Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          //KjlM81jIVJSE2i0MKCTIo5sWeIRFFcTazhbahjdLk=
Subject key identifier:   6D:EF:C7:3E:37:D4:12:80:B2:F2:7D:EC:29:9D:B1:D5:51:5B:1E:54
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          03DA
Signing time:             Sun 01 Mar 2026 01:32:22 +0000
Manifest this update:     Sun 01 Mar 2026 01:32:21 +0000
Manifest next update:     Sun 08 Mar 2026 01:32:21 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: zIhg688+H8knMeY0upn6rmsTK+v70HHm2/uqTisVGNA=)
                          2: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
                          4: 22A96640A36111F08EA36434C4F9AE02.roa (hash: tQ0ZjbC9o07urDkHmNDFjc4gFzKzs7vpf1dxh+g7k+o=)
                          5: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
                          6: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
                          7: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
                          8: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
                          9: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
                          10: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
                          11: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
                          12: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Mar  1 01:32:21 2026 GMT
            Not After : Mar  8 01:32:21 2026 GMT
        Subject: CN=69a39726-eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:f9:85:c0:2d:e1:f4:4d:31:e4:9e:23:f1:
                    c5:46:fc:fd:ae:32:f0:93:8d:9c:50:75:6b:19:fe:
                    1c:8c:16:3e:68:3e:10:1c:fb:2c:fc:b2:c5:5d:66:
                    19:d8:e7:be:a6:59:c9:81:37:b4:91:11:ee:1b:01:
                    ea:d0:79:57:29:45:67:a6:03:03:be:7f:50:28:32:
                    1a:2a:e4:97:cf:3a:3c:ae:6c:6a:a4:00:ec:52:fd:
                    02:06:3c:aa:20:ad:8d:1c:54:7d:cd:f7:51:94:d8:
                    c5:64:21:17:23:78:47:2b:14:d6:2f:34:a9:eb:9c:
                    b7:91:99:f4:b0:9b:57:d1:3a:a2:9b:60:a6:03:5a:
                    b5:bc:26:3d:6c:1c:8d:a6:e2:06:b9:f7:36:bc:c8:
                    e9:4c:c2:2d:aa:5d:92:a6:dc:d2:43:27:e7:bc:44:
                    14:33:41:6f:57:56:ac:c9:b0:d0:64:af:06:c1:15:
                    3b:63:e4:f3:d7:ea:df:29:a2:da:75:5c:0d:83:7b:
                    87:e7:61:b1:95:e4:ec:71:2c:d2:73:c6:2d:11:c6:
                    34:01:71:04:19:d5:43:63:a5:4a:82:ff:4d:6e:60:
                    26:75:2a:27:1b:b8:90:99:eb:ac:53:db:50:40:c7:
                    03:72:36:ac:89:40:19:ab:6b:db:a2:71:64:39:27:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:C7:3E:37:D4:12:80:B2:F2:7D:EC:29:9D:B1:D5:51:5B:1E:54
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:89:38:ee:b2:a9:92:01:94:b3:0b:23:60:85:5c:e7:80:
         77:1f:28:d7:0f:18:53:81:b1:88:12:99:7f:03:ca:06:10:3f:
         0c:7f:9c:28:4e:ec:bc:85:ed:7d:1f:ad:4e:17:83:e2:c3:63:
         8a:81:cd:99:0c:67:78:1b:e1:fa:4b:b3:01:e1:8a:27:5e:19:
         52:57:19:6e:9e:00:68:95:05:14:d3:31:ef:b4:e7:13:52:38:
         c9:f4:99:f4:4a:d1:94:08:13:a1:e4:0a:60:62:49:16:da:2f:
         e5:83:c9:37:31:8b:4a:d9:48:4f:53:41:a3:28:30:c0:62:11:
         5d:ec:00:ad:31:8d:d3:b5:b5:a8:84:98:06:b1:03:bb:ae:10:
         a2:10:b0:58:dc:d5:c5:eb:a7:87:bb:ce:eb:f7:cb:9b:df:8f:
         e4:13:5e:5c:cf:1f:8b:51:f6:63:6d:f3:72:5f:28:91:d3:df:
         96:15:2d:9a:1b:26:e1:2e:e0:14:34:50:1c:92:b6:5c:b3:76:
         7f:a7:ec:d8:0e:41:c0:92:9c:a7:f7:5a:9a:f3:21:94:73:ea:
         7f:5b:5c:76:f6:40:82:51:a3:94:de:3c:98:be:b7:79:23:79:
         24:e0:fb:62:43:28:cb:5a:32:4c:60:1f:f4:14:ee:c9:7e:8d:
         12:3a:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:38 2026 by rpki-client