$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: 81TBBNERqi5euOhkkcfx6Xih7cWgSmgfwj/PU4bDJic= Subject key identifier: 80:93:44:DB:1F:B0:6E:63:DF:3D:2F:F2:56:3B:4C:24:AF:6D:A3:E5 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 026F Signing time: Sat 11 May 2024 04:10:58 +0000 Manifest this update: Sat 11 May 2024 04:10:57 +0000 Manifest next update: Sat 18 May 2024 04:10:57 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: yGNSzrzX6iUAchMXI99RhkSCekze/4s/sn/jMbAuPdI=) 2: F67853CA3E9411EE8B23F75DC4F9AE02.roa (hash: CvsM/WVsb4EwEW8bTDNFsSWBWZD3ueWvjDItUqIV0lk=) 3: A3144CBC2EE911EE9A805D4FC4F9AE02.roa (hash: pEdiw2TJUsfSqs5fnGmN59a6QGJIm2E/I2cp7lE+icw=) 4: 694230CC684011EE8B9E3543C4F9AE02.roa (hash: utQGSOiyirzcAXiBr9kP18WFvxIj+KMapRsMM4fun3g=) 5: 8F5B11804EC211EE84582E78C4F9AE02.roa (hash: c5WH1J+JKVE3wCAoiko0oXAgwxAiiuXbr9eqQb9z9AE=) 6: BA8A60AEFB8911EDBF95D70FC4F9AE02.roa (hash: 1t9FETJTETRlAHZpa8n2/ay9wrVew58uqgqaUh48oRg=) 7: B9B89A10FB8911EDBF95D70FC4F9AE02.roa (hash: lRoYypbAmsJgYJlB5XMojg3ocpM7AoHA8Yth0HJ+218=) 8: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=) 9: BB1C8984FB8911EDBF95D70FC4F9AE02.roa (hash: jIktAw7xdxh49sNtuOin/casa/xFBLPKhkTmvY3abDk=) 10: A80B40921A4211EE83C49C1CC4F9AE02.roa (hash: WfFbSIs229LsheBXvRJJsQtKrDoyp4qPEJeE0KfuasM=) 11: A33FF4940B4311EE8ABEE820C4F9AE02.roa (hash: aFuyNLKTnPjsGK4AhrTZDdaMamtlTLjYSXstxky6Hbw=) 12: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=) 13: F769677EC7C511EDA7A8CD39C4F9AE02.roa (hash: razvBWsqF+YZB1B7VAkT2pAQn/P8/hx/sD3DzMjNyHc=) 14: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=) 15: BBD5B634FB8911EDBF95D70FC4F9AE02.roa (hash: LYWs6ybxq0oj3+RkxbDRIC+4v5nQzkZGJ70o2ztbIms=) 16: 4CF7B6F834CE11EEB44B835DC4F9AE02.roa (hash: nWLH6kwiVegk08h4yc7fneStdHCesY0iUBf1w4csxXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 11 04:10:57 2024 GMT Not After : May 18 04:10:57 2024 GMT Subject: CN=663eefd1-ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:42:5c:d3:a2:c1:91:6d:a8:d3:84:c3:e3: d2:c6:58:39:cb:05:67:17:93:36:e2:01:a0:7a:17: 7b:55:ab:f8:2c:1b:c0:de:cc:9b:e3:e6:75:fc:d7: 87:fe:68:84:6b:f5:0c:e7:c0:d3:c1:49:90:df:5e: 40:af:54:98:e5:71:ac:f5:80:9c:f3:f0:2d:8d:1e: 78:6a:62:bb:7e:d7:dc:c8:16:f3:27:14:f9:ea:9f: c1:c6:43:04:3a:c3:a1:05:57:be:9c:8b:c5:0c:cf: d3:f0:ab:c8:45:54:ff:49:78:a5:cc:05:11:c8:f6: 1d:6f:9c:a4:f2:ee:93:50:28:28:ad:a1:8a:ea:6f: 