Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          Y9Crq/xVTONecwbFBkZEUfwkwmpXkNHpmEYO39dYlvs=
Subject key identifier:   80:3E:B9:B8:A5:2B:89:12:EA:A6:DC:6E:28:46:2E:5C:5E:2B:0D:90
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          0335
Signing time:             Sun 27 Apr 2025 00:50:47 +0000
Manifest this update:     Sun 27 Apr 2025 00:50:47 +0000
Manifest next update:     Sun 04 May 2025 00:50:47 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: xyTguOeeUmt6p/KKJQBSMZ467jDujFZ+yImm3QQLOVM=)
                          2: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: xjjlGEMDXy/k+jJOfvqdXPAMcm5hcIip2EtJSaLTK1w=)
                          3: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: GSRflamgYfmiMSGgOVwzrsGpbOS/t7mfSPncCgDxV6M=)
                          4: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: Q8US4IflJTLgyfQaYNGD03OwPXQGX+6f2qPX0RvRDlU=)
                          5: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: +vy+qu4h+QM3BSPcAgMYz53mtIv0Py1o6O7odz8IvFY=)
                          6: 03833742FBE511EFA186694BC4F9AE02.roa (hash: yxR5aoeZgrptD6VDd4aNF+JjuUnYRY8iYqJvTUH0fjQ=)
                          7: B59E671A5F9911EE8FA1D64AC4F9AE02.roa (hash: Qc+nYdvwH1914ikzLOp7YV49vDPfD537XTFdFqd0rqw=)
                          8: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: zFx3A/ppY2ngfMBUR3sH6hNASk1iji+2IxF22Re4J6o=)
                          9: B5296BB85F9911EE8FA1D64AC4F9AE02.roa (hash: RUJdP1hsyr0ivWvTIhtzhcsRjAGFrA8gBxvUD5C7BL4=)
                          10: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YlGML7Y+l2aCWZpP+MJw5lVj7z7kGZXUYzC2djMj+3E=)
                          11: 7206F1B05A1711EF95CB811DC4F9AE02.roa (hash: KKl0MUmlPb1Xg2DkhhthGsW4wVH291TKWR9JxQ5UJx8=)
                          12: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: 0hqNC68Q8zqYwoRg/Kx140Gbd6mN/05/DI1IZiJnQGU=)
                          13: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: IkEjb/yGRHk/uQJGwMGQ/U+tx2W+JXn7QEZviTI95MI=)
                          14: B4961A7A5F9911EE8FA1D64AC4F9AE02.roa (hash: IYNo7n7duMkkS2cUgGEYYc8/JhVxgYOXYktaY4z2PJ8=)
                          15: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: xwgSw9TLYkyiCDH0bebD3MfSotyYkMkFJNkTHafCstA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Apr 27 00:50:47 2025 GMT
            Not After : May  4 00:50:47 2025 GMT
        Subject: CN=680d7f67-4766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:94:43:3c:0f:1f:62:ec:d8:2e:ab:81:71:
                    26:0a:1f:a3:30:31:b6:0c:87:09:da:28:8a:63:a5:
                    11:f8:1e:29:8e:93:15:55:69:46:a3:d3:ae:20:dc:
                    c2:9d:5f:9c:72:a5:03:88:30:6c:ee:83:63:98:94:
                    e3:df:f8:d4:83:29:a0:98:95:75:a0:0a:a6:f3:30:
                    f9:2d:b7:db:fe:51:cd:99:ee:e3:f2:a6:1c:55:f7:
                    73:ca:c9:e9:03:f9:a7:a0:12:34:24:5b:45:3d:e5:
                    f9:f1:2f:7c:52:8b:a2:bd:79:23:da:f1:69:72:f3:
                    af:82:da:ff:c2:e9:3f:f8:db:d2:90:17:bd:52:a9:
                    d8:a4:a8:1e:c3:2c:a4:30:ee:38:ff:bf:9a:87:c0:
                    b1:62:1b:2d:01:57:1c:7a:a7:20:3f:34:f5:db:7a:
                    fd:74:b0:51:8d:91:63:77:64:8b:6d:0b:c6:d9:67:
                    1e:6b:c6:4b:d0:de:98:24:05:ba:dc:2a:0a:9d:ef:
                    ac:6c:bb:71:c8:14:8f:e1:71:38:f7:28:77:9c:a6:
                    33:b0:6f:73:90:9d:a8:08:5b:0a:44:a4:de:2f:0c:
                    3b:1d:82:74:45:da:d6:d4:2f:2d:c5:4d:e9:0c:fa:
                    2b:08:5b:36:16:20:f4:00:b4:d8:1e:b9:01:4c:ed:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:B9:B8:A5:2B:89:12:EA:A6:DC:6E:28:46:2E:5C:5E:2B:0D:90
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:bb:e2:be:13:85:39:d2:3d:51:e0:22:c5:56:c9:09:23:fc:
         c5:8a:6a:18:99:59:09:25:a8:5f:5b:9f:c1:19:f6:db:17:2f:
         1c:62:b1:b5:0f:a8:64:46:b7:4e:25:78:a2:4f:b7:5c:2f:84:
         c8:86:08:21:5e:0b:fc:20:57:44:2d:a9:b9:d4:21:77:45:5b:
         f5:06:04:f1:36:37:d8:8a:5f:7f:af:09:cb:96:b1:b6:2d:7a:
         74:3c:44:7a:e5:3d:1a:5d:3c:de:9c:b6:20:f0:4c:bc:aa:d4:
         dd:00:ac:19:6f:bb:89:76:00:37:3e:3f:88:a0:8d:5f:c6:81:
         2a:74:93:f3:16:20:c9:ec:bd:45:92:ba:6b:d3:af:dc:77:9f:
         81:66:11:25:c4:d3:dd:e2:e0:49:4c:1f:af:d5:ae:f0:cf:6a:
         92:9e:d5:2c:2e:1c:70:53:e6:15:56:f1:46:34:94:4d:69:2a:
         f9:e0:14:2c:b0:ca:45:8a:e9:12:18:2e:89:40:e8:af:f1:00:
         d5:a7:8d:43:fd:55:9b:b6:f4:02:20:79:3d:34:5a:78:9f:98:
         89:a1:eb:8b:3e:dc:e2:ca:99:81:a7:fe:af:a3:c6:91:c9:e4:
         1c:9d:52:40:42:c4:2f:de:94:b6:09:d1:e1:ae:c7:8a:a2:29:
         62:44:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:38 2025 by rpki-client on console.sobornost.net