Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          5EDSsqzuVZFgVfHTqFKMWBUi4E2CjzN6Vn7xYy+sJ9c=
Subject key identifier:   6A:3D:2F:C8:B6:6E:BA:52:CC:7A:18:EF:13:B2:74:CB:04:AF:8F:62
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       043F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          03E8
Signing time:             Wed 25 Mar 2026 00:18:55 +0000
Manifest this update:     Wed 25 Mar 2026 00:18:55 +0000
Manifest next update:     Wed 01 Apr 2026 00:18:55 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: JxJtPr3fuYhszhTJZGDLs2GnJbHWiM6wN4ZTFbE9RMw=)
                          2: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=)
                          3: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=)
                          4: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=)
                          5: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=)
                          6: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=)
                          7: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=)
                          8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=)
                          9: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=)
                          10: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=)
                          11: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=)
                          12: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Mar 25 00:18:55 2026 GMT
            Not After : Apr  1 00:18:55 2026 GMT
        Subject: CN=69c329ef-bb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:50:07:26:3a:6b:dd:bb:12:d9:af:2d:9f:
                    61:10:b7:f2:01:ea:c5:4c:0d:1e:42:02:49:37:d6:
                    29:a0:6e:6c:cf:c8:1b:f7:4d:df:41:49:28:8a:a6:
                    61:c4:03:ba:d0:c0:a8:a6:17:c6:ac:30:5e:61:3a:
                    a7:4d:ec:3a:8a:0c:6f:1a:f6:c8:51:3a:60:da:7c:
                    15:91:41:7b:b6:37:f0:61:43:de:74:b3:c2:92:e4:
                    5e:45:51:af:02:41:bf:4e:2e:69:67:41:9b:58:6a:
                    f6:22:1e:64:bb:31:51:1b:f8:c3:97:f5:c8:d7:1a:
                    bf:a5:e6:da:0f:e8:59:a8:c4:c4:b5:33:e9:d1:47:
                    6f:9a:84:f0:09:bd:cd:4d:58:9f:57:46:a2:50:5b:
                    26:e8:3c:fa:a7:a1:9e:77:e9:f7:2f:9c:29:25:dd:
                    c5:d3:84:17:12:c1:76:91:e9:ba:5b:32:a5:a6:37:
                    26:fc:6b:39:3a:ac:9b:88:76:92:4a:59:da:8d:cb:
                    b6:4f:d5:51:48:69:e9:8e:d6:a1:5a:64:47:41:bb:
                    9e:51:88:c9:a7:57:a7:2d:9b:c2:cf:2b:59:49:e5:
                    aa:9a:a4:0e:a0:06:f3:b6:3e:1e:de:cd:41:6c:b1:
                    36:c6:af:24:19:e9:b6:d8:7d:54:c0:c9:c6:cc:72:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:2F:C8:B6:6E:BA:52:CC:7A:18:EF:13:B2:74:CB:04:AF:8F:62
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:ba:75:3f:04:0f:10:c8:f4:6c:41:9c:4e:8e:e4:67:18:
         32:16:23:9e:00:40:1b:43:0f:02:e4:f4:7c:31:0d:a6:4a:11:
         b5:cd:76:58:b9:78:37:89:68:97:90:c2:7b:c9:49:5d:0d:7e:
         f4:f0:7c:22:46:b9:86:ac:fa:86:46:49:21:d0:c6:92:80:06:
         4c:b8:f2:df:82:e6:28:1c:2c:a1:26:2d:06:45:65:25:7e:2b:
         70:94:fc:2f:f4:b3:b8:64:3a:ed:a5:45:5a:58:78:76:6c:ea:
         65:5c:c7:fb:41:f2:0a:25:d0:fd:6b:26:6b:7b:83:fc:07:29:
         36:68:18:cf:cf:b6:9f:4e:ff:40:fc:38:bd:63:ac:cc:81:d6:
         d1:d8:5b:61:e1:25:1c:20:3f:a2:d2:1f:e5:54:69:6e:2e:f1:
         84:69:8a:d2:09:61:57:5a:cc:74:7e:37:3f:ea:fd:db:96:bc:
         d6:d4:6c:48:27:f1:53:09:7f:70:28:4c:b4:ee:c5:a3:6e:6b:
         28:54:c2:a5:13:7b:00:87:33:50:3c:a0:12:80:b6:33:76:f0:
         eb:e9:c2:5e:9c:9d:39:56:ba:24:e2:87:cc:88:f1:ef:c4:d8:
         96:67:b3:e3:6d:90:1a:e7:a9:54:85:57:1b:89:2f:4e:91:7e:
         0f:56:91:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjYwMzI1MDAxODU1WhcNMjYwNDAxMDAxODU1WjAYMRYwFAYD
VQQDEw02OWMzMjllZi1iYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2FNQByY6a927EtmvLZ9hELfyAerFTA0eQgJJN9YpoG5sz8gb903fQUkoiqZh
xAO60MCophfGrDBeYTqnTew6igxvGvbIUTpg2nwVkUF7tjfwYUPedLPCkuReRVGv
AkG/Ti5pZ0GbWGr2Ih5kuzFRG/jDl/XI1xq/pebaD+hZqMTEtTPp0UdvmoTwCb3N
TVifV0aiUFsm6Dz6p6Ged+n3L5wpJd3F04QXEsF2kem6WzKlpjcm/Gs5OqybiHaS
Slnajcu2T9VRSGnpjtahWmRHQbueUYjJp1enLZvCzytZSeWqmqQOoAbztj4e3s1B
bLE2xq8kGem22H1UwMnGzHLPJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGo9L8i2
brpSzHoY7xOydMsEr49iMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVzm6dT8EDxDI9GxBnE6O5GcYMhYjngBAG0MPAuT0fDENpkoRtc12WLl4N4lo
l5DCe8lJXQ1+9PB8Ika5hqz6hkZJIdDGkoAGTLjy34LmKBwsoSYtBkVlJX4rcJT8
L/SzuGQ67aVFWlh4dmzqZVzH+0HyCiXQ/Wsma3uD/AcpNmgYz8+2n07/QPw4vWOs
zIHW0dhbYeElHCA/otIf5VRpbi7xhGmK0glhV1rMdH43P+r925a81tRsSCfxUwl/
cChMtO7Fo25rKFTCpRN7AIczUDygEoC2M3bw6+nCXpydOVa6JOKHzIjx78TYlmez
422QGuepVIVXG4kvTpF+D1aROQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:47:53 2026 by rpki-client