$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft File: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json) Hash identifier: /rYD5wW5HYVk2VP5cqsF/jZHy/yC1FFE6tj1x0Wepjc= Subject key identifier: A0:BE:AF:DF:3C:BC:75:66:E6:28:65:C0:A9:4B:48:1C:2C:08:18:C9 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft Manifest number: 034A Signing time: Sat 31 May 2025 01:20:49 +0000 Manifest this update: Sat 31 May 2025 01:20:49 +0000 Manifest next update: Sat 07 Jun 2025 01:20:49 +0000 Files and hashes: 1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: kcGE0hyrad59Z5j4wHm5H/p7l2kH0LV3rQB+ghvrPz0=) 2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=) 3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=) 4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=) 5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=) 6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=) 7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=) 8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=) 9: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: IaF7YOT0+jtUwUgOYt9QCbpQYVKy8zVmsuEcle7EuLQ=) 10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=) 11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=) 12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 31 01:20:49 2025 GMT Not After : Jun 7 01:20:49 2025 GMT Subject: CN=683a5971-9301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:40:9b:5d:51:57:bc:bc:fc:16:e9:bc:33: 61:47:88:92:73:a1:bf:7e:33:51:fc:fb:db:dd:38: 1c:9f:9c:0c:3b:ad:b2:4c:57:b3:3b:e9:ed:72:c1: b6:eb:83:28:04:43:48:c8:f6:0a:04:23:2d:45:b9: fe:8c:31:0c:6e:af:5e:71:4b:2e:e4:d3:41:f0:58: f0:f7:43:4d:0b:7d:90:c1:6c:4e:7b:27:d8:0d:d0: 93:64:93:a6:14:5f:cb:e2:10:66:2f:16:8a:9c:6b: 68:21:18:3b:59:b2:91:dc:b4:0c:2d:2e:97:06:fa: 52:1e:06:d0:97:54:39:eb:c6:4f:e4:79:44:5c:8d: 88:5d:62:a8:b7:c3:18:fa:34:42:79:8b:3c:de:7f: 18:36:d2:b8:31:93:d9:12:f5:6a:ec:e2:34:45:dc: 3e:6d:11:c8:01:ae:bd:7e:50:b5:9c:a7:71:f0:9a: 5e:25:3e:e8:6b:a8:df:3e:6f:97:00:d6:26:63:83: 99:a1:08:59:70:14:68:6d:5d:78:36:e0:8f:b5:c8: a3:6f:71:33:0e:18:02:2d:8d:20:6c:d0:80:ed:6a: a2:33:61:f3:71:6d:b1:2e:47:2c:27:14:87:23:f1: b9:a7:ad:19:50:7d:6f:9d:ef:8e:a8:94:55:08:5f: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:AF:DF:3C:BC:75:66:E6:28:65:C0:A9:4B:48:1C:2C:08:18:C9 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b3:27:ca:9b:5b:c5:6b:18:de:6d:34:23:8f:94:30:cc:a8: 22:17:d3:27:38:5f:32:53:8d:c2:0c:67:f3:ee:9f:00:6d:fd: 8d:1c:df:2e:c2:ab:8b:1f:ca:bf:f6:35:71:f2:68:70:97:0b: 9a:d1:2c:02:2b:50:99:5e:62:13:8f:b2:30:7c:64:c9:ee:ee: 83:85:c3:72:12:2c:90:53:6a:72:4e:f3:9f:a9:2b:9a:42:d6: f9:03:22:39:ff:38:de:ad:1f:91:df:d2:70:37:b6:e5:d5:85: e8:e3:b8:2b:8b:46:2f:3f:f8:c7:16:85:00:b2:6e:aa:cb:64: 57:34:01:5d:3c:1e:14:7f:f4:cf:3b:e3:53:95:41:f5:10:d7: 78:2f:1b:c9:e3:a3:b7:35:46:87:31:85:8d:58:35:3d:75:dc: b7:66:7b:2d:d4:c0:d2:b7:27:0d:a2:84:c0:c2:1f:4c:ab:b9: 86:fa:e8:64:cb:55:94:3a:0a:81:f0:da:c0:5c:ae:70:b9:8c: 0a:1e:3e:b6:78:d7:28:44:92:49:fa:43:53:02:14:19:fc:fa: 77:d6:f2:52:e9:61:9e:a8:49:02:24:d8:bf:92:ae:ca:bd:da: 1e:df:79:97:cf:78:2d:fc:c0:f0:8b:40:70:0a:1e:47:19:e9: 82:44:b0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNTMxMDEyMDQ5WhcNMjUwNjA3MDEyMDQ5WjAYMRYwFAYD VQQDEw02ODNhNTk3MS05MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgtAm11RV7y8/BbpvDNhR4iSc6G/fjNR/Pvb3Tgcn5wMO62yTFezO+ntcsG2 64MoBENIyPYKBCMtRbn+jDEMbq9ecUsu5NNB8Fjw90NNC32QwWxOeyfYDdCTZJOm FF/L4hBmLxaKnGtoIRg7WbKR3LQMLS6XBvpSHgbQl1Q568ZP5HlEXI2IXWKot8MY +jRCeYs83n8YNtK4MZPZEvVq7OI0Rdw+bRHIAa69flC1nKdx8JpeJT7oa6jfPm+X ANYmY4OZoQhZcBRobV14NuCPtcijb3EzDhgCLY0gbNCA7WqiM2HzcW2xLkcsJxSH I/G5p60ZUH1vne+OqJRVCF+7sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC+r988 vHVm5ihlwKlLSBwsCBjJMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8syfKm1vFaxjebTQjj5QwzKgiF9MnOF8yU43CDGfz7p8Abf2NHN8u wquLH8q/9jVx8mhwlwua0SwCK1CZXmITj7IwfGTJ7u6DhcNyEiyQU2pyTvOfqSua Qtb5AyI5/zjerR+R39JwN7bl1YXo47gri0YvP/jHFoUAsm6qy2RXNAFdPB4Uf/TP O+NTlUH1ENd4LxvJ46O3NUaHMYWNWDU9ddy3Znst1MDStycNooTAwh9Mq7mG+uhk y1WUOgqB8NrAXK5wuYwKHj62eNcoRJJJ+kNTAhQZ/Pp31vJS6WGeqEkCJNi/kq7K vdoe33mXz3gt/MDwi0BwCh5HGemCRLCS -----END CERTIFICATE-----Generated at Sat May 31 16:28:38 2025 by rpki-client