Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          viAk9SYXFjNETtQ6Y9k6spoYZohR3pNDeU0ECjWyyM4=
Subject key identifier:   C4:A0:44:D4:11:C7:E8:3B:60:9B:78:AF:D4:F0:61:BA:84:AD:B9:29
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0400
Signing time:             Mon 11 May 2026 00:38:53 +0000
Manifest this update:     Mon 11 May 2026 00:38:53 +0000
Manifest next update:     Mon 18 May 2026 00:38:53 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: YQy1umwT3G4y4LIb0OnlGfG811tbvttUm7ESY8yPIp0=)
                          2: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=)
                          3: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=)
                          4: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=)
                          5: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=)
                          6: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=)
                          7: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=)
                          8: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=)
                          9: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=)
                          10: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=)
                          11: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=)
                          12: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 11 00:38:53 2026 GMT
            Not After : May 18 00:38:53 2026 GMT
        Subject: CN=6a01251d-e652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:0b:5e:8f:17:ed:58:ed:15:69:d2:e4:53:
                    a7:26:90:bf:7c:21:87:43:46:d8:a7:d2:ed:4b:5d:
                    4b:5a:43:c2:32:6a:e9:1e:a9:79:be:ea:f2:35:c0:
                    17:06:94:6c:47:ab:eb:f5:32:c7:f1:9e:6a:71:9c:
                    7d:90:13:92:bf:0b:ce:5c:6c:06:1c:fc:68:89:6b:
                    92:06:db:72:a5:f6:5c:ab:c1:f5:70:d6:65:2b:5e:
                    b6:d4:42:80:2f:32:75:5b:e1:c3:1c:58:17:42:bd:
                    d9:c3:12:e0:45:4a:e8:a3:2b:7b:34:dc:e0:13:99:
                    d0:ed:f5:a6:78:9f:a3:2e:cc:3c:2a:20:95:13:0e:
                    9f:6c:7a:13:d1:65:c7:81:c8:2e:0b:61:34:ad:fb:
                    da:ad:58:7a:1b:d2:bb:ef:e2:5e:6f:c9:0d:76:5b:
                    7f:02:52:d4:26:02:0f:ed:f0:2d:61:51:1a:43:2f:
                    b9:e1:05:38:b8:a0:b5:bc:96:d0:d8:3a:40:4b:39:
                    9b:7f:23:b3:95:75:fa:aa:19:c1:9f:3b:a5:51:2d:
                    e8:60:80:d3:b4:98:cc:fa:1a:e6:56:31:7f:29:cc:
                    c8:95:15:e2:9a:4f:81:78:64:ae:0a:1a:94:8a:c3:
                    68:0c:a0:de:33:2a:f5:87:b1:58:95:6d:f6:98:f4:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A0:44:D4:11:C7:E8:3B:60:9B:78:AF:D4:F0:61:BA:84:AD:B9:29
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:09:b3:a6:72:eb:9c:79:30:35:90:2e:51:80:4a:86:75:
         71:d0:ea:90:7e:23:10:9b:de:1e:ef:3f:19:f5:e7:4c:fb:b2:
         6c:03:67:eb:ac:86:ce:67:60:e8:3e:ca:81:2f:bd:f7:3c:1c:
         d9:cf:37:27:63:46:40:b1:5d:58:fa:92:54:34:80:5c:c8:78:
         ac:46:98:aa:42:76:4e:16:e5:06:a9:c0:55:c4:44:a1:bd:f9:
         a7:0f:72:95:e4:c7:52:66:ba:da:b2:85:2b:07:12:23:57:e6:
         76:ed:c7:83:64:59:12:09:08:a5:72:cc:09:73:1c:02:fc:89:
         01:70:7d:9e:10:bf:d4:e8:8d:92:5e:51:8f:92:86:06:3a:91:
         90:69:27:fd:ff:a8:fa:d1:5b:b4:66:ef:52:d3:7e:54:c4:d6:
         73:7a:b4:f2:c3:30:56:e4:9c:a8:28:7c:a1:7c:2f:cb:b1:24:
         e1:3d:3a:f4:92:11:d2:9e:ae:6b:41:d4:b8:47:00:9c:af:57:
         c0:16:39:3d:73:14:be:5f:d1:74:a3:c4:4d:24:d6:5f:37:4e:
         4f:d2:a0:71:d3:86:ab:f6:1d:31:b6:dc:da:9e:97:9c:5f:4b:
         f0:f7:5e:93:18:b3:d5:38:c0:5b:b8:e6:0b:c3:bf:56:87:7e:
         e1:7b:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:09 2026 by rpki-client