Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
File:                     rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json)
Hash identifier:          8v4GvlNbqtPaKt1k7alpfdoBnbCbzx/rc8y3lNe40vY=
Subject key identifier:   A5:E4:4F:BA:A6:15:ED:58:2F:75:4F:98:8D:04:89:EC:1C:E1:1D:1C
Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
Certificate issuer:       /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
Manifest number:          02CE
Signing time:             Tue 27 Oct 2026 01:25:45 +0000
Manifest this update:     Tue 27 Oct 2026 01:25:45 +0000
Manifest next update:     Tue 03 Nov 2026 01:25:45 +0000
Files and hashes:         1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: 665j1wsyu9aWRQmZ6FdpdrjbmkZ4z1tSUi1tvA9+nw4=)
                          2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: Fb1xzXA0N8kLKjAHbkG0rnvKJoUR3GKUs1zEAFSrTAg=)
                          3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: N1EuDA/H1b+aKfv07j358tw2r8s6Ntwxnui6Zw/IAWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
                          rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
        Validity
            Not Before: Oct 27 01:25:45 2026 GMT
            Not After : Nov  3 01:25:45 2026 GMT
        Subject: CN=6adffd99-b13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:3b:84:a4:b4:4c:d0:4a:f6:39:72:0e:09:
                    f0:ff:1f:16:be:e7:35:04:25:28:02:4c:78:28:55:
                    76:37:95:ff:2f:7f:cb:7a:e0:22:b8:7b:76:b6:38:
                    f4:03:26:03:38:c7:cb:91:53:97:1f:f4:69:02:d9:
                    19:71:2b:44:ad:e5:a5:2e:19:c3:67:18:09:79:f4:
                    d5:0f:e1:3b:e2:4c:d9:e7:75:a0:2d:39:29:57:cc:
                    0d:dd:78:13:db:17:90:51:04:6c:1e:d2:00:c4:91:
                    b5:e4:35:40:35:00:a0:4c:72:a2:7f:e5:26:e8:c9:
                    17:4b:07:54:4b:e5:e6:04:94:9d:78:15:d2:89:26:
                    3c:f5:94:dc:6b:b1:8a:ca:e2:75:aa:a5:a9:9f:59:
                    2f:d8:42:4c:5d:42:ac:b5:d7:10:f5:e1:19:c2:db:
                    b2:74:ad:43:83:5e:9c:db:29:52:ac:e0:fd:f5:77:
                    95:cb:6a:26:40:c5:9e:18:2f:6a:8f:a4:2b:cf:9f:
                    8d:62:bd:a6:ad:80:0e:be:18:ab:c4:f0:91:ca:6e:
                    24:79:57:e6:a0:85:6c:28:e2:57:c2:98:da:91:33:
                    c9:b4:8e:b0:9b:f0:6f:a8:ef:0a:16:42:53:94:ab:
                    70:63:91:48:78:28:bc:60:91:b2:72:f0:65:32:3b:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:4F:BA:A6:15:ED:58:2F:75:4F:98:8D:04:89:EC:1C:E1:1D:1C
            X509v3 Authority Key Identifier:
                keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:5a:8d:b1:d8:6b:d7:71:c1:37:23:3e:b2:a5:b6:49:cf:
         e0:28:ec:d3:93:f7:ee:ae:bb:d1:40:26:a4:e4:93:b2:ea:b1:
         13:a4:3f:85:2e:db:85:39:f7:d9:41:23:07:a3:91:ad:78:e1:
         3c:c7:74:73:26:a1:56:5d:85:a1:21:69:8e:a9:48:59:c6:34:
         90:6c:4f:69:1a:5e:52:1d:d0:12:64:54:70:b4:86:b9:94:9a:
         b9:7d:cc:62:e2:b4:54:17:06:fc:2a:f9:49:fb:6f:2c:bf:8f:
         57:30:fc:bd:c4:5d:ac:db:6d:60:e9:c5:9f:88:7a:ca:5a:46:
         2e:a0:94:e5:92:7a:38:d6:c5:37:e7:02:f2:c5:19:fb:af:fd:
         b7:cd:c4:3f:a8:e7:72:15:b1:3e:a8:61:bf:22:9e:24:df:94:
         50:c7:60:b9:d8:ad:14:f4:c1:3d:c5:7f:7f:3c:5c:9c:a9:59:
         aa:fc:32:2b:ea:4f:ef:25:a7:62:5c:6f:b1:83:2c:3e:5e:11:
         b7:49:3e:d7:26:75:03:7b:6c:22:89:4e:04:33:50:71:38:42:
         d6:e5:e7:29:d9:67:52:2f:52:a3:ca:27:ca:0d:fb:50:46:40:
         83:af:f7:a5:dc:4d:cb:1d:12:53:99:51:52:a7:ae:96:97:0b:
         eb:d4:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:35 2026 by rpki-client