$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: zxS2EL67aQs3/U6/RGT8kEMXaToP5sM18BACEn2A0jo= Subject key identifier: 29:C8:67:EB:A9:22:30:A6:68:38:62:AA:BF:F4:C5:DB:2D:97:74:AC Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 03F4 Signing time: Fri 17 Apr 2026 00:31:29 +0000 Manifest this update: Fri 17 Apr 2026 00:31:28 +0000 Manifest next update: Fri 24 Apr 2026 00:31:28 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: /ogir2P1DIKUexwa2ZHQP+4QMWCQ/2bVIzp8WOjPwvI=) 2: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=) 3: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=) 4: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=) 5: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=) 6: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=) 7: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=) 8: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=) 9: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=) 10: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=) 11: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=) 12: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: Apr 17 00:31:28 2026 GMT Not After : Apr 24 00:31:28 2026 GMT Subject: CN=69e17f60-8131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:6d:d9:c4:92:48:fe:45:e4:d1:d7:9a:b8: 2b:4b:30:c7:de:61:14:fd:80:1e:9a:f7:fe:15:d6: cf:3a:2e:7f:f1:a3:9c:d5:2c:64:6b:ff:bf:16:43: ea:5d:ad:8d:18:4d:ff:6d:86:c4:e1:f4:23:a2:df: 3d:93:c3:52:d5:86:2e:e2:69:c7:35:ae:46:99:6a: 58:81:92:5b:b9:ee:00:b0:66:3d:a3:3f:5f:e4:3d: a2:4d:6e:5b:49:d3:19:01:59:97:f6:ca:d3:82:85: d7:79:f4:b6:31:c0:b3:75:a1:30:2f:6d:b7:20:de: fb:82:45:cf:fe:c0:f0:ad:be:25:01:01:98:55:aa: 08:26:b2:9a:e7:16:9e:af:80:14:44:63:dc:84:76: 23:38:6c:b9:7a:cd:10:a2:2b:fd:8b:a8:40:62:29: b5:cb:08:e2:9f:1b:1a:f4:e4:ee:94:2b:07:5b:f9: 06:8a:31:4a:6f:02:25:e6:d2:7e:7f:bf:8d:5d:9f: 09:07:72:07:ff:d2:30:23:4e:ab:34:be:ab:d0:c1: f0:0e:0e:0f:5e:5f:68:71:b0:b7:5d:22:fe:2d:95: b3:68:86:82:03:af:e9:50:f5:66:2d:ed:63:3e:85: 67:c4:9b:14:d1:cd:1b:1d:65:d4:22:f7:a2:87:85: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:67:EB:A9:22:30:A6:68:38:62:AA:BF:F4:C5:DB:2D:97:74:AC X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e9:15:21:b0:f6:89:37:ee:52:21:3e:e7:29:80:04:42:c4: 9d:13:47:73:45:25:33:27:61:ec:ae:8d:0b:b1:ec:15:81:af: d6:8b:49:70:d6:94:ee:ac:3d:90:7e:83:46:9d:59:1f:5d:c9: 3a:b0:cf:1b:df:ca:ba:87:40:db:29:8c:6b:b1:78:25:d2:ed: 41:a5:bf:07:16:3e:37:1a:8a:65:5f:51:cd:4a:a5:01:1f:6a: e4:eb:53:6f:3e:43:fd:07:63:10:b5:4b:8e:10:79:15:30:c2: f0:4a:5e:18:6f:96:1c:7e:87:a2:63:99:05:3f:eb:fa:df:a3: 1f:4a:0e:c2:0a:21:cf:a6:94:c0:0e:39:42:b1:44:7d:df:8f: 3c:fb:6b:d2:17:2b:bc:4c:59:df:96:93:72:23:e1:72:30:ad: c1:8c:52:22:a3:a5:94:09:41:bb:d2:73:a8:c9:ef:9b:4c:e8: 99:9e:e9:b9:e6:d9:df:16:cf:96:61:d1:d0:3d:96:bf:ac:08: 3b:4a:22:6a:95:20:a0:bd:51:d8:b9:2f:7b:8d:a2:b4:9b:76: 88:2d:67:98:ef:2a:7e:83:e2:ad:18:33:a9:c2:b4:c7:02:95: 47:d4:44:3b:fa:a7:23:ca:eb:20:c9:29:ec:6c:a5:bd:21:02: a5:6c:ff:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjYwNDE3MDAzMTI4WhcNMjYwNDI0MDAzMTI4WjAYMRYwFAYD VQQDEw02OWUxN2Y2MC04MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNht2cSSSP5F5NHXmrgrSzDH3mEU/YAemvf+FdbPOi5/8aOc1Sxka/+/FkPq Xa2NGE3/bYbE4fQjot89k8NS1YYu4mnHNa5GmWpYgZJbue4AsGY9oz9f5D2iTW5b SdMZAVmX9srTgoXXefS2McCzdaEwL223IN77gkXP/sDwrb4lAQGYVaoIJrKa5xae r4AURGPchHYjOGy5es0Qoiv9i6hAYim1ywjinxsa9OTulCsHW/kGijFKbwIl5tJ+ f7+NXZ8JB3IH/9IwI06rNL6r0MHwDg4PXl9ocbC3XSL+LZWzaIaCA6/pUPVmLe1j PoVnxJsU0c0bHWXUIveih4XOiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnIZ+up IjCmaDhiqr/0xdstl3SsMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARekVIbD2iTfuUiE+5ymABELEnRNHc0UlMydh7K6NC7HsFYGv1otJcNaU7qw9 kH6DRp1ZH13JOrDPG9/KuodA2ymMa7F4JdLtQaW/BxY+NxqKZV9RzUqlAR9q5OtT bz5D/QdjELVLjhB5FTDC8EpeGG+WHH6HomOZBT/r+t+jH0oOwgohz6aUwA45QrFE fd+PPPtr0hcrvExZ35aTciPhcjCtwYxSIqOllAlBu9JzqMnvm0zomZ7puebZ3xbP lmHR0D2Wv6wIO0oiapUgoL1R2Lkve42itJt2iC1nmO8qfoPirRgzqcK0xwKVR9RE O/qnI8rrIMkp7GylvSECpWz/Gg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:46:22 2026 by rpki-client