$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: 3H4odllDT+vilE6irovFKGwRGwwFQHUWgUfnczEEfio= Subject key identifier: 9F:C1:2A:4E:A5:86:F0:C7:42:E2:64:3A:DF:43:B3:53:AD:05:45:2A Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 0334 Signing time: Fri 25 Apr 2025 00:58:20 +0000 Manifest this update: Fri 25 Apr 2025 00:58:19 +0000 Manifest next update: Fri 02 May 2025 00:58:19 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: thIPHU1EX4J3l7uNZaWOB8Uaecofi+BWlfITsdpAV2s=) 2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: xjjlGEMDXy/k+jJOfvqdXPAMcm5hcIip2EtJSaLTK1w=) 3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: GSRflamgYfmiMSGgOVwzrsGpbOS/t7mfSPncCgDxV6M=) 4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: Q8US4IflJTLgyfQaYNGD03OwPXQGX+6f2qPX0RvRDlU=) 5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: +vy+qu4h+QM3BSPcAgMYz53mtIv0Py1o6O7odz8IvFY=) 6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: yxR5aoeZgrptD6VDd4aNF+JjuUnYRY8iYqJvTUH0fjQ=) 7: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=) 8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: zFx3A/ppY2ngfMBUR3sH6hNASk1iji+2IxF22Re4J6o=) 9: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=) 10: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YlGML7Y+l2aCWZpP+MJw5lVj7z7kGZXUYzC2djMj+3E=) 11: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: KKl0MUmlPb1Xg2DkhhthGsW4wVH291TKWR9JxQ5UJx8=) 12: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: 0hqNC68Q8zqYwoRg/Kx140Gbd6mN/05/DI1IZiJnQGU=) 13: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: IkEjb/yGRHk/uQJGwMGQ/U+tx2W+JXn7QEZviTI95MI=) 14: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=) 15: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: xwgSw9TLYkyiCDH0bebD3MfSotyYkMkFJNkTHafCstA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: Apr 25 00:58:19 2025 GMT Not After : May 2 00:58:19 2025 GMT Subject: CN=680ade2b-c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:ea:40:1d:bf:f1:45:fe:a3:1b:95:9c:91: 87:88:80:26:34:5c:b9:2e:2d:79:21:df:39:06:37: 1d:be:b9:f4:82:64:87:32:4f:69:40:ee:42:44:0e: 72:57:60:a1:93:68:e4:9f:20:6f:2e:a3:1d:93:e4: 4d:e4:b5:25:72:b4:ee:12:66:87:02:d0:da:60:b7: e1:9a:6c:7b:a9:aa:a1:59:9d:1c:0a:73:1f:06:db: 9c:79:c7:4d:ec:cd:7c:7e:f1:d5:64:d7:1e:44:3f: fc:5c:30:85:ea:73:24:ae:c7:5f:55:a5:5c:9b:74: 4b:66:f5:c1:d2:38:e3:5d:ab:9e:8e:ea:46:08:39: 4f:e9:c1:98:0c:9c:41:82:69:39:45:05:13:a2:c6: 34:f2:89:01:38:2e:9b:72:71:30:d2:0b:61:e3:37: 9f:f4:27:d7:5c:40:9a:b5:cc:42:fa:76:95:21:4f: 9a:3b:ee:d4:b5:f2:b5:3f:89:fd:55:43:95:6f:2a: 31:06:11:86:d8:56:c0:16:17:89:a5:2a:01:bb:e5: b2:48:cc:4b:bd:d8:64:9f:41:d0:d6:57:b8:8c:2a: c9:e4:a9:2b:ef:2c:27:ce:b4:dc:26:89:b9:81:72: 36:ae:18:5b:6e:ad:a5:71:b3:e5:3c:35:28:7f:f5: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C1:2A:4E:A5:86:F0:C7:42:E2:64:3A:DF:43:B3:53:AD:05:45:2A X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:79:16:bd:9a:f1:5a:b9:f1:9b:fb:35:56:89:37:2f:9b: d9:9f:bd:23:87:3e:19:2b:8f:05:a1:2c:57:8a:e5:38:1e:ae: e3:20:f8:32:1e:21:90:8b:f6:9e:7f:05:93:98:b3:49:d7:a2: 0c:d6:6c:98:5b:e8:1d:72:e6:15:1a:a4:9b:17:a8:30:f7:db: dd:51:53:81:30:b4:2f:36:90:bc:eb:16:e6:7a:21:92:ae:76: e7:6f:61:5e:fe:7d:6b:b1:95:55:68:4e:3f:82:fd:12:8c:d8: 8f:eb:b7:8d:3f:61:c3:4f:14:bd:74:db:54:d0:f2:00:23:bc: 1e:2a:15:2b:2a:e0:f9:b5:b9:05:89:ca:53:9b:15:c0:b4:c5: 57:cb:da:48:06:b8:c3:e0:68:78:fc:ce:82:7c:3e:c1:a9:82: 76:59:a8:41:62:9a:d6:bf:e1:bc:5e:29:65:c1:2a:9e:2d:db: 24:1b:5b:79:4a:3b:5b:d1:73:eb:a7:8e:43:47:c4:54:eb:1e: 3d:69:2c:52:06:91:d3:27:49:7c:e5:0a:ec:36:e1:24:37:51: d0:7c:c7:62:4e:9e:40:fe:df:09:54:5c:e1:d3:35:93:8d:57: f1:fa:ee:10:5f:55:27:eb:bc:18:f3:24:47:d9:da:95:6d:51: 1e:05:f2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNDI1MDA1ODE5WhcNMjUwNTAyMDA1ODE5WjAYMRYwFAYD VQQDEw02ODBhZGUyYi1jMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKvqQB2/8UX+oxuVnJGHiIAmNFy5Li15Id85Bjcdvrn0gmSHMk9pQO5CRA5y V2Chk2jknyBvLqMdk+RN5LUlcrTuEmaHAtDaYLfhmmx7qaqhWZ0cCnMfBtucecdN 7M18fvHVZNceRD/8XDCF6nMkrsdfVaVcm3RLZvXB0jjjXauejupGCDlP6cGYDJxB gmk5RQUTosY08okBOC6bcnEw0gth4zef9CfXXECatcxC+naVIU+aO+7UtfK1P4n9 VUOVbyoxBhGG2FbAFheJpSoBu+WySMxLvdhkn0HQ1le4jCrJ5Kkr7ywnzrTcJom5 gXI2rhhbbq2lcbPlPDUof/Uj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/BKk6l hvDHQuJkOt9Ds1OtBUUqMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEdXkWvZrxWrnxm/s1Vok3L5vZn70jhz4ZK48FoSxXiuU4Hq7jIPgy HiGQi/aefwWTmLNJ16IM1myYW+gdcuYVGqSbF6gw99vdUVOBMLQvNpC86xbmeiGS rnbnb2Fe/n1rsZVVaE4/gv0SjNiP67eNP2HDTxS9dNtU0PIAI7weKhUrKuD5tbkF icpTmxXAtMVXy9pIBrjD4Gh4/M6CfD7BqYJ2WahBYprWv+G8XillwSqeLdskG1t5 Sjtb0XPrp45DR8RU6x49aSxSBpHTJ0l85QrsNuEkN1HQfMdiTp5A/t8JVFzh0zWT jVfx+u4QX1Un67wY8yRH2dqVbVEeBfIq -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:20 2025 by rpki-client