$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: eTr07QG/d6T0CSvZdqlbiLJIOr1RJHP4+37X/npqfvo= Subject key identifier: DB:26:7F:64:93:3F:B5:15:2D:F7:AB:44:C6:0B:F3:C9:7D:AB:A1:F3 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 0328 Signing time: Sat 05 Apr 2025 01:22:46 +0000 Manifest this update: Sat 05 Apr 2025 01:22:46 +0000 Manifest next update: Sat 12 Apr 2025 01:22:46 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: n9lGOMh5wkewEWrjFCGhRwKEo2wI6IHqB8UQfEUSh38=) 2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: xjjlGEMDXy/k+jJOfvqdXPAMcm5hcIip2EtJSaLTK1w=) 3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: GSRflamgYfmiMSGgOVwzrsGpbOS/t7mfSPncCgDxV6M=) 4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: Q8US4IflJTLgyfQaYNGD03OwPXQGX+6f2qPX0RvRDlU=) 5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: +vy+qu4h+QM3BSPcAgMYz53mtIv0Py1o6O7odz8IvFY=) 6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: yxR5aoeZgrptD6VDd4aNF+JjuUnYRY8iYqJvTUH0fjQ=) 7: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=) 8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: zFx3A/ppY2ngfMBUR3sH6hNASk1iji+2IxF22Re4J6o=) 9: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=) 10: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YlGML7Y+l2aCWZpP+MJw5lVj7z7kGZXUYzC2djMj+3E=) 11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: IkEjb/yGRHk/uQJGwMGQ/U+tx2W+JXn7QEZviTI95MI=) 12: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: xgIs9fKOINg78o2mjzzJNpjb0DPInUx+H9AXfLjuptM=) 13: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: 0hqNC68Q8zqYwoRg/Kx140Gbd6mN/05/DI1IZiJnQGU=) 14: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=) 15: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: xwgSw9TLYkyiCDH0bebD3MfSotyYkMkFJNkTHafCstA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5 Validity Not Before: Apr 5 01:22:46 2025 GMT Not After : Apr 12 01:22:46 2025 GMT Subject: CN=67f085e6-c0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:c2:f0:86:c6:85:80:f7:f1:0e:d8:8c:db: 01:e7:be:5e:e4:02:39:f0:d9:8e:be:68:54:de:b5: 24:af:71:56:16:9b:bd:53:4f:83:75:e9:7f:1c:5f: 97:ac:7e:d7:6c:ba:66:a9:4c:9a:26:a4:5f:f6:75: bf:af:0c:80:4e:ce:36:01:55:e5:57:bb:d0:21:15: 76:0e:00:48:71:0e:00:8b:40:33:b1:b1:34:b1:84: 78:72:3b:0b:a4:25:6f:29:97:88:08:a1:30:c3:2b: ee:e5:9b:6e:4d:ca:89:0a:d1:79:9b:fa:f4:a8:5c: 25:9d:a8:33:8c:ed:61:17:c2:38:14:43:82:76:64: 74:02:4b:6a:53:6a:df:fe:59:e4:cb:bf:19:fd:88: ee:59:5b:65:bf:2d:d7:55:e5:68:2b:a5:5f:ca:1b: 8b:77:6e:7e:50:51:22:85:36:d8:a6:3b:01:77:2e: 21:6d:be:c1:d3:63:f2:28:1e:a3:bc:1c:dc:ac:e0: bf:fc:91:49:d6:4c:e5:cf:7e:fd:e9:2a:d5:9c:cf: 5e:e0:92:f1:31:5f:ca:9c:d5:b4:67:81:77:3c:22: 31:54:ab:f5:f1:3a:6c:1b:1c:f2:a0:9b:fa:ad:b0: 1e:6b:dd:1a:1d:27:a1:ae:74:30:14:50:44:d3:b5: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:7F:64:93:3F:B5:15:2D:F7:AB:44:C6:0B:F3:C9:7D:AB:A1:F3 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d1:ad:c7:65:68:74:d6:2a:af:b5:85:ee:a2:2c:a4:b0:b0: 35:39:bd:9c:8d:df:fd:5e:22:9b:6d:8a:61:2d:b4:63:cb:21: 35:f1:58:2b:59:73:e0:7d:b9:c2:b1:32:d3:6c:d9:fc:d5:bb: b3:6c:1a:2e:3f:c1:38:4d:7a:9a:c4:9f:47:3e:b3:95:02:8c: 54:c4:ad:c8:12:54:1f:3f:54:57:77:d0:1b:30:8d:56:f7:f9: a9:a0:51:c9:92:79:97:6c:f7:14:80:51:26:98:6c:35:f5:bf: 56:cc:95:65:6d:35:c3:63:a4:7a:72:ab:01:69:e0:67:be:14: b8:71:c1:57:97:7b:99:85:04:60:2d:b7:8f:df:63:fb:97:cc: 70:1b:18:2f:bf:f1:ac:51:38:48:1c:25:e2:e0:2d:13:7a:24: 4a:c5:47:29:99:33:04:eb:b5:9e:77:2d:e2:ab:b8:4b:1b:9a: b1:b0:0a:e7:ed:eb:43:3b:c3:17:9b:6c:02:13:b5:a6:34:6e: e3:cf:6a:3f:c8:95:e6:a1:40:e1:da:30:e4:50:e3:20:ce:d5: 37:00:eb:13:df:35:ed:00:62:0f:77:2e:e1:45:63:58:b9:86: 39:96:da:73:3d:70:0a:4a:e6:f8:3e:22:0f:5b:e1:e7:b5:2a: fc:95:4c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNDA1MDEyMjQ2WhcNMjUwNDEyMDEyMjQ2WjAYMRYwFAYD VQQDEw02N2YwODVlNi1jMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp/C8IbGhYD38Q7YjNsB575e5AI58NmOvmhU3rUkr3FWFpu9U0+Ddel/HF+X rH7XbLpmqUyaJqRf9nW/rwyATs42AVXlV7vQIRV2DgBIcQ4Ai0AzsbE0sYR4cjsL pCVvKZeICKEwwyvu5ZtuTcqJCtF5m/r0qFwlnagzjO1hF8I4FEOCdmR0AktqU2rf /lnky78Z/YjuWVtlvy3XVeVoK6VfyhuLd25+UFEihTbYpjsBdy4hbb7B02PyKB6j vBzcrOC//JFJ1kzlz3796SrVnM9e4JLxMV/KnNW0Z4F3PCIxVKv18TpsGxzyoJv6 rbAea90aHSehrnQwFFBE07WnEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsmf2ST P7UVLferRMYL88l9q6HzMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv0a3HZWh01iqvtYXuoiyksLA1Ob2cjd/9XiKbbYphLbRjyyE18Vgr WXPgfbnCsTLTbNn81buzbBouP8E4TXqaxJ9HPrOVAoxUxK3IElQfP1RXd9AbMI1W 9/mpoFHJknmXbPcUgFEmmGw19b9WzJVlbTXDY6R6cqsBaeBnvhS4ccFXl3uZhQRg LbeP32P7l8xwGxgvv/GsUThIHCXi4C0TeiRKxUcpmTME67Wedy3iq7hLG5qxsArn 7etDO8MXm2wCE7WmNG7jz2o/yJXmoUDh2jDkUOMgztU3AOsT3zXtAGIPdy7hRWNY uYY5ltpzPXAKSub4PiIPW+HntSr8lUw+ -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:00 2025 by rpki-client