94:9b:81:2a:e1:73:d2:be:ad:b7:37:a3:3e:4d:1c: d0:70:5e:fb:ff:2e:2f:b9:f4:b1:ee:24:5c:51:8e: 0b:60:7a:44:f5:2a:c9:68:31:3d:47:dd:6c:66:19: 78:9b:10:03:8b:44:3c:8a:2c:eb:3a:00:64:4e:56: 92:8d:0c:e0:a1:2f:4c:34:6c:c2:17:d9:f4:c6:5f: 75:cb:73:22:6c:23:71:a1:5a:4a:e9:dc:1e:58:e0: 7d:36:63:66:fd:f5:b4:e1:85:da:a8:9f:46:c3:4f: ae:ec:9c:5b:71:bc:df:5d:fa:6a:98:9b:f1:a7:98: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:93:44:DB:1F:B0:6E:63:DF:3D:2F:F2:56:3B:4C:24:AF:6D:A3:E5 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f0:09:69:34:bd:ce:49:9b:1d:14:00:1f:ca:68:ac:94:c9: aa:a7:ae:6a:04:29:80:98:37:fd:04:00:f3:46:0d:ea:76:9c: 5a:e7:5f:7d:79:1a:01:c6:01:c4:a0:a8:b3:be:6f:f1:77:ed: fd:61:19:4e:fd:fd:8e:87:ad:79:89:4e:be:d9:21:3e:96:a1: 37:50:5f:7a:1b:62:77:dd:ed:b3:48:5d:73:b7:c7:fc:06:c4: 99:82:6e:0c:60:6d:5a:12:bd:08:86:eb:44:d5:08:ee:85:bc: c6:c5:0f:7f:34:a7:cf:3a:e9:bd:4c:1b:c5:46:b4:46:b1:60: c2:07:a6:cc:47:87:49:ff:b8:54:96:35:2c:2e:a3:ef:61:f2: d5:40:f6:94:02:b4:6c:36:cd:89:60:c0:fa:95:a3:ff:7a:b4: 5b:bc:34:54:e7:0d:71:41:cf:03:96:e2:eb:60:0e:e3:69:01: 4c:b8:cd:43:15:34:5d:da:5d:3c:da:11:84:50:e8:0c:f5:d0: 71:96:db:dd:73:51:de:0a:32:18:01:f4:d7:df:7d:e1:87:16: 6d:51:27:71:be:d7:9b:5c:2e:ac:97:7f:9f:40:99:c1:53:38: 9c:3d:9c:cc:43:00:f3:e3:ae:71:9f:f1:83:54:e7:9c:1b:54: c0:f1:d3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjQwNTExMDQxMDU3WhcNMjQwNTE4MDQxMDU3WjAYMRYwFAYD VQQDEw02NjNlZWZkMS1jYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyApCXNOiwZFtqNOEw+PSxlg5ywVnF5M24gGgehd7Vav4LBvA3syb4+Z1/NeH /miEa/UM58DTwUmQ315Ar1SY5XGs9YCc8/AtjR54amK7ftfcyBbzJxT56p/BxkME OsOhBVe+nIvFDM/T8KvIRVT/SXilzAURyPYdb5yk8u6TUCgoraGK6m+Um4Eq4XPS vq23N6M+TRzQcF77/y4vufSx7iRcUY4LYHpE9SrJaDE9R91sZhl4mxADi0Q8iizr OgBkTlaSjQzgoS9MNGzCF9n0xl91y3MibCNxoVpK6dweWOB9NmNm/fW04YXaqJ9G w0+u7JxbcbzfXfpqmJvxp5hmsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICTRNsf sG5j3z0v8lY7TCSvbaPlMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs8AlpNL3OSZsdFAAfymislMmqp65qBCmAmDf9BADzRg3qdpxa5199 eRoBxgHEoKizvm/xd+39YRlO/f2Oh615iU6+2SE+lqE3UF96G2J33e2zSF1zt8f8 BsSZgm4MYG1aEr0IhutE1QjuhbzGxQ9/NKfPOum9TBvFRrRGsWDCB6bMR4dJ/7hU ljUsLqPvYfLVQPaUArRsNs2JYMD6laP/erRbvDRU5w1xQc8DluLrYA7jaQFMuM1D FTRd2l082hGEUOgM9dBxltvdc1HeCjIYAfTX333hhxZtUSdxvtebXC6sl3+fQJnB UzicPZzMQwDz465xn/GDVOecG1TA8dMn -----END CERTIFICATE-----Generated at Sat May 11 04:41:05 2024 by rpki-client on console-fra.rpki-client.org