$ rpki-client -vvvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: Y3bphgcVulMW7hQdVwORlN98a5j18Jg74PCLPkB8EdM= Subject key identifier: 1A:04:DC:26:2C:1D:62:65:9D:84:C7:0E:7D:7F:71:57:7F:2C:CC:61 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 0448 Signing time: Mon 21 Sep 2026 00:08:57 +0000 Manifest this update: Mon 21 Sep 2026 00:08:57 +0000 Manifest next update: Mon 28 Sep 2026 00:08:57 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: WrXqlQpeaKk1FmjDJzcy462Dw/VYSVdiNkmXqN+Lruc=) 2: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=) 3: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=) 4: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=) 5: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=) 6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=) 7: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=) 8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=) 9: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=) 10: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=) 11: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=) 12: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: Sep 21 00:08:57 2026 GMT Not After : Sep 28 00:08:57 2026 GMT Subject: CN=6ab07599-a5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:0d:4a:70:96:f9:1c:47:b2:9a:fb:02:da: c9:db:93:8d:6b:cd:52:34:78:1a:4e:69:b0:57:b8: 3c:d1:bc:b1:98:4f:0f:ec:e1:0c:aa:cd:f9:6f:b1: b4:92:8c:f2:39:84:9c:c5:af:3e:7c:a1:97:83:dd: 37:76:40:cd:d1:2d:8f:ef:89:be:4a:b2:42:0f:d0: 7c:66:3a:93:10:be:4b:4a:52:5c:7e:6b:32:bb:7c: 8f:e9:6b:35:b2:46:1f:be:b7:8d:43:c5:74:e1:4b: f2:e3:15:79:77:0a:98:da:24:28:52:7e:d2:6b:2f: c0:0f:8b:88:26:80:84:c2:4d:2e:44:9c:f1:36:a3: 6b:7e:b3:99:d6:b9:92:84:ea:02:e5:a5:48:97:fb: bd:46:07:62:84:d5:6b:75:bd:b2:53:e2:97:1a:ea: 9b:06:6b:a6:e6:d5:3c:f5:60:86:db:ee:4d:ad:58: cf:f3:58:33:fe:4b:6b:d6:5e:45:5f:ba:3d:a2:ce: 84:32:d3:71:a5:15:54:ff:a9:c8:ed:fc:5f:3e:d0: 20:96:c5:36:24:6a:ef:d3:fd:d2:15:73:7e:95:58: 7f:7a:98:8f:41:7b:42:44:aa:8a:9a:f1:ae:ce:7b: 4f:b8:0f:d5:9c:e3:65:23:44:8f:05:2e:21:ff:13: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:04:DC:26:2C:1D:62:65:9D:84:C7:0E:7D:7F:71:57:7F:2C:CC:61 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:98:2b:cd:77:a5:49:1b:23:02:18:9b:4b:3a:38:b7:21:08: e4:b4:4b:d2:96:a4:a7:74:12:0b:f9:cf:7d:97:18:7d:3a:97: a9:5c:d9:63:4a:a4:cc:8c:bd:ed:e7:5a:51:0a:b4:95:47:cc: cf:6a:12:c2:70:08:e3:a4:95:b0:d5:a6:9e:a1:a2:1d:ec:f0: 6c:84:e3:84:ed:c3:e6:ed:1a:ee:77:52:65:c7:b7:49:7f:12: 41:00:a2:1d:b5:cd:44:c3:c9:c0:9b:50:43:60:61:d3:7e:34: d2:7b:e3:0f:66:15:21:48:31:09:28:49:72:55:93:28:12:f3: c9:15:dd:96:d9:5c:ca:d4:e6:d8:e5:e7:2a:f0:44:ae:81:a4: 3b:8d:24:0b:f8:a1:25:3f:57:26:b6:c2:32:eb:1f:f0:a7:5f: c3:12:2b:2a:af:d8:43:75:b8:02:50:7f:1e:8e:0a:4a:94:c3: 01:e9:f3:b8:e7:8c:9a:d9:a2:d7:0c:fc:21:be:1b:30:9b:83: fd:91:bd:b4:be:48:c1:70:4a:c8:0e:71:1f:9f:2c:6b:ce:72: f4:da:11:de:74:2c:16:44:d8:f2:24:68:f8:1d:1d:df:2c:58: 53:f9:3c:a0:fc:10:00:f4:ea:48:4d:4a:0d:25:8b:c5:8c:ee: f4:0f:c1:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjYwOTIxMDAwODU3WhcNMjYwOTI4MDAwODU3WjAYMRYwFAYD VQQDEw02YWIwNzU5OS1hNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCsNSnCW+RxHspr7AtrJ25ONa81SNHgaTmmwV7g80byxmE8P7OEMqs35b7G0 kozyOYScxa8+fKGXg903dkDN0S2P74m+SrJCD9B8ZjqTEL5LSlJcfmsyu3yP6Ws1 skYfvreNQ8V04Uvy4xV5dwqY2iQoUn7Say/AD4uIJoCEwk0uRJzxNqNrfrOZ1rmS hOoC5aVIl/u9RgdihNVrdb2yU+KXGuqbBmum5tU89WCG2+5NrVjP81gz/ktr1l5F X7o9os6EMtNxpRVU/6nI7fxfPtAglsU2JGrv0/3SFXN+lVh/epiPQXtCRKqKmvGu zntPuA/VnONlI0SPBS4h/xMaCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoE3CYs HWJlnYTHDn1/cVd/LMxhMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJgrzXelSRsjAhibSzo4tyEI5LRL0pakp3QSC/nPfZcYfTqXqVzZY0qkzIy9 7edaUQq0lUfMz2oSwnAI46SVsNWmnqGiHezwbITjhO3D5u0a7ndSZce3SX8SQQCi HbXNRMPJwJtQQ2Bh03400nvjD2YVIUgxCShJclWTKBLzyRXdltlcytTm2OXnKvBE roGkO40kC/ihJT9XJrbCMusf8KdfwxIrKq/YQ3W4AlB/Ho4KSpTDAenzuOeMmtmi 1wz8Ib4bMJuD/ZG9tL5IwXBKyA5xH58sa85y9NoR3nQsFkTY8iRo+B0d3yxYU/k8 oPwQAPTqSE1KDSWLxYzu9A/BGA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:51:41 2026 by rpki-client