Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          TCp1Fsus+LIDmKi5ULuVt/kl9FO74KCk5cWQbev/tBA=
Subject key identifier:   24:66:A4:EF:05:A9:D7:E0:A3:35:E4:A6:29:3F:E3:FD:9B:C5:43:F3
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0450
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          03F9
Signing time:             Mon 27 Apr 2026 00:33:42 +0000
Manifest this update:     Mon 27 Apr 2026 00:33:41 +0000
Manifest next update:     Mon 04 May 2026 00:33:41 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: 2Ne0/DxhqS6jFQSyVEtR9mlQ9D4j2AzaClbnid/hx84=)
                          2: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=)
                          3: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=)
                          4: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=)
                          5: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=)
                          6: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=)
                          7: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=)
                          8: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=)
                          9: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=)
                          10: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=)
                          11: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=)
                          12: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 00:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Apr 27 00:33:41 2026 GMT
            Not After : May  4 00:33:41 2026 GMT
        Subject: CN=69eeaee6-28df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:6e:69:85:76:d9:91:25:f8:da:15:0b:d8:
                    c2:3c:eb:1e:63:1a:89:e1:1c:63:71:ce:2b:92:c7:
                    e3:c7:7d:14:0b:92:d6:34:aa:a1:2d:72:1d:6b:63:
                    60:04:0d:bd:bf:ec:67:05:6e:80:fb:c5:c0:81:99:
                    f4:27:94:8a:de:43:7a:b7:a1:7e:84:c4:28:aa:3b:
                    97:26:d4:76:c5:23:2c:b2:bb:f6:83:da:d2:ab:43:
                    d6:2c:87:e0:c5:e6:03:7f:0f:df:86:aa:69:9d:7a:
                    d9:5a:bf:39:81:a3:12:b1:e1:74:dc:b7:a2:11:fc:
                    0b:9d:f5:f6:97:de:02:e8:69:a3:d3:4c:1a:a3:ce:
                    eb:99:5a:0f:91:1d:df:80:18:af:5d:b9:02:55:fa:
                    62:09:c5:6b:aa:36:43:a7:f4:3a:0c:77:e8:73:ee:
                    4f:ab:93:74:7c:77:76:0f:2c:92:b1:1b:65:0f:73:
                    46:e8:9b:1a:67:9f:e2:e0:4f:2e:f3:07:a0:21:30:
                    52:f9:7b:fe:4e:38:00:7b:6f:b1:1a:f9:54:f5:33:
                    dc:5d:8f:e8:5f:06:5b:90:dd:32:71:86:fb:15:fe:
                    70:0b:06:be:26:6d:19:24:b2:89:18:8d:9b:dc:68:
                    64:a5:d3:48:dd:f5:6c:7b:91:5e:71:da:c7:50:16:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:A4:EF:05:A9:D7:E0:A3:35:E4:A6:29:3F:E3:FD:9B:C5:43:F3
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:90:c0:1c:06:a9:3a:56:9c:fb:da:29:dd:d8:8a:93:d7:07:
         49:0e:82:52:2e:29:2e:62:55:29:64:9d:0d:9e:79:4f:5c:ee:
         e0:a0:9c:bf:1d:cb:09:32:60:88:f6:f1:7e:ac:ec:49:f4:47:
         06:d9:38:98:0e:04:f3:d1:20:69:a7:db:b3:69:05:6f:88:d3:
         0a:0e:fa:e4:e8:f2:26:2d:35:a2:c9:cf:9b:96:0d:78:e2:47:
         57:19:10:30:0d:57:1d:2c:08:94:bd:47:be:15:2f:04:61:b2:
         5a:a5:ed:bd:d5:8f:74:40:2d:e8:7a:5c:93:53:5f:a4:a0:f9:
         f9:4a:65:e7:09:ce:89:fe:24:d1:48:d1:2b:d0:9d:6c:f5:33:
         66:6f:05:56:34:fc:d1:ae:92:f1:34:af:6e:07:2f:d0:22:50:
         9a:07:64:da:53:6e:d0:73:d6:2d:ba:62:10:fb:51:9c:b0:d3:
         19:7b:cc:06:a9:15:3b:b5:93:cb:3c:17:cf:14:4e:d3:77:ad:
         aa:f8:1d:88:a7:e9:26:28:0d:95:81:ae:63:1f:f0:67:dd:af:
         e5:70:c8:73:8e:94:3b:c5:97:f3:57:c7:a0:d9:6a:ce:35:cd:
         1e:cf:6c:9c:c2:a4:66:77:20:b3:a9:32:a6:6e:3a:40:07:62:
         4d:1f:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:46:25 2026 by rpki-client