Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier:          T3AdGDNPCes79AknSf222c+9rD5XGjTUmBJM/rk5Rrc=
Subject key identifier:   0F:4A:BE:EC:A5:FF:CE:8D:E2:CB:7A:11:C8:C3:51:3D:7D:17:83:B5
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number:          0713
Signing time:             Sun 02 Nov 2025 21:51:38 +0000
Manifest this update:     Sun 02 Nov 2025 21:51:37 +0000
Manifest next update:     Sun 09 Nov 2025 21:51:37 +0000
Files and hashes:         1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: VzuYK3gsKi2Q/Fquld5hbSEr3t6yTeGYMmYPm5N5PCw=)
                          2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: jYfZr7/iFVYF5J1j6a8BqeR3kIi6XvCYwk4AnIjqfgg=)
                          3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: i0LX5QdlbizZ0/uveNFuURibPjijIfLWLYK4vXt9/Xo=)
                          4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: g2lfXdwkotQXY9cMG0/cbM9bl8KUkelXULfBurO9D/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Nov  2 21:51:37 2025 GMT
            Not After : Nov  9 21:51:37 2025 GMT
        Subject: CN=6907d26a-036c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:5a:f6:34:46:ff:92:14:21:f1:08:f6:73:
                    00:9e:37:dd:36:fd:61:67:5d:aa:3f:a4:03:5d:46:
                    9c:00:f0:29:56:07:ff:76:c6:70:eb:50:d4:62:0e:
                    b7:d0:a9:85:17:e9:ea:b7:28:87:09:2f:3e:a0:9f:
                    2a:50:f2:68:33:d4:0a:2d:92:a7:4e:c1:4a:81:00:
                    83:70:d8:a7:35:03:25:64:5d:86:b8:e3:cc:87:c4:
                    59:f7:c8:77:4c:af:06:9c:79:ea:4c:37:2c:39:bc:
                    04:09:b4:6e:33:69:1d:ef:af:9e:4a:1d:06:36:da:
                    18:ff:54:a4:37:34:07:53:3d:25:1e:ff:6e:3f:7e:
                    92:8e:c5:6b:0e:3b:de:55:90:2d:7a:42:e9:89:40:
                    26:10:6d:0b:21:25:26:af:e2:ac:2a:d2:e3:7b:16:
                    42:0d:56:9f:7e:4b:42:7a:ec:67:38:3b:22:f8:b5:
                    1a:9c:ed:b5:6b:5b:c3:c6:a4:65:c9:35:0e:38:08:
                    d8:1a:c3:77:8e:a9:5e:a6:21:ed:7e:e1:6d:f1:3c:
                    30:c3:7e:75:cf:53:e8:79:1e:b7:ae:cb:2b:b7:1c:
                    9d:99:46:78:ac:32:a9:46:76:61:93:67:d8:f0:8b:
                    84:d8:99:9f:ff:0d:43:db:be:15:ff:73:da:1d:ea:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4A:BE:EC:A5:FF:CE:8D:E2:CB:7A:11:C8:C3:51:3D:7D:17:83:B5
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:81:93:f7:10:b5:b1:b4:7e:66:0f:32:1d:00:6a:a8:0f:
         f0:c3:30:6d:27:d1:82:a4:50:2a:df:fc:be:01:95:19:f0:03:
         fd:ee:23:4d:d3:b8:2f:6f:5e:8c:9c:33:90:95:65:87:91:06:
         23:ec:57:55:d8:45:d4:a0:72:f4:43:73:53:77:41:e1:e6:10:
         0d:29:26:2b:e6:b3:0f:30:81:37:cf:b5:7a:24:22:a8:c2:8e:
         da:a0:28:d8:97:eb:26:2b:0d:ce:88:66:70:ab:a8:59:eb:f4:
         ca:50:60:d0:58:0e:de:d0:b3:a9:e6:d0:e1:07:05:0f:f7:05:
         bb:bb:70:42:c5:1b:e6:a4:22:78:c4:01:73:69:07:75:96:62:
         21:4f:e6:97:9e:37:b4:ca:31:fd:3b:82:2e:db:20:04:9f:90:
         4c:78:b3:68:97:47:b1:c0:2d:31:49:53:8a:c5:e7:97:3c:2f:
         26:73:3c:41:7a:e1:5b:02:48:01:35:1f:68:00:1d:5b:98:30:
         02:b8:47:29:36:bb:23:f6:c9:d4:9a:21:04:64:b4:86:0e:4e:
         3d:ad:32:9f:8e:19:a3:f9:e7:38:9d:d4:b6:04:74:54:ac:f4:
         b7:e9:a3:0f:b3:8a:92:27:22:69:2f:d5:bf:59:40:7f:34:e0:
         88:73:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:40:31 2025 by rpki-client