Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          e0qczz59+FxZAPHWoZFX4/ZERzwaFgacjeRRuXn3sNM=
Subject key identifier:   93:99:3A:FB:2D:F8:8F:44:A7:B5:3C:4F:5B:F3:1A:8C:2C:88:7B:66
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       03B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          036C
Signing time:             Tue 05 Aug 2025 01:37:32 +0000
Manifest this update:     Tue 05 Aug 2025 01:37:32 +0000
Manifest next update:     Tue 12 Aug 2025 01:37:32 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: SIss9dxOt1ih+S5B2Jgn5hG5IVjHLuw6XRS53jFl/hw=)
                          2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
                          4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
                          5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
                          6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
                          7: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
                          8: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
                          9: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: IaF7YOT0+jtUwUgOYt9QCbpQYVKy8zVmsuEcle7EuLQ=)
                          10: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
                          11: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
                          12: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 01:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Aug  5 01:37:32 2025 GMT
            Not After : Aug 12 01:37:32 2025 GMT
        Subject: CN=6891605c-f0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:a2:eb:1d:dc:c0:d1:76:ff:7f:40:5d:e5:
                    f9:7b:a5:27:79:0c:9b:53:61:c7:51:bb:44:c2:05:
                    65:1f:21:56:d7:32:b4:29:fd:76:02:13:1b:29:e0:
                    0c:18:01:f2:8c:41:9f:56:fb:7f:40:a3:fd:50:1b:
                    c3:1b:7f:aa:58:f5:3f:02:31:67:1c:a4:2b:0c:5f:
                    64:0a:99:a2:90:0a:01:99:3e:da:a8:e2:0e:82:6b:
                    6b:ec:ac:70:0f:67:33:fe:a0:f8:7d:7b:4e:68:d7:
                    ad:f6:6c:3b:a8:3e:1c:c2:53:85:f1:17:0b:fc:4a:
                    4d:a8:6c:3f:08:86:7b:73:49:44:90:92:53:70:b0:
                    3e:3b:d4:f9:7d:99:38:e3:4a:3d:61:43:c9:b3:56:
                    d9:88:9f:82:55:4c:ca:6a:bb:31:f2:c1:17:7f:48:
                    f6:00:b8:8f:18:e2:ed:8b:da:5c:2d:29:45:d1:0f:
                    d4:7c:54:51:31:51:7a:91:ad:8a:45:fb:6e:67:ea:
                    ff:50:d3:8c:ba:46:2c:3b:7d:e3:dd:d1:04:08:24:
                    09:8f:98:a5:2f:86:64:b5:66:45:6d:f1:94:12:27:
                    07:38:02:15:05:b8:71:1d:84:5f:42:86:ec:61:1f:
                    85:5a:58:de:87:f5:77:df:78:f0:ad:ce:ec:4c:f6:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:3A:FB:2D:F8:8F:44:A7:B5:3C:4F:5B:F3:1A:8C:2C:88:7B:66
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:e9:f7:32:b8:6f:4f:1b:ca:df:91:71:2b:5d:54:27:84:
         74:8a:71:b8:27:7e:b2:b1:6d:07:aa:b0:69:76:cc:18:c0:b7:
         13:e1:23:5d:ef:18:5a:00:a0:e4:7a:91:8e:05:a7:90:cf:26:
         8a:bc:f6:29:1e:a9:53:ab:f4:ea:b9:15:5e:1f:7f:96:03:b9:
         0f:fd:ef:57:b6:70:d1:08:00:6c:8d:39:6f:94:17:12:e8:81:
         8d:0d:d0:19:ed:aa:06:d0:16:b6:ba:6a:3e:f3:17:0b:9d:21:
         ec:ac:3e:86:b0:52:e3:28:c7:8f:5e:05:63:14:5c:2d:ac:c3:
         51:47:7d:0c:4b:84:2c:db:88:ee:e9:10:8a:85:c5:5f:d2:a8:
         1a:72:8a:68:dd:9d:6e:bf:69:33:8b:27:a3:49:37:cb:40:c2:
         f0:76:46:e9:fd:a5:18:f0:62:d8:1d:e9:9a:61:d7:9c:8d:9f:
         8f:eb:69:c3:5c:fb:c1:cd:0e:e1:23:fa:9b:05:4a:50:92:5b:
         75:39:2a:36:c8:64:b5:26:36:51:dc:81:7c:62:8d:11:4d:02:
         e2:13:e9:b1:78:20:e6:51:96:16:6c:37:02:ce:3a:82:6c:75:
         32:ed:2c:54:74:2b:11:68:68:87:4e:59:b7:af:5f:6a:ce:70:
         15:8c:ec:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjUwODA1MDEzNzMyWhcNMjUwODEyMDEzNzMyWjAYMRYwFAYD
VQQDEw02ODkxNjA1Yy1mMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVKi6x3cwNF2/39AXeX5e6UneQybU2HHUbtEwgVlHyFW1zK0Kf12AhMbKeAM
GAHyjEGfVvt/QKP9UBvDG3+qWPU/AjFnHKQrDF9kCpmikAoBmT7aqOIOgmtr7Kxw
D2cz/qD4fXtOaNet9mw7qD4cwlOF8RcL/EpNqGw/CIZ7c0lEkJJTcLA+O9T5fZk4
40o9YUPJs1bZiJ+CVUzKarsx8sEXf0j2ALiPGOLti9pcLSlF0Q/UfFRRMVF6ka2K
RftuZ+r/UNOMukYsO33j3dEECCQJj5ilL4ZktWZFbfGUEicHOAIVBbhxHYRfQobs
YR+FWljeh/V333jwrc7sTPaviwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOZOvst
+I9Ep7U8T1vzGowsiHtmMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjJCNS82RDVGRUQ5MkNDMkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFL
dDZBV0hOWTVINmJCU3dBZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAe6en3MrhvTxvK35FxK11UJ4R0inG4J36ysW0HqrBpdswYwLcT4SNd
7xhaAKDkepGOBaeQzyaKvPYpHqlTq/TquRVeH3+WA7kP/e9XtnDRCABsjTlvlBcS
6IGNDdAZ7aoG0Ba2umo+8xcLnSHsrD6GsFLjKMePXgVjFFwtrMNRR30MS4Qs24ju
6RCKhcVf0qgacopo3Z1uv2kziyejSTfLQMLwdkbp/aUY8GLYHemaYdecjZ+P62nD
XPvBzQ7hI/qbBUpQklt1OSo2yGS1JjZR3IF8Yo0RTQLiE+mxeCDmUZYWbDcCzjqC
bHUy7SxUdCsRaGiHTlm3r19qznAVjOwC
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:48 2025 by rpki-client