$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: rwhviym0es46HHCNyfl98s3zBdwjD85swD2Mv5CX41w= Subject key identifier: 8A:C7:24:AB:65:75:13:04:35:22:85:E9:02:A4:11:6B:31:81:BB:83 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 033D Signing time: Wed 07 May 2025 01:01:39 +0000 Manifest this update: Wed 07 May 2025 01:01:38 +0000 Manifest next update: Wed 14 May 2025 01:01:38 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: jOaXDDMGmDYg8jWmFnhc8c8/AhVF2dQxG6mLvBQ2HRY=) 2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: xjjlGEMDXy/k+jJOfvqdXPAMcm5hcIip2EtJSaLTK1w=) 3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: GSRflamgYfmiMSGgOVwzrsGpbOS/t7mfSPncCgDxV6M=) 4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: Q8US4IflJTLgyfQaYNGD03OwPXQGX+6f2qPX0RvRDlU=) 5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: +vy+qu4h+QM3BSPcAgMYz53mtIv0Py1o6O7odz8IvFY=) 6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: yxR5aoeZgrptD6VDd4aNF+JjuUnYRY8iYqJvTUH0fjQ=) 7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: zFx3A/ppY2ngfMBUR3sH6hNASk1iji+2IxF22Re4J6o=) 8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YlGML7Y+l2aCWZpP+MJw5lVj7z7kGZXUYzC2djMj+3E=) 9: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: iZZ7LtvIDl3kE42dvDuGK2rDX+YrqEJSMBHGlpdg4DI=) 10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: 0hqNC68Q8zqYwoRg/Kx140Gbd6mN/05/DI1IZiJnQGU=) 11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: IkEjb/yGRHk/uQJGwMGQ/U+tx2W+JXn7QEZviTI95MI=) 12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: xwgSw9TLYkyiCDH0bebD3MfSotyYkMkFJNkTHafCstA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 7 01:01:38 2025 GMT Not After : May 14 01:01:38 2025 GMT Subject: CN=681ab0f2-8160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:42:36:68:50:ab:fe:49:54:ea:7c:db:bb: 3e:98:dc:f3:9b:56:3c:d2:9b:52:36:d5:ad:3b:e5: 06:8e:4d:bf:8f:18:24:ae:67:05:0f:02:2c:f7:53: 79:cc:4d:47:bc:f0:9d:5d:f1:8d:24:f3:56:63:0c: c0:d7:53:39:c9:d9:66:a0:58:30:8f:da:0b:ad:7a: 6e:58:bc:26:3d:eb:52:c0:44:24:0a:13:94:8e:3c: 25:81:92:88:94:be:9f:a6:3e:02:d8:cd:9d:47:ae: 3a:43:bd:d0:7e:32:49:82:b5:26:8e:75:91:f9:44: d0:0f:31:ff:d4:c1:b2:00:44:ce:c9:84:ba:87:92: 25:b3:71:5f:cb:5c:aa:7e:d6:3e:c2:60:50:60:61: d1:5a:3a:62:5c:75:87:cd:36:fe:f6:f8:bc:42:b4: ec:ea:db:67:dc:45:f6:ae:c7:ba:8c:e7:bc:06:0e: dc:ad:65:0f:62:e5:ee:06:cf:b4:22:9a:66:f6:63: 3c:75:e2:db:c6:e6:6f:35:17:e5:71:d4:0f:eb:37: 84:f1:5e:cc:e4:2d:e6:8f:ab:47:f4:fc:f0:70:42: da:97:73:53:23:0e:3e:94:7f:61:3b:7a:be:16:8c: ac:90:67:3f:49:4a:cd:8a:4d:2d:f7:d3:24:2d:af: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C7:24:AB:65:75:13:04:35:22:85:E9:02:A4:11:6B:31:81:BB:83 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:85:f6:99:5f:0e:54:41:f3:65:54:f3:5f:8f:e9:8e:55:e1: 1d:1c:7b:ca:16:c8:84:b0:dc:88:10:d2:ee:75:34:35:e2:82: 8b:d0:f3:9b:80:4f:ae:dc:86:95:a5:68:2f:ce:a5:65:6e:32: cd:d9:88:dc:e0:93:37:44:ce:b6:80:2e:0d:f5:40:12:1f:85: a7:15:78:d0:95:0a:a1:fd:b3:79:94:70:66:0b:fb:23:7c:4c: 6f:d1:ca:90:c3:86:04:06:c7:7c:9d:16:09:c1:0c:05:f2:6d: 20:30:9f:28:1c:68:fd:3d:f1:75:b3:43:d9:dc:83:57:ce:66: cf:00:a9:9f:e3:d3:15:a0:ac:e5:ef:4f:31:59:95:9d:65:75: 80:89:10:d1:1a:c8:e1:18:24:98:02:9c:2f:b0:de:3f:8e:7e: aa:49:39:47:0c:bd:05:fa:8c:c5:e0:73:72:3a:27:9f:48:af: c6:fc:a4:e9:9a:ad:f3:6d:3d:eb:81:7c:4c:18:76:66:0a:4d: 55:86:a0:12:e3:23:29:22:e1:5a:2e:7f:cd:97:d2:76:19:0f: cd:16:4c:92:98:22:ab:e9:61:13:32:73:c8:4e:1d:0b:39:fd: d0:d9:18:2b:d8:de:40:9a:42:5b:78:2e:d4:62:a8:48:77:2d: d0:0d:7f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNTA3MDEwMTM4WhcNMjUwNTE0MDEwMTM4WjAYMRYwFAYD VQQDEw02ODFhYjBmMi04MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTdCNmhQq/5JVOp827s+mNzzm1Y80ptSNtWtO+UGjk2/jxgkrmcFDwIs91N5 zE1HvPCdXfGNJPNWYwzA11M5ydlmoFgwj9oLrXpuWLwmPetSwEQkChOUjjwlgZKI lL6fpj4C2M2dR646Q73QfjJJgrUmjnWR+UTQDzH/1MGyAETOyYS6h5Ils3Ffy1yq ftY+wmBQYGHRWjpiXHWHzTb+9vi8QrTs6ttn3EX2rse6jOe8Bg7crWUPYuXuBs+0 Ippm9mM8deLbxuZvNRflcdQP6zeE8V7M5C3mj6tH9PzwcELal3NTIw4+lH9hO3q+ FoyskGc/SUrNik0t99MkLa9ZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrHJKtl dRMENSKF6QKkEWsxgbuDMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2hfaZXw5UQfNlVPNfj+mOVeEdHHvKFsiEsNyIENLudTQ14oKL0POb gE+u3IaVpWgvzqVlbjLN2Yjc4JM3RM62gC4N9UASH4WnFXjQlQqh/bN5lHBmC/sj fExv0cqQw4YEBsd8nRYJwQwF8m0gMJ8oHGj9PfF1s0PZ3INXzmbPAKmf49MVoKzl 708xWZWdZXWAiRDRGsjhGCSYApwvsN4/jn6qSTlHDL0F+ozF4HNyOiefSK/G/KTp mq3zbT3rgXxMGHZmCk1VhqAS4yMpIuFaLn/Nl9J2GQ/NFkySmCKr6WETMnPITh0L Of3Q2Rgr2N5AmkJbeC7UYqhIdy3QDX86 -----END CERTIFICATE-----Generated at Wed May 7 19:38:46 2025 by rpki-client