Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          xk7vOd+lgi14Hr93roWBWSJNWU9JtFHyr9pwVwDWTME=
Subject key identifier:   88:32:1D:21:8E:10:64:E9:89:5A:0A:7A:18:DC:5A:10:71:4B:01:72
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       04AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0442
Signing time:             Wed 09 Sep 2026 00:22:24 +0000
Manifest this update:     Wed 09 Sep 2026 00:22:24 +0000
Manifest next update:     Wed 16 Sep 2026 00:22:24 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: D1WJpUCz6jJ9qfDzmFV4BM/q3kip7XItmDCSicNH95w=)
                          2: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=)
                          3: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=)
                          4: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=)
                          5: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=)
                          6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=)
                          7: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=)
                          8: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=)
                          9: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=)
                          10: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=)
                          11: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=)
                          12: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Sep  9 00:22:24 2026 GMT
            Not After : Sep 16 00:22:24 2026 GMT
        Subject: CN=6aa0a6c0-c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:20:08:f4:d4:7d:be:79:ba:61:85:14:27:
                    ee:4e:fe:ae:71:c9:d7:db:45:f3:54:70:80:77:fe:
                    7e:a9:79:c3:7e:cb:df:5c:c7:97:47:ca:47:ee:85:
                    f6:c1:01:d1:52:1f:17:04:09:6b:79:67:34:79:de:
                    e7:eb:13:76:f1:8c:b8:8d:64:c9:d3:df:7b:a3:90:
                    70:b3:99:b7:8c:54:e8:cc:75:a0:eb:53:29:e0:de:
                    4a:b2:2a:ce:a4:ab:b6:2e:32:07:5e:9c:05:68:c5:
                    b3:2b:50:24:99:dc:b4:c7:50:ce:cc:3b:bb:e8:7f:
                    18:ac:51:19:03:25:17:49:70:ab:b2:9a:f1:d1:c3:
                    bd:0c:bc:9c:62:40:56:10:3d:b2:77:2b:98:d1:5b:
                    2d:08:ae:a0:5a:f9:47:1c:7f:48:85:6f:42:1c:01:
                    ae:03:c2:a4:bc:fe:21:0c:54:cf:19:92:05:2d:dc:
                    9e:47:7b:7c:78:dc:1a:50:c9:db:5a:ff:5e:f1:bc:
                    db:c3:b2:9d:c8:22:c8:f0:cb:91:db:15:f1:4d:41:
                    4b:21:72:ca:9e:e2:04:ac:0b:55:2a:08:5c:14:73:
                    98:5e:87:7d:d6:a6:79:07:86:10:0b:0c:26:4f:5a:
                    3f:07:93:51:78:7f:46:ac:ee:15:35:fd:69:ba:90:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:32:1D:21:8E:10:64:E9:89:5A:0A:7A:18:DC:5A:10:71:4B:01:72
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bf:07:0c:4c:1d:36:b2:bb:66:5a:bb:78:79:9f:f4:dc:41:
         b6:04:34:89:ec:c4:39:44:64:7e:34:ef:ea:0a:61:45:94:50:
         e9:60:6f:f1:2d:5c:d5:f1:b3:c6:e2:b5:a3:32:69:df:ad:ee:
         25:bf:db:86:44:89:ae:d7:66:b4:21:52:9e:98:f2:60:87:67:
         9e:a5:20:86:33:83:7b:04:39:c6:30:1d:0a:f7:e1:f9:c8:6e:
         28:e4:19:32:b9:c5:e0:57:ec:f9:57:3a:13:31:c3:f0:d2:88:
         6c:71:79:44:83:06:bc:92:d4:e5:fd:52:20:8f:3f:6c:c3:97:
         2f:70:e2:41:35:39:6c:54:04:c8:05:22:db:50:17:17:e9:91:
         d5:6b:85:fe:b0:f0:2f:c6:30:95:42:87:e8:d7:e5:0e:b8:9c:
         09:9f:12:ec:9b:be:d5:3d:98:56:c5:b9:db:16:0d:fc:56:3d:
         3f:b7:7d:36:df:23:ad:1b:2c:be:5d:a4:9d:8f:9a:6b:47:18:
         ad:7a:42:73:ce:08:ac:f4:62:70:7f:69:86:90:02:91:99:21:
         22:9f:b7:63:25:c1:3b:89:a8:54:ea:bb:c0:94:30:8f:76:bd:
         1f:9a:03:68:fe:b8:3d:fe:aa:27:17:3d:1b:c0:cc:3e:ff:3e:
         cb:af:94:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjYwOTA5MDAyMjI0WhcNMjYwOTE2MDAyMjI0WjAYMRYwFAYD
VQQDEw02YWEwYTZjMC1jNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8YgCPTUfb55umGFFCfuTv6uccnX20XzVHCAd/5+qXnDfsvfXMeXR8pH7oX2
wQHRUh8XBAlreWc0ed7n6xN28Yy4jWTJ0997o5Bws5m3jFTozHWg61Mp4N5KsirO
pKu2LjIHXpwFaMWzK1Akmdy0x1DOzDu76H8YrFEZAyUXSXCrsprx0cO9DLycYkBW
ED2ydyuY0VstCK6gWvlHHH9IhW9CHAGuA8KkvP4hDFTPGZIFLdyeR3t8eNwaUMnb
Wv9e8bzbw7KdyCLI8MuR2xXxTUFLIXLKnuIErAtVKghcFHOYXod91qZ5B4YQCwwm
T1o/B5NReH9GrO4VNf1pupC/LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgyHSGO
EGTpiVoKehjcWhBxSwFyMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqL8HDEwdNrK7Zlq7eHmf9NxBtgQ0iezEOURkfjTv6gphRZRQ6WBv8S1c1fGz
xuK1ozJp363uJb/bhkSJrtdmtCFSnpjyYIdnnqUghjODewQ5xjAdCvfh+chuKOQZ
MrnF4Ffs+Vc6EzHD8NKIbHF5RIMGvJLU5f1SII8/bMOXL3DiQTU5bFQEyAUi21AX
F+mR1WuF/rDwL8YwlUKH6NflDricCZ8S7Ju+1T2YVsW52xYN/FY9P7d9Nt8jrRss
vl2knY+aa0cYrXpCc84IrPRicH9phpACkZkhIp+3YyXBO4moVOq7wJQwj3a9H5oD
aP64Pf6qJxc9G8DMPv8+y6+UFA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:17:27 2026 by rpki-client