Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          o3iA+kkg3+YgLL3VRoIPt9zxW0H1FrlrMMUA9GqOCHk=
Subject key identifier:   BC:BA:F4:FF:38:7A:6A:5C:13:5C:00:53:15:40:33:FA:DA:CD:36:BF
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          02DB
Signing time:             Thu 21 Nov 2024 00:59:35 +0000
Manifest this update:     Thu 21 Nov 2024 00:59:35 +0000
Manifest next update:     Thu 28 Nov 2024 00:59:35 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: c2OYxm+Lc2nVPrb/Av0sPv4y8we9L6G+FAQw9Za5vzQ=)
                          2: A3144CBC2EE911EE9A805D4FC4F9AE02.roa (hash: pEdiw2TJUsfSqs5fnGmN59a6QGJIm2E/I2cp7lE+icw=)
                          3: BA8A60AEFB8911EDBF95D70FC4F9AE02.roa (hash: 1t9FETJTETRlAHZpa8n2/ay9wrVew58uqgqaUh48oRg=)
                          4: B9B89A10FB8911EDBF95D70FC4F9AE02.roa (hash: lRoYypbAmsJgYJlB5XMojg3ocpM7AoHA8Yth0HJ+218=)
                          5: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=)
                          6: BB1C8984FB8911EDBF95D70FC4F9AE02.roa (hash: jIktAw7xdxh49sNtuOin/casa/xFBLPKhkTmvY3abDk=)
                          7: A80B40921A4211EE83C49C1CC4F9AE02.roa (hash: WfFbSIs229LsheBXvRJJsQtKrDoyp4qPEJeE0KfuasM=)
                          8: A33FF4940B4311EE8ABEE820C4F9AE02.roa (hash: aFuyNLKTnPjsGK4AhrTZDdaMamtlTLjYSXstxky6Hbw=)
                          9: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=)
                          10: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: xgIs9fKOINg78o2mjzzJNpjb0DPInUx+H9AXfLjuptM=)
                          11: BABFD4EC2BE311EFB9C16320C4F9AE02.roa (hash: mof9dpIHFO9XsCWju4ey9h4zi8MK+Uyfb5E/+l6Ujao=)
                          12: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=)
                          13: BBD5B634FB8911EDBF95D70FC4F9AE02.roa (hash: LYWs6ybxq0oj3+RkxbDRIC+4v5nQzkZGJ70o2ztbIms=)
                          14: 4CF7B6F834CE11EEB44B835DC4F9AE02.roa (hash: nWLH6kwiVegk08h4yc7fneStdHCesY0iUBf1w4csxXs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Nov 21 00:59:35 2024 GMT
            Not After : Nov 28 00:59:35 2024 GMT
        Subject: CN=673e85f7-9ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:ad:51:7f:06:f1:8b:4c:8e:f3:d3:5d:9c:
                    c6:33:ff:55:90:a7:c8:80:19:78:9a:9f:05:7d:1f:
                    c5:e6:08:2b:26:88:50:09:c8:38:68:c3:ff:d3:33:
                    07:ff:1d:67:b1:72:f8:98:43:13:4b:45:6d:94:ed:
                    28:ee:03:76:94:cc:9e:64:3d:a4:36:9f:56:2a:79:
                    5f:f0:22:92:c6:e7:ea:58:70:06:0a:9b:1a:cc:02:
                    72:01:22:72:bc:30:69:70:ba:14:ef:57:81:38:3d:
                    39:97:94:06:56:ec:31:94:e3:e8:44:35:4b:f2:cd:
