Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          HwXKxCq4VAeStpfCTFlwSIfLh/i8mdoY94w5odEA2Gw=
Subject key identifier:   07:12:50:A2:B1:19:16:24:06:CC:39:FD:03:85:CD:E7:F7:5D:13:E1
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       03BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0375
Signing time:             Sat 23 Aug 2025 01:16:07 +0000
Manifest this update:     Sat 23 Aug 2025 01:16:07 +0000
Manifest next update:     Sat 30 Aug 2025 01:16:07 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: Ud8eeJPGF/kmeNU2Dmhz8mxXqKK0umwdhJ01cMY8bco=)
                          2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
                          4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
                          5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
                          6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
                          7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
                          8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
                          9: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: IaF7YOT0+jtUwUgOYt9QCbpQYVKy8zVmsuEcle7EuLQ=)
                          10: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
                          11: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
                          12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Aug 23 01:16:07 2025 GMT
            Not After : Aug 30 01:16:07 2025 GMT
        Subject: CN=68a91657-24fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:9d:bf:89:2c:97:f7:d7:c5:1c:f5:e5:a0:
                    9a:f2:15:70:14:bc:61:27:59:6e:ea:6a:7a:ce:18:
                    4b:b9:b4:b0:94:eb:e1:91:22:a0:ec:9c:4b:ee:6f:
                    12:2e:18:3e:fe:b8:18:87:67:01:f7:53:b4:f1:fd:
                    40:8f:f9:c0:e1:e1:d0:d8:6b:21:b2:5f:e7:92:a6:
                    ac:cf:10:b7:54:42:6b:e7:ef:0c:1f:8c:f7:0d:81:
                    40:71:ca:60:8d:50:5d:9a:fb:f9:53:8c:17:2e:10:
                    fe:0a:03:05:ad:52:27:ae:82:5f:53:e1:81:7a:80:
                    23:80:73:7a:26:45:bc:65:a7:79:52:ef:96:4a:44:
                    b9:e9:ca:2c:d7:8c:f8:af:dc:05:1b:e7:2d:1c:5b:
                    dd:84:01:f8:61:d4:19:65:5e:4a:b1:2b:4a:fd:c6:
                    a1:92:c4:2a:7f:cf:9b:5a:85:f7:17:f4:f3:bd:60:
                    73:7a:34:76:13:b8:20:9c:8c:5f:4e:c9:09:e9:23:
                    2a:c0:93:fd:a2:0b:04:82:02:bb:7a:0f:e4:4e:4d:
                    a7:d3:49:e8:71:95:32:83:ba:79:d5:63:d1:85:be:
                    c5:03:cd:e1:c6:91:2f:01:80:9a:ff:dc:c7:ae:96:
                    96:50:6c:a0:ce:8d:a5:7c:90:a8:d5:be:36:59:d3:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:12:50:A2:B1:19:16:24:06:CC:39:FD:03:85:CD:E7:F7:5D:13:E1
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:00:cb:90:64:11:cd:99:ba:9f:ef:e0:1e:7a:e4:0b:bd:
         aa:45:a0:4a:e4:b5:35:de:86:2a:ac:b8:b0:8f:82:ae:30:4c:
         d2:48:56:0b:cc:de:6f:65:36:ae:52:6e:94:06:97:9f:a7:f7:
         6e:f7:da:0a:1f:7b:ff:1d:52:18:2a:ec:69:5b:f2:95:8e:25:
         33:c1:cf:7d:fe:97:3c:7b:8e:46:ea:36:f2:81:2e:2e:b0:41:
         3e:3e:a1:aa:ea:0e:53:44:01:38:da:e5:e1:6d:78:de:d7:c7:
         b1:c7:6c:95:3b:e0:c3:67:8b:52:6b:3e:64:3d:c1:7f:d5:01:
         d4:a5:17:10:96:f5:0c:bb:a1:c1:36:88:a3:26:e1:24:f0:15:
         8c:07:70:27:41:12:59:b1:21:49:ac:0a:f5:40:51:24:3a:b3:
         05:d8:53:8d:f2:8b:86:c8:ac:49:40:51:33:a0:20:25:98:fd:
         37:17:0d:4d:ff:b1:0c:b7:96:e7:27:2f:7d:41:fc:fc:ef:f1:
         c7:86:2f:33:de:15:04:1c:ad:fb:e4:7b:b7:2c:5f:90:87:5c:
         c1:38:39:46:e5:c3:14:a0:40:74:3f:08:9f:98:36:33:0f:c2:
         71:38:34:34:2b:85:42:ec:0d:4b:7e:43:11:bd:53:3b:9a:ea:
         42:19:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:38 2025 by rpki-client