:03:13:fb:90:a4:4f:b0:46:92:26:8c:aa:cc:8d: 2e:54:01:70:54:d1:a5:62:8c:c4:44:cc:98:b8:4c: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:DD:C9:9B:4C:CB:A6:8F:5E:DE:31:F6:66:0A:63:9D:CF:A4:5E X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:41:5e:c7:61:1d:72:7c:ce:e9:b9:04:2a:9a:9b:35:ed:64: 02:e6:fa:73:ae:c5:cf:90:cb:0b:67:85:21:c7:b2:09:f7:37: 01:47:61:b2:e4:f7:5e:51:1a:ca:3e:1c:6a:f8:c5:39:fb:ae: a6:40:7f:57:ae:03:f1:a5:01:fb:f0:c3:dd:f3:b0:f7:2c:a2: 8f:75:c1:04:35:0c:58:4d:9e:32:73:7f:6c:b4:6c:94:61:bf: 3d:38:05:15:3b:be:54:8c:96:eb:5c:c9:82:d0:a4:d2:fa:4e: 54:4e:a3:b3:f8:a0:a2:ab:a2:83:f4:b4:a6:e6:99:06:39:88: 59:84:4b:73:ab:bd:00:c0:17:61:36:36:45:a8:9e:ad:31:12: 48:18:5d:42:ae:9d:d7:9e:ff:5c:9f:68:b4:72:c5:ba:ae:bc: 6c:48:d3:4d:b6:ab:3b:da:ab:6a:21:79:95:c2:aa:93:2f:e4: a7:14:3b:c8:d6:ab:8f:f1:82:53:31:41:d3:26:1b:89:76:f4: 24:a5:d3:60:14:55:7b:9c:01:0b:fb:4a:a3:8e:c9:24:f8:8d: b9:16:7a:fe:ea:b7:48:fd:b2:22:8a:13:14:a7:41:07:27:68: e2:7b:b5:31:27:71:60:28:7a:25:22:b5:11:12:18:5f:fb:2e: b7:38:a8:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjYwOTIyMjM1NzMwWhcNMjYwOTI5MjM1NzMwWjAYMRYwFAYD VQQDEw02YWIzMTVlYS05NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTQuIdX/Nig3gzBeI5Gn73b5u4u09wNI+BqdNEspz8hLQbSnCKLrjn2RhJLQ tSTVBg7mAgSo9/yMrdmf+0uMW8jyXhwAVGVC7Opqq/JaEYVtbE3c12ndhA/g8eXG Qf2JUEdl88ZQVXyh+2S43g/YN3xUYZ5j+eLIyccL7RUlTM6iKmLO9AeRHsHs2p1a zs9F331gQ7vJ72l0H44yW96tBjnpiHwxv4B9MR2c2HMlclX0Wq2hQmB+qZkekFL4 utDpi9KoO506vPXGJQMzi78JTfkb0pjwB6mrfp5RKZhxt22vAxP7kKRPsEaSJoyq zI0uVAFwVNGlYozERMyYuExOEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBV3cmb TMumj17eMfZmCmOdz6ReMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUFex2EdcnzO6bkEKpqbNe1kAub6c67Fz5DLC2eFIceyCfc3AUdhsuT3XlEa yj4cavjFOfuupkB/V64D8aUB+/DD3fOw9yyij3XBBDUMWE2eMnN/bLRslGG/PTgF FTu+VIyW61zJgtCk0vpOVE6js/igoquig/S0puaZBjmIWYRLc6u9AMAXYTY2Raie rTESSBhdQq6d157/XJ9otHLFuq68bEjTTbarO9qraiF5lcKqky/kpxQ7yNarj/GC UzFB0yYbiXb0JKXTYBRVe5wBC/tKo47JJPiNuRZ6/uq3SP2yIooTFKdBBydo4nu1 MSdxYCh6JSK1ERIYX/sutzioCA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:19:30 2026 by rpki-client