                    fe:3f:15:13:33:99:18:14:27:38:ae:de:c4:2d:56:
                    03:9d:d4:85:04:28:2a:47:b2:a2:7a:21:ce:6b:00:
                    54:a9:9e:8d:fd:c9:0a:6d:00:6b:f2:02:94:b7:36:
                    f4:18:d2:a6:8b:1d:d3:46:39:48:79:47:a4:34:55:
                    95:2d:2b:80:30:d5:93:82:03:80:25:89:01:6d:7e:
                    ef:65:7d:f1:16:f5:b0:8f:92:2f:05:59:70:d5:c7:
                    2e:15:0e:78:b9:6f:ed:f0:7f:5c:2d:97:6c:07:4c:
                    6d:49:36:68:17:f6:1e:bf:5c:72:cc:18:c7:50:31:
                    8e:66:f1:06:ed:7a:1a:22:34:eb:dc:b5:19:8f:35:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:F4:FF:38:7A:6A:5C:13:5C:00:53:15:40:33:FA:DA:CD:36:BF
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0c:f7:9b:c3:3d:ea:d8:12:06:d4:18:e8:56:b7:3f:8b:b1:
         8d:72:67:68:47:f5:b0:98:9a:bb:a3:78:b2:4e:5f:2e:ad:74:
         ca:a8:25:25:7e:c7:78:e8:31:34:0e:dc:5c:1a:65:32:4f:59:
         8f:7f:31:16:9e:de:38:c4:9b:f0:e7:96:90:0b:67:f7:44:2b:
         47:99:7d:cf:9f:a2:c2:78:57:5a:f9:7b:de:8f:d7:cb:e8:ff:
         a6:c6:a2:09:e0:2b:09:92:02:63:43:2a:22:99:fe:57:d7:03:
         d8:5d:31:84:e5:cd:6a:19:81:c5:2e:24:97:17:7b:fc:19:3d:
         b1:ab:55:32:3f:2c:4a:e3:21:94:13:32:a4:a9:2b:1f:21:4f:
         47:2c:4e:6a:85:97:40:1c:b3:eb:19:e0:8d:71:06:f1:32:cf:
         dc:93:96:a4:48:88:67:65:ea:85:46:0a:ac:38:b0:d9:1d:08:
         c4:47:e3:70:60:c0:01:1e:41:0c:55:c1:fe:6e:26:fb:a9:62:
         db:65:0a:eb:d8:df:9f:b8:98:12:56:52:45:83:c3:7d:e2:eb:
         aa:0a:18:78:e0:c8:dc:46:4c:22:c0:f7:16:b4:ff:61:78:14:
         0b:82:5e:90:2a:57:0f:38:c6:db:31:16:fa:06:a2:f7:d1:b5:
         e8:70:0a:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjQxMTIxMDA1OTM1WhcNMjQxMTI4MDA1OTM1WjAYMRYwFAYD
VQQDEw02NzNlODVmNy05ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uetUX8G8YtMjvPTXZzGM/9VkKfIgBl4mp8FfR/F5ggrJohQCcg4aMP/0zMH
/x1nsXL4mEMTS0VtlO0o7gN2lMyeZD2kNp9WKnlf8CKSxufqWHAGCpsazAJyASJy
vDBpcLoU71eBOD05l5QGVuwxlOPoRDVL8s3+PxUTM5kYFCc4rt7ELVYDndSFBCgq
R7KieiHOawBUqZ6N/ckKbQBr8gKUtzb0GNKmix3TRjlIeUekNFWVLSuAMNWTggOA
JYkBbX7vZX3xFvWwj5IvBVlw1ccuFQ54uW/t8H9cLZdsB0xtSTZoF/Yev1xyzBjH
UDGOZvEG7XoaIjTr3LUZjzUS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy69P84
empcE1wAUxVAM/razTa/MB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3DPebwz3q2BIG1BjoVrc/i7GNcmdoR/WwmJq7o3iyTl8urXTKqCUl
fsd46DE0DtxcGmUyT1mPfzEWnt44xJvw55aQC2f3RCtHmX3Pn6LCeFda+Xvej9fL
6P+mxqIJ4CsJkgJjQyoimf5X1wPYXTGE5c1qGYHFLiSXF3v8GT2xq1UyPyxK4yGU
EzKkqSsfIU9HLE5qhZdAHLPrGeCNcQbxMs/ck5akSIhnZeqFRgqsOLDZHQjER+Nw
YMABHkEMVcH+bib7qWLbZQrr2N+fuJgSVlJFg8N94uuqChh44MjcRkwiwPcWtP9h
eBQLgl6QKlcPOMbbMRb6BqL30bXocAoA
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org