$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: JNMenXSUAryLjQVFe1kNa7JeyTmfIAc1eS22gJCxaFw= Subject key identifier: B6:20:DF:52:47:D8:2A:F2:E2:CF:F0:94:A3:4E:22:AA:E9:B4:D8:55 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 0273 Signing time: Sun 19 May 2024 03:50:35 +0000 Manifest this update: Sun 19 May 2024 03:50:34 +0000 Manifest next update: Sun 26 May 2024 03:50:34 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: Hazyk+M9EfY1YzwDP9TrX0MumEruRvAJeLJy/lTw7EI=) 2: F67853CA3E9411EE8B23F75DC4F9AE02.roa (hash: CvsM/WVsb4EwEW8bTDNFsSWBWZD3ueWvjDItUqIV0lk=) 3: A3144CBC2EE911EE9A805D4FC4F9AE02.roa (hash: pEdiw2TJUsfSqs5fnGmN59a6QGJIm2E/I2cp7lE+icw=) 4: 694230CC684011EE8B9E3543C4F9AE02.roa (hash: utQGSOiyirzcAXiBr9kP18WFvxIj+KMapRsMM4fun3g=) 5: 8F5B11804EC211EE84582E78C4F9AE02.roa (hash: c5WH1J+JKVE3wCAoiko0oXAgwxAiiuXbr9eqQb9z9AE=) 6: BA8A60AEFB8911EDBF95D70FC4F9AE02.roa (hash: 1t9FETJTETRlAHZpa8n2/ay9wrVew58uqgqaUh48oRg=) 7: B9B89A10FB8911EDBF95D70FC4F9AE02.roa (hash: lRoYypbAmsJgYJlB5XMojg3ocpM7AoHA8Yth0HJ+218=) 8: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=) 9: BB1C8984FB8911EDBF95D70FC4F9AE02.roa (hash: jIktAw7xdxh49sNtuOin/casa/xFBLPKhkTmvY3abDk=) 10: A80B40921A4211EE83C49C1CC4F9AE02.roa (hash: WfFbSIs229LsheBXvRJJsQtKrDoyp4qPEJeE0KfuasM=) 11: A33FF4940B4311EE8ABEE820C4F9AE02.roa (hash: aFuyNLKTnPjsGK4AhrTZDdaMamtlTLjYSXstxky6Hbw=) 12: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=) 13: F769677EC7C511EDA7A8CD39C4F9AE02.roa (hash: razvBWsqF+YZB1B7VAkT2pAQn/P8/hx/sD3DzMjNyHc=) 14: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=) 15: BBD5B634FB8911EDBF95D70FC4F9AE02.roa (hash: LYWs6ybxq0oj3+RkxbDRIC+4v5nQzkZGJ70o2ztbIms=) 16: 4CF7B6F834CE11EEB44B835DC4F9AE02.roa (hash: nWLH6kwiVegk08h4yc7fneStdHCesY0iUBf1w4csxXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 19 03:50:34 2024 GMT Not After : May 26 03:50:34 2024 GMT Subject: CN=6649770a-3fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:c7:42:d4:b0:30:42:7c:52:4f:4d:e9:98: 87:44:33:0f:37:ee:ab:2c:4a:93:7a:9b:dd:a1:7e: 68:7b:b8:41:74:ca:cd:9f:80:2f:e8:41:59:ef:48: 80:58:95:1c:55:48:c6:c7:01:58:e2:2d:da:44:9b: 57:a5:4d:a4:53:09:c9:9f:d1:43:91:cf:6c:a4:c9: 21:37:b0:08:be:04:88:a2:69:68:11:47:20:57:d9: 92:3a:27:00:a3:aa:b4:fa:27:29:a9:af:f3:d0:e3: e1:b8:b8:c8:ce:42:1b:b0:38:c7:f5:2c:7a:79:ab: 8c:b0:ca:f3:29:80:f5:a2:31:3e:50:78:8d:53:3b: 1f:89:be:8e:7c:1d:20:3d:01:9b:1b:2a:1c:74:eb: 4d:0e:b1:bc:44:7c:1c:ee:02:b6:8b:ac:99:29:f7: b7:8f:20:4c:d6:31:a5:1a:d8:a3:32:ce:33:12:3f: 6c:ee:80:a9:49:0e:89:6b:f6:d1:c1:27:2a:1f:d4: 96:05:35:44:76:fb:14:f0:cd:61:f1:80:16:4b:cf: 6b:a2:16:b4:4d:e7:5d:9a:be:69:8f:9f:e6:0b:a8: 5c:c8:fb:5d:3a:f1:f8:12:42:81:94:aa:fb:30:e9: ed:a9:9d:9c:28:63:df:49:b6:79:61:64:a0:c8:39: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:DF:52:47:D8:2A:F2:E2:CF:F0:94:A3:4E:22:AA:E9:B4:D8:55 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:aa:94:15:64:0e:3a:94:b1:95:60:32:01:1c:ec:bd:40:d1: c6:d8:f3:26:c8:c1:63:39:51:24:73:f6:7f:3d:0a:82:a9:f0: 6c:e6:f4:43:00:a5:0d:c7:e5:8b:f2:1d:57:d4:27:f3:1a:cb: 58:be:ec:df:7f:94:30:bb:54:3c:b3:67:ca:3a:b7:7d:a9:70: 97:f6:b2:64:6b:47:dd:7c:3d:3f:17:25:23:ec:67:78:66:0d: 98:b4:ae:b7:3a:2b:ef:df:ee:55:fa:4c:df:7a:fb:ae:b8:49: 66:2a:76:42:d7:07:3e:a6:87:d5:55:b4:d5:cc:33:e9:2d:1c: aa:28:01:dd:f3:5c:23:89:db:85:e2:d5:8d:50:e2:26:5b:0d: fb:4d:14:e1:87:3d:86:47:de:7b:66:72:25:1a:6f:58:1e:36: 1b:7d:5b:e2:ac:9d:cd:54:35:e6:b9:1b:99:df:c0:6f:6c:2b: 82:4e:76:47:3a:e3:89:f2:a3:a6:d7:a8:52:24:df:30:88:5e: f8:58:96:f1:c9:03:b9:34:40:99:9e:76:57:f2:a3:60:6f:37: 54:86:a5:34:81:5a:22:d0:26:b7:4b:f7:8a:06:75:2f:b2:f1: f3:cb:48:ee:d6:1f:a0:69:be:e3:a9:d6:03:34:bd:f5:79:8a: ae:8b:bf:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjQwNTE5MDM1MDM0WhcNMjQwNTI2MDM1MDM0WjAYMRYwFAYD VQQDEw02NjQ5NzcwYS0zZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WLHQtSwMEJ8Uk9N6ZiHRDMPN+6rLEqTepvdoX5oe7hBdMrNn4Av6EFZ70iA WJUcVUjGxwFY4i3aRJtXpU2kUwnJn9FDkc9spMkhN7AIvgSIomloEUcgV9mSOicA o6q0+icpqa/z0OPhuLjIzkIbsDjH9Sx6eauMsMrzKYD1ojE+UHiNUzsfib6OfB0g PQGbGyocdOtNDrG8RHwc7gK2i6yZKfe3jyBM1jGlGtijMs4zEj9s7oCpSQ6Ja/bR wScqH9SWBTVEdvsU8M1h8YAWS89roha0Teddmr5pj5/mC6hcyPtdOvH4EkKBlKr7 MOntqZ2cKGPfSbZ5YWSgyDnBbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYg31JH 2Cry4s/wlKNOIqrptNhVMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsqpQVZA46lLGVYDIBHOy9QNHG2PMmyMFjOVEkc/Z/PQqCqfBs5vRD AKUNx+WL8h1X1CfzGstYvuzff5Qwu1Q8s2fKOrd9qXCX9rJka0fdfD0/FyUj7Gd4 Zg2YtK63Oivv3+5V+kzfevuuuElmKnZC1wc+pofVVbTVzDPpLRyqKAHd81wjiduF 4tWNUOImWw37TRThhz2GR957ZnIlGm9YHjYbfVvirJ3NVDXmuRuZ38BvbCuCTnZH OuOJ8qOm16hSJN8wiF74WJbxyQO5NECZnnZX8qNgbzdUhqU0gVoi0Ca3S/eKBnUv svHzy0ju1h+gab7jqdYDNL31eYqui79y -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org