Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          W65nyQPUOqgefZtT5aZSzue6LU6z6/53MQST5XATCYc=
Subject key identifier:   A5:10:02:73:CF:38:2D:D9:2E:FC:B6:2B:3E:CC:88:7B:47:ED:FD:4B
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          042B
Signing time:             Mon 27 Jul 2026 01:30:47 +0000
Manifest this update:     Mon 27 Jul 2026 01:30:46 +0000
Manifest next update:     Mon 03 Aug 2026 01:30:46 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: KS1B+eMz+7lOgC0qyc7mVfB3VawB/8CEn6T0VQFPQ5g=)
                          2: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: hhwRf9fuRu4+FpOJWpWdXOW8B8ZEeN1ipa30oGZ7M00=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: cVnHGH3p/6TPlbQ/5uDE+5/GbYLa9uZSm56KsHuo26U=)
                          4: 03833742FBE511EFA186694BC4F9AE02.roa (hash: frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=)
                          5: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: arJ9Ck6R+mdWzkCpD/VxcYmu5/AojrWq9sCiFQIbXvY=)
                          6: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 5I4sAIHbQDZXZUYymXyJLlyUY3XEwQz35dd8MJFY9TY=)
                          7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: ePdwjC2gwzcTt1IIG6Pe670kxStoehCod5pbbnrCSxY=)
                          8: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=)
                          9: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: rex1oUrK9zmszO+5oIMZH8s+Exku+LvOHx4NazadK3A=)
                          10: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: qDrxc/3JgDBQqdchYK0NvSKfms/gWVGZW5Cc1vElvI8=)
                          11: 22A96640A36111F08EA36434C4F9AE02.roa (hash: gU2LbOQKCOHNu/LDm0w779IpeeQ4JhXtKHDk4Ue2CVM=)
                          12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: 8j0BXBzfoXQiAd8LpqIbirzevkJ6nFwGYICULybZaVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jul 27 01:30:46 2026 GMT
            Not After : Aug  3 01:30:46 2026 GMT
        Subject: CN=6a66b4c6-4894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:1e:0a:52:51:a7:63:81:2f:4e:24:d2:6d:
                    ce:f1:fb:97:d4:a3:36:ca:ba:e9:54:9a:1c:ce:1b:
                    47:72:98:91:31:d2:7d:c4:35:b0:67:00:ae:d2:a1:
                    09:be:51:91:be:f6:cc:1a:82:ee:59:62:ec:ba:35:
                    c7:a2:91:e0:60:4f:08:97:52:84:e9:d0:e8:0a:3f:
                    63:0b:9a:57:39:f5:10:8f:6f:bd:f5:81:da:a6:cc:
                    ef:c5:1a:9b:06:04:e1:22:f4:61:ca:1f:29:c9:db:
                    00:28:92:8a:fe:5f:ad:76:1a:0c:a2:97:fe:f9:74:
                    50:95:2e:98:41:2a:8f:b1:ad:a3:92:7e:c9:d9:f2:
                    1e:96:83:00:7b:14:21:ba:0f:cd:bf:5a:0d:09:14:
                    fd:31:a3:84:5c:6d:7d:a5:2c:7b:e6:d0:76:99:41:
                    7d:30:05:97:ac:70:97:15:93:55:50:0e:f0:a0:87:
                    d4:5a:37:62:64:b0:49:d1:f9:44:d8:ee:d2:bd:e5:
                    41:1a:9a:25:08:86:89:b1:c6:9a:fa:67:01:6b:01:
                    d9:c2:60:10:f5:21:ed:36:91:76:6f:f6:38:d4:ed:
                    89:75:a6:17:88:55:d1:30:a0:3e:b3:53:53:b8:56:
                    be:87:37:ad:d4:f6:68:c2:dd:20:da:02:7a:62:d0:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:10:02:73:CF:38:2D:D9:2E:FC:B6:2B:3E:CC:88:7B:47:ED:FD:4B
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:57:07:d8:66:73:7a:89:be:7b:75:5f:56:ba:9b:59:29:
         c2:b7:d1:ac:1d:7d:c8:e5:d6:12:58:1e:98:97:30:8c:75:c3:
         e8:cf:76:b8:82:25:c0:82:dd:72:c5:c8:59:26:d6:0f:f3:52:
         80:1c:44:4b:2b:06:0a:29:4a:c8:2b:c3:e6:12:96:62:fc:44:
         67:9f:15:80:15:83:5c:48:e4:f7:bd:1e:d9:37:24:49:46:a6:
         ba:d8:af:bf:c2:5d:bb:e2:4f:5e:61:1f:fc:b7:5c:20:bb:06:
         40:41:11:1d:11:91:df:06:4b:63:1b:a5:0d:a8:96:16:c0:bf:
         ea:b3:1f:46:a6:cc:81:19:5d:f2:e4:40:28:08:91:bd:c1:de:
         03:f1:d0:aa:95:ee:34:3e:0e:6e:a8:64:0a:56:8e:dd:63:d4:
         d7:f3:8c:6c:48:3e:9d:8f:1d:5f:e0:be:65:15:ee:3c:2d:6b:
         4d:e5:7f:64:d9:88:0e:71:d0:e0:2b:03:c1:61:6b:01:62:09:
         25:29:5b:e9:d7:19:e8:34:67:2c:3d:8b:d0:44:40:9c:30:0d:
         c7:04:da:59:6d:b2:bb:aa:85:28:12:52:d5:25:b8:d6:e8:ad:
         66:65:27:78:a2:1e:4f:1a:72:63:24:19:e8:07:93:70:57:9c:
         8b:5a:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:24 2026 by rpki-client