Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier:          faacwuk4etCS8Ygy4qQHHimtHcvZixmC0jwsZKD1dj0=
Subject key identifier:   9C:64:E3:3D:C4:AC:91:BC:79:EE:80:1F:52:C3:81:3D:5F:75:6B:DD
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number:          070D
Signing time:             Wed 22 Oct 2025 22:48:11 +0000
Manifest this update:     Wed 22 Oct 2025 22:48:11 +0000
Manifest next update:     Wed 29 Oct 2025 22:48:11 +0000
Files and hashes:         1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: lmfebyWS5Zz1779NkbEGJ6EuxM8LowXwoMyL/wschXg=)
                          2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: jYfZr7/iFVYF5J1j6a8BqeR3kIi6XvCYwk4AnIjqfgg=)
                          3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: i0LX5QdlbizZ0/uveNFuURibPjijIfLWLYK4vXt9/Xo=)
                          4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: g2lfXdwkotQXY9cMG0/cbM9bl8KUkelXULfBurO9D/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 22:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Oct 22 22:48:11 2025 GMT
            Not After : Oct 29 22:48:11 2025 GMT
        Subject: CN=68f95f2b-2553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:6c:11:81:64:bc:25:02:d7:cf:f7:d9:13:
                    b4:3c:c6:d8:ca:17:00:2d:85:68:ba:3c:82:f2:21:
                    b7:cf:7d:d0:d2:1b:25:46:f5:78:4a:4e:c5:78:ba:
                    56:4f:06:a5:3c:ce:78:9a:13:0d:3b:9f:93:95:13:
                    2e:20:9e:ad:db:8b:77:78:f2:0b:d8:98:5d:6c:cc:
                    6a:86:a8:01:30:8f:5b:75:6c:41:8e:ec:43:53:96:
                    59:6f:dc:2b:87:90:4a:5b:b9:9c:8e:84:1c:ec:6e:
                    24:b2:2a:cf:d8:40:f9:51:c7:b8:c0:12:38:e1:7f:
                    7c:00:ba:b8:6b:97:a9:23:3c:64:4e:a6:c5:f2:2a:
                    16:47:40:88:49:c4:f5:be:47:48:27:b5:76:cb:8a:
                    55:08:aa:4c:05:db:b7:f4:ed:17:9e:47:b3:2c:7d:
                    33:d1:5b:f1:8b:05:96:3b:84:b0:7e:b5:0d:91:84:
                    d7:26:a9:64:78:ab:f5:31:ee:8e:00:54:07:e2:25:
                    b8:aa:37:1c:d6:2b:b3:16:a3:69:95:6e:f2:3a:5f:
                    71:cd:0b:d5:0e:51:8d:5a:40:b0:9f:86:3c:f5:a9:
                    87:ce:35:45:ef:bc:af:22:c0:a9:44:2a:53:97:13:
                    d8:9f:7a:cd:91:36:8b:de:81:e1:c5:84:7b:0c:a0:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:E3:3D:C4:AC:91:BC:79:EE:80:1F:52:C3:81:3D:5F:75:6B:DD
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:15:3d:a3:06:2d:68:34:91:cb:94:09:ae:09:65:e4:cb:
         f7:b0:90:c4:d7:18:05:3c:89:78:2d:97:e0:4d:f8:72:05:65:
         9b:a6:c8:b5:0d:25:6d:cb:88:5b:ad:60:e7:b9:cf:2a:be:e4:
         c7:fb:2b:11:a8:a9:63:0f:f1:06:8f:3a:a0:4f:d4:6f:cd:ec:
         ea:b4:9e:f6:cf:a9:e3:0d:26:03:ba:43:b8:93:2a:b8:91:4d:
         39:4e:b9:f5:fc:25:51:61:95:1b:f1:1d:71:a6:70:f5:58:14:
         ae:8c:ae:e4:0a:26:75:1e:6b:b2:81:8d:a3:e8:45:73:fc:f8:
         ef:82:09:c6:32:1f:aa:c3:c3:d1:7a:04:ef:e4:83:0e:47:bc:
         b3:58:2d:6f:72:23:0d:2e:bc:7a:80:92:85:ca:e5:65:e5:42:
         df:71:12:a6:a1:57:cf:c0:9d:e0:2e:48:27:b8:2a:af:b6:b1:
         3f:84:ba:0c:8a:5a:5f:88:83:d0:d6:48:37:f2:da:21:0e:53:
         b6:e3:c7:a0:5b:50:e1:80:e3:92:c9:26:08:43:00:e2:9d:26:
         bd:59:77:7e:4a:b8:d9:f8:30:bc:99:2f:26:6d:89:f9:b9:ec:
         78:2e:3b:3a:6f:21:5d:a6:1c:31:9e:b9:8e:a4:f4:f2:c0:df:
         0a:d2:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:47:35 2025 by rpki-client