Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          eOTHfwHsPcS81kxQlzh5wGo15GYVU9aIHR0+yY/Ot6U=
Subject key identifier:   6B:98:F3:3E:1A:E5:FA:4D:0C:0F:AF:7C:31:25:F7:F2:60:2E:C9:D3
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       03AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0363
Signing time:             Sat 19 Jul 2025 01:29:59 +0000
Manifest this update:     Sat 19 Jul 2025 01:29:58 +0000
Manifest next update:     Sat 26 Jul 2025 01:29:58 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: z1RfnmhKTzt4d4SnhBuB+L7+48XIA+lR6MkE3rEo/SM=)
                          2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
                          4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
                          5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
                          6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
                          7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
                          8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
                          9: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: IaF7YOT0+jtUwUgOYt9QCbpQYVKy8zVmsuEcle7EuLQ=)
                          10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
                          11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
                          12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jul 19 01:29:58 2025 GMT
            Not After : Jul 26 01:29:58 2025 GMT
        Subject: CN=687af516-1d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:39:ff:bc:17:bc:96:93:d0:a4:e4:99:7c:
                    5c:49:71:4a:49:d8:26:33:7a:62:54:05:82:b4:9f:
                    58:c2:d9:10:1c:db:43:ed:b1:54:e0:b9:70:cf:3c:
                    2f:ba:f9:54:aa:2a:af:5d:8f:6c:ce:05:d4:4e:7f:
                    99:fc:42:c2:16:fd:8d:a7:75:b6:56:b1:0f:9a:69:
                    fa:4e:94:c8:c7:4e:11:77:01:e4:21:6e:85:b8:04:
                    5d:02:88:a2:8e:d3:d4:3f:7a:b9:6c:79:91:ab:41:
                    9d:4d:10:e5:15:75:dd:76:a3:64:16:80:b8:9d:be:
                    b0:b6:0b:d7:91:f5:26:f4:a5:09:c2:6c:3c:00:72:
                    96:28:85:2e:90:27:4a:4a:de:08:d3:c3:cf:e2:51:
                    f5:3b:25:31:25:8f:2e:34:c5:99:1e:1c:75:42:62:
                    8a:f9:25:4e:f1:3a:be:08:27:31:ce:a2:ce:6b:2b:
                    da:03:de:b3:fa:78:bb:bb:31:10:da:bb:62:5f:b3:
                    73:18:55:1c:8b:bc:da:2e:78:a0:d4:a3:28:f9:b4:
                    f5:2e:d5:c7:15:c5:fb:3d:0e:05:07:70:b0:98:11:
                    be:09:a1:56:c6:02:cf:4b:ee:ce:14:85:5d:a7:93:
                    b5:1b:51:8a:f6:5b:9b:74:17:5c:1f:da:9e:d3:d8:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:F3:3E:1A:E5:FA:4D:0C:0F:AF:7C:31:25:F7:F2:60:2E:C9:D3
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:4e:3d:11:4d:a0:cb:90:e4:0b:db:f4:c0:76:a5:9e:de:
         04:4f:b6:f8:d1:87:aa:95:53:65:9a:e4:28:c0:d5:ba:37:d1:
         cb:b0:04:9b:9a:af:cc:10:8f:40:8f:b6:9a:e1:33:22:18:5c:
         aa:6b:a0:85:36:43:06:32:a6:72:23:2b:e2:1a:42:7a:06:ce:
         71:91:fd:d3:3c:68:72:5c:81:a6:a4:a7:6a:43:0c:3f:bc:54:
         24:09:d6:49:1d:a2:86:b0:63:e8:e7:98:02:3e:6d:9a:67:c2:
         84:c6:4f:f6:fa:d4:0a:19:65:cb:11:94:4e:c2:0f:49:bd:96:
         7e:bb:9d:d4:d4:71:09:3e:69:71:a1:06:58:1b:75:db:af:ae:
         8e:7c:b4:5f:e3:1b:10:8c:3b:c7:9c:a1:10:9f:54:95:f9:e4:
         ee:c9:81:0e:63:fb:bf:dd:a7:a4:a0:4c:04:0b:f9:34:6b:70:
         fb:d9:27:2e:fe:ce:1b:b0:3a:47:05:e8:e5:1c:63:39:31:27:
         90:02:5f:56:ad:7f:96:df:bc:56:0c:f3:1f:33:a2:80:da:72:
         26:94:b6:e9:07:08:38:df:3d:09:81:9b:5b:88:90:b9:b2:0f:
         68:26:f3:62:ef:d7:51:ed:f4:f2:05:55:a7:7d:90:11:67:f5:
         fe:09:dc:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjUwNzE5MDEyOTU4WhcNMjUwNzI2MDEyOTU4WjAYMRYwFAYD
VQQDEw02ODdhZjUxNi0xZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq505/7wXvJaT0KTkmXxcSXFKSdgmM3piVAWCtJ9YwtkQHNtD7bFU4Llwzzwv
uvlUqiqvXY9szgXUTn+Z/ELCFv2Np3W2VrEPmmn6TpTIx04RdwHkIW6FuARdAoii
jtPUP3q5bHmRq0GdTRDlFXXddqNkFoC4nb6wtgvXkfUm9KUJwmw8AHKWKIUukCdK
St4I08PP4lH1OyUxJY8uNMWZHhx1QmKK+SVO8Tq+CCcxzqLOayvaA96z+ni7uzEQ
2rtiX7NzGFUci7zaLnig1KMo+bT1LtXHFcX7PQ4FB3CwmBG+CaFWxgLPS+7OFIVd
p5O1G1GK9lubdBdcH9qe09jGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuY8z4a
5fpNDA+vfDEl9/JgLsnTMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUrU49EU2gy5DkC9v0wHalnt4ET7b40YeqlVNlmuQowNW6N9HLsASb
mq/MEI9Aj7aa4TMiGFyqa6CFNkMGMqZyIyviGkJ6Bs5xkf3TPGhyXIGmpKdqQww/
vFQkCdZJHaKGsGPo55gCPm2aZ8KExk/2+tQKGWXLEZROwg9JvZZ+u53U1HEJPmlx
oQZYG3Xbr66OfLRf4xsQjDvHnKEQn1SV+eTuyYEOY/u/3aekoEwEC/k0a3D72Scu
/s4bsDpHBejlHGM5MSeQAl9WrX+W37xWDPMfM6KA2nImlLbpBwg43z0JgZtbiJC5
sg9oJvNi79dR7fTyBVWnfZARZ/X+Cdws
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:32:33 2025 by rpki-client