Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier:          jnpDr8Fz2x4PvJ/c7/8j3j75GmGkLcpSnh0NaYZLNY8=
Subject key identifier:   69:D0:A1:2E:63:04:21:E3:B2:AE:FB:6C:48:90:88:3A:B6:F5:D1:D0
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number:          07CC
Signing time:             Thu 22 Oct 2026 21:30:42 +0000
Manifest this update:     Thu 22 Oct 2026 21:30:42 +0000
Manifest next update:     Thu 29 Oct 2026 21:30:42 +0000
Files and hashes:         1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: d9usxXUUwFbGjhgxD1AUkHOebbIGnXm3DksV4BEtKC0=)
                          2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: K4L10gkZYPeypN1qAF0MHJa1BQxCDrrd9usPuqYvXqA=)
                          3: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: E+vMLcTiiCFU7OjzJ7EN5ljucNyiangRm06rdLtH2uc=)
                          4: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: e7aZJrZau6tcqLdnYB8jxawG/SGYu8ejVndtJLqC0Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 21:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Oct 22 21:30:42 2026 GMT
            Not After : Oct 29 21:30:42 2026 GMT
        Subject: CN=6ada8082-9b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:6f:26:db:cf:9e:c8:ef:15:29:a7:3d:d3:
                    04:a3:59:f6:11:bc:62:fd:b1:21:a8:33:59:e4:17:
                    d8:6d:4c:ff:13:f1:58:39:33:5c:f5:54:0e:e8:46:
                    18:04:20:c5:ba:dc:06:fa:82:1b:10:04:9d:63:b9:
                    47:00:ed:c2:ec:9d:54:15:9e:f8:ff:2b:67:1e:8a:
                    46:76:74:49:0b:08:ba:2c:43:b8:7b:5b:13:6e:0a:
                    34:e8:e1:d3:54:b2:a6:92:a8:cf:65:ba:52:2a:bf:
                    9a:77:1e:9e:e6:0d:d4:f9:40:30:62:3f:f7:7b:94:
                    d8:1b:06:b8:11:7b:14:45:ce:9d:92:1c:25:6d:90:
                    b0:81:c8:29:bd:0d:c9:66:59:9a:26:c7:cc:ae:61:
                    27:66:a7:d1:4b:4f:9d:cb:8c:44:51:ba:64:86:13:
                    df:ed:94:a2:4a:e7:91:3d:5e:1d:7e:57:54:ea:e7:
                    38:c0:cf:4e:36:ad:c9:db:4a:b3:c2:d3:9e:1f:04:
                    b3:96:6e:42:33:5b:65:39:07:09:1f:55:08:85:72:
                    20:24:18:52:42:4a:ac:56:e8:48:3e:44:29:65:14:
                    78:1d:de:31:3c:15:54:62:92:78:17:96:36:98:61:
                    cd:c2:6d:19:d2:1d:70:79:9e:d1:83:e8:64:ad:df:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:A1:2E:63:04:21:E3:B2:AE:FB:6C:48:90:88:3A:B6:F5:D1:D0
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:bc:46:27:ca:23:dc:18:df:4e:51:37:63:52:3f:af:54:
         c1:3c:c5:a4:de:f8:0a:b3:04:d3:d3:d6:20:86:b2:1c:b1:96:
         b7:fa:4d:9e:78:42:fe:5e:bc:06:b8:a7:a1:9c:c9:8d:fb:c0:
         48:f7:11:a2:ab:06:51:66:41:d8:41:01:05:3e:9e:0f:e1:77:
         4c:79:0a:fe:83:40:96:71:22:77:ec:80:ba:66:43:c1:22:a5:
         55:e7:0a:c9:81:64:35:80:31:78:4f:5a:92:d2:91:a0:b5:82:
         5f:2b:eb:f3:9f:80:c8:98:4c:ab:a9:e5:c8:d6:76:6e:b2:ab:
         39:ce:3f:83:7b:6e:57:62:bd:2b:77:02:f6:1d:e8:97:54:6b:
         bb:84:d3:7f:f4:b9:f9:98:41:34:1a:f5:9b:c2:c5:3a:32:18:
         95:7a:34:eb:8c:cf:a0:3b:90:29:b2:cb:8e:c5:dc:1e:8c:8a:
         51:6f:73:8d:8d:67:06:86:8b:f8:2a:0c:fc:a0:18:89:06:87:
         5f:44:eb:27:ae:a3:b8:3b:64:c4:a2:52:3a:ff:29:40:ba:34:
         e8:58:40:59:3c:91:6a:02:68:4f:84:39:43:5e:50:12:98:dd:
         f8:86:ba:43:42:65:cb:7c:23:20:6f:fc:6e:11:57:d1:12:b1:
         a0:c1:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:28:44 2026 by rpki-client