Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
File:                     SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json)
Hash identifier:          519VPOg/AH5LlVFRP5fINa0tBDZfBQ+N5Qgrt/9INzI=
