Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          V55D2o9saFbLZcTiRMmi4AnyPEqBVUepyQU9hfqL5CY=
Subject key identifier:   4C:E7:49:18:3A:5E:1B:29:7B:88:B9:51:92:1E:17:DA:05:FD:AC:D9
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0459
Signing time:             Sun 25 Oct 2026 00:14:07 +0000
Manifest this update:     Sun 25 Oct 2026 00:14:06 +0000
Manifest next update:     Sun 01 Nov 2026 00:14:06 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: 12of2KrvRw+Du0a9uqVQN7TMk5Kt8vFfc/YcIqcb2eE=)
                          2: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=)
                          3: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=)
                          4: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=)
                          5: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=)
                          6: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=)
                          7: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=)
                          8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=)
                          9: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=)
                          10: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=)
                          11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=)
                          12: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Oct 25 00:14:06 2026 GMT
            Not After : Nov  1 00:14:06 2026 GMT
        Subject: CN=6add49cf-663a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:7f:98:b7:71:ce:c5:c5:67:09:e8:07:ed:
                    0e:c3:84:8a:7c:f9:e8:8f:92:ba:15:9b:7d:30:94:
                    8f:62:69:37:2a:8f:f1:55:f0:6c:2f:ab:a4:a4:81:
                    4c:a2:2a:4f:4d:27:8a:5c:65:bf:3d:49:5b:fe:bf:
                    30:f0:77:f8:55:b7:5c:d4:f3:1e:76:09:a1:0a:33:
                    c0:6c:aa:e3:7a:97:5a:bb:ec:25:d8:63:ba:eb:fb:
                    1e:b3:c0:22:fa:de:77:ea:4f:8f:1b:fb:77:d8:11:
                    eb:a5:ff:9b:c0:33:7a:b6:4a:6e:a4:27:93:fd:ed:
                    6d:9a:8d:f8:74:52:b5:46:42:05:c6:5e:31:a3:07:
                    7d:63:f6:26:64:31:e3:b3:70:f3:27:b1:70:0b:43:
                    93:88:51:d6:55:d2:13:b3:bd:ed:59:56:50:75:9e:
                    20:48:9f:ac:8c:69:a0:3d:c6:47:60:80:2e:28:91:
                    10:90:87:5c:c7:35:2c:28:21:ef:5c:aa:d5:c7:b9:
                    92:95:03:f5:74:f5:d4:f0:dd:7e:03:b2:3e:af:27:
                    7b:70:f6:0e:f6:96:70:16:43:67:61:61:9a:0a:d5:
                    51:dc:9a:ed:83:1e:d4:99:d4:90:69:30:ce:d4:be:
                    0c:e3:d8:4b:ce:5a:5d:12:e6:88:0a:43:39:52:fd:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E7:49:18:3A:5E:1B:29:7B:88:B9:51:92:1E:17:DA:05:FD:AC:D9
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:da:0d:1d:18:c5:b9:a2:08:a2:66:00:0b:ad:65:4e:1e:16:
         b2:f1:37:8a:35:f8:3b:23:59:ff:30:22:4c:d3:79:48:8e:ca:
         12:93:f5:3a:b3:4a:32:09:61:11:0d:17:76:e7:49:85:8b:2d:
         a7:d8:f7:29:58:65:6f:4b:54:a5:6e:6f:97:73:5f:5f:f2:68:
         65:7d:c6:64:48:ea:e5:7e:af:60:7d:3e:7a:71:29:0a:02:55:
         09:d4:2f:b4:c7:4c:55:db:c7:ae:fc:4a:0f:b6:a2:d1:4c:5b:
         b4:2e:c3:09:23:2c:c0:4f:a0:b0:47:c8:84:7c:a7:54:6e:c8:
         63:34:03:be:db:f3:05:8d:96:af:e4:38:00:a8:b4:0c:e4:32:
         5e:e5:90:36:26:50:33:ef:bb:dc:cf:c1:a5:59:ae:fe:3f:3e:
         c7:8f:31:88:4a:b7:8b:73:64:dc:8a:84:db:87:5d:7c:bb:fe:
         4d:00:c5:c1:10:1c:ee:f0:6f:da:ee:36:b1:d7:b5:c3:95:2e:
         f8:f1:8a:4d:5f:00:84:9b:ae:aa:ff:e3:2b:55:35:78:6c:c8:
         99:ea:40:5a:3d:04:7c:7d:b8:16:8f:f4:01:6b:67:e4:fb:57:
         18:d1:3f:6d:42:60:c6:6a:24:f1:f7:63:e5:a3:9a:dc:a5:72:
         8c:e1:91:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjYxMDI1MDAxNDA2WhcNMjYxMTAxMDAxNDA2WjAYMRYwFAYD
VQQDEw02YWRkNDljZi02NjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQd/mLdxzsXFZwnoB+0Ow4SKfPnoj5K6FZt9MJSPYmk3Ko/xVfBsL6ukpIFM
oipPTSeKXGW/PUlb/r8w8Hf4Vbdc1PMedgmhCjPAbKrjepdau+wl2GO66/ses8Ai
+t536k+PG/t32BHrpf+bwDN6tkpupCeT/e1tmo34dFK1RkIFxl4xowd9Y/YmZDHj
s3DzJ7FwC0OTiFHWVdITs73tWVZQdZ4gSJ+sjGmgPcZHYIAuKJEQkIdcxzUsKCHv
XKrVx7mSlQP1dPXU8N1+A7I+ryd7cPYO9pZwFkNnYWGaCtVR3Jrtgx7UmdSQaTDO
1L4M49hLzlpdEuaICkM5Uv06MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEznSRg6
Xhspe4i5UZIeF9oF/azZMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp9oNHRjFuaIIomYAC61lTh4WsvE3ijX4OyNZ/zAiTNN5SI7KEpP1OrNKMglh
EQ0XdudJhYstp9j3KVhlb0tUpW5vl3NfX/JoZX3GZEjq5X6vYH0+enEpCgJVCdQv
tMdMVdvHrvxKD7ai0UxbtC7DCSMswE+gsEfIhHynVG7IYzQDvtvzBY2Wr+Q4AKi0
DOQyXuWQNiZQM++73M/BpVmu/j8+x48xiEq3i3Nk3IqE24ddfLv+TQDFwRAc7vBv
2u42sde1w5Uu+PGKTV8AhJuuqv/jK1U1eGzImepAWj0EfH24Fo/0AWtn5PtXGNE/
bUJgxmok8fdj5aOa3KVyjOGRbg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:16:01 2026 by rpki-client