Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File:                     SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier:          AZYfEFlcG4cSz4DWci+DZO1WCTJmZpVvEUUXl1H9C1w=
Subject key identifier:   90:36:FA:39:89:FD:EF:59:CA:C2:C0:EB:0C:81:8E:67:02:F0:C8:1E
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer:       /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number:          0247
Signing time:             Wed 23 Sep 2026 02:50:46 +0000
Manifest this update:     Wed 23 Sep 2026 02:50:46 +0000
Manifest next update:     Wed 30 Sep 2026 02:50:46 +0000
Files and hashes:         1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: nOJ0jIXHsBFIBv2YRPlhRW1Hx5kEmAfxyEXtxZ3v2FQ=)
                          2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=)
                          3: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=)
                          4: A35C979AA7A111F19DFE33BF4A11F970.roa (hash: HnpdJRvMuQvDGjlrN1zUcFvsx5jXwLrzVWEJuP5dobM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
                          rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
        Validity
            Not Before: Sep 23 02:50:46 2026 GMT
            Not After : Sep 30 02:50:46 2026 GMT
        Subject: CN=6ab33e86-4e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:98:53:47:f1:4f:a8:60:f1:c1:fa:7c:4e:
                    6f:21:a2:b7:f6:09:ad:6f:8e:13:67:f8:ac:cd:ac:
                    a6:4a:88:87:6c:6f:d8:8c:c2:a9:80:62:d2:0f:8b:
                    14:35:a3:13:95:0b:f0:05:cc:ab:1d:be:96:28:d6:
                    3b:c8:b0:d7:b8:53:77:2c:21:b5:23:17:61:4c:75:
                    b2:61:3c:05:70:7a:08:4c:ae:8d:b8:b6:ee:c8:3c:
                    cc:23:ee:17:9d:1d:c8:7e:fa:ad:ea:d5:4a:14:7c:
                    0c:a7:a9:a3:4d:09:65:6e:8c:e9:1e:16:4f:39:bc:
                    37:2d:3c:8f:0d:a2:78:3d:8f:7b:e7:42:ea:4a:ba:
                    82:45:c6:69:05:24:e4:b5:b4:42:e3:76:be:48:a2:
                    ca:9a:9f:bf:8c:39:a1:37:8e:d3:35:45:dd:48:11:
                    24:b6:e9:87:a1:88:ea:63:39:a2:18:30:c9:19:7f:
                    ba:a9:c6:4a:34:37:73:b0:bd:8f:b9:3b:17:30:53:
                    f4:63:f9:e6:34:16:52:97:f5:87:69:68:fb:1d:50:
                    61:56:c1:c1:31:b1:dc:73:1a:d2:9b:e0:e6:c0:21:
                    e1:12:73:47:dc:3a:d5:8a:47:ce:ef:70:24:28:1d:
                    a8:e4:51:f5:8c:f7:23:94:80:28:d5:24:c2:c8:56:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:FA:39:89:FD:EF:59:CA:C2:C0:EB:0C:81:8E:67:02:F0:C8:1E
            X509v3 Authority Key Identifier:
                keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:86:6c:e1:21:ed:97:87:66:33:47:99:33:98:61:eb:e9:
         18:ee:b0:d8:81:a0:ba:dd:bc:8d:95:ab:03:6f:25:00:d7:66:
         b6:5e:6e:4d:fd:6e:76:7f:84:46:17:2f:f2:7c:dd:d8:87:3b:
         2a:66:84:40:5d:10:b9:10:a9:0c:37:2a:be:70:92:46:aa:e9:
         64:7e:a7:8b:a0:e4:64:64:f7:24:db:dd:01:ea:60:58:44:78:
         1a:e6:d7:17:75:c7:02:ab:3c:55:54:8e:bd:91:39:1a:04:f2:
         05:b9:1b:34:c1:67:06:ad:bb:42:20:89:80:2d:b2:4c:48:e9:
         ac:bf:3d:01:02:5b:7a:ef:39:8f:fe:17:c0:e3:f8:1b:20:93:
         2e:e0:63:d6:bb:22:2b:4c:fb:e4:5d:16:94:39:88:92:1b:94:
         3d:27:51:d7:3e:41:f4:2b:03:26:64:e2:76:65:6d:c1:39:37:
         57:fb:9f:9d:47:41:98:13:cf:5d:f1:3c:94:31:3b:b9:03:32:
         bc:53:45:3b:83:84:7f:71:11:1e:63:b5:70:0d:26:7f:80:93:
         c5:33:85:64:bf:ce:e6:3b:92:68:47:24:a0:ce:59:f7:42:d1:
         b3:d9:5b:40:ff:eb:1c:a7:05:77:1c:22:68:3f:ba:df:2a:c2:
         74:7b:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:29 2026 by rpki-client