Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          +BpUxMW8eCboV2+t/FTKuLNKdi/UjLmihl2xFS4fm+s=
Subject key identifier:   83:8B:DD:6A:5B:D6:8E:1C:56:2F:55:48:1C:19:13:C7:52:E6:3D:12
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0411
Signing time:             Sat 13 Jun 2026 00:33:15 +0000
Manifest this update:     Sat 13 Jun 2026 00:33:15 +0000
Manifest next update:     Sat 20 Jun 2026 00:33:15 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: qfr987F40L7yj6KecbyhkRZqUnNN28WTXs4PN4sPuE4=)
                          2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: JvxktTfRdu9WToWJLEOeETXgMG1Cm8WnaURe3quez+8=)
                          3: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: vDxyMjW/LZBYQrDB6g0S373UUNJk7dWhLFZ5/zEU2Gk=)
                          4: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: 0EZw+JBZwD+IgcaafjNDCXe632nqCxa069+5ziX6Gdw=)
                          5: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: B4EyYqKcPSbH73unQTcCJGydlsadgYIozZsyHYDf07M=)
                          6: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: NGPeDsXXsBbNZ9E4YUJZvN4TbClbXL7PE8T6yCkmcKo=)
                          7: 22A96640A36111F08EA36434C4F9AE02.roa (hash: SCl/8KbBZR/MQZWxzElYUH2fN8GfYWzc9n4GwayI3fs=)
                          8: 03833742FBE511EFA186694BC4F9AE02.roa (hash: JGgqu5lPdz/7NuTHKR4j/wN2+x7bhLAX1nQWOrTFTUc=)
                          9: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: k6JHkVlvin7iBU4NFQ8bmVxtT9fiwnpTbNFvO1Sf97Y=)
                          10: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: 7RX3GDDRu1RCvZzXk0hQSvoQHhhiupdAIdpQbSyr83M=)
                          11: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: 94mZAJAcYSWeU16m318KAPZ0s3ihtdKV3FMcjPyxdYE=)
                          12: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: 0VCP7QiNOyc7Vyf5nsRu3ZeGnR1v8skLDj+mPrw0D6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jun 13 00:33:15 2026 GMT
            Not After : Jun 20 00:33:15 2026 GMT
        Subject: CN=6a2ca54b-4060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:40:dd:fe:eb:3b:02:c2:4c:e0:ac:91:1e:
                    73:74:fb:08:b7:ec:1c:1e:bb:d2:ba:f1:2a:d5:23:
                    ad:ee:29:d6:81:94:a0:ec:1b:fa:7b:cf:e3:bb:e0:
                    53:89:ff:a7:7b:7b:48:62:de:0d:0e:9e:a0:7b:03:
                    85:f7:06:a9:dc:75:0c:b3:cb:3b:45:14:b5:75:9a:
                    93:a3:d1:c7:dc:9a:8a:f2:c4:39:5c:dc:57:f3:36:
                    3f:b2:35:0f:c1:85:5e:c3:24:cc:2f:93:9a:cb:e7:
                    36:e6:01:fa:1d:f2:18:99:a2:4b:27:65:ed:ef:31:
                    9b:a2:8a:20:46:50:8c:38:a4:a0:6f:24:4d:e6:84:
                    ff:c5:89:0d:e6:77:64:b4:1b:d4:88:1c:8b:09:b7:
                    4d:43:39:f2:b0:e5:05:17:1e:10:44:0e:5b:63:ad:
                    e4:83:c4:ed:6f:ca:79:13:04:34:6e:21:79:00:64:
                    d0:33:7f:db:4a:0a:89:e7:20:8d:ea:dd:5b:9a:45:
                    ee:12:f2:96:c5:36:e6:80:09:ad:0d:89:64:42:8a:
                    dc:cb:7a:5a:0c:9e:d0:84:a6:b3:96:d3:f8:0d:62:
                    75:95:58:45:49:90:4c:50:0d:76:2b:34:a0:28:65:
                    b3:e1:5f:e3:d6:68:8e:96:b9:c3:eb:7c:49:e6:a8:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:DD:6A:5B:D6:8E:1C:56:2F:55:48:1C:19:13:C7:52:E6:3D:12
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:ca:4f:f0:d0:8e:66:ca:ca:2e:b4:20:fd:f0:da:0b:49:
         3b:39:db:0e:63:f9:27:b1:4a:4b:22:2e:2b:68:5f:42:80:61:
         e8:d3:9c:4c:38:2d:e0:a2:19:85:d0:b8:c4:72:f5:1d:85:15:
         d2:81:82:36:58:30:2c:4f:44:c3:d3:ff:3e:d3:44:09:df:09:
         ec:35:08:42:fd:94:6f:3b:9b:c2:b9:0c:62:da:df:5f:41:94:
         fa:55:a3:a2:14:9f:9d:81:06:c4:d4:78:a5:6d:9a:a1:9d:db:
         3a:25:e7:f0:d6:19:02:85:fb:97:5b:7a:29:b0:5d:97:81:52:
         21:e0:b2:9b:d2:84:7b:af:6c:36:ce:2a:0f:17:6b:86:06:8d:
         91:0c:e0:2a:aa:88:40:51:85:30:ec:cd:ef:c9:6c:3e:fd:b4:
         c8:57:26:b8:f5:a6:48:3d:a9:cc:c3:55:56:9c:5f:a7:82:bf:
         bb:06:d1:19:f7:0e:82:90:5a:e0:b8:33:64:c4:27:7a:56:3f:
         03:de:77:63:27:6e:cd:b7:e4:e7:50:7c:40:d5:36:d9:ab:a6:
         98:59:18:76:fc:f1:82:d6:ac:1c:ec:ad:00:ac:51:ca:59:61:
         b1:47:d7:08:af:5a:1d:b4:ff:a5:ae:7a:2c:fa:62:a6:b2:28:
         52:e9:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:51 2026 by rpki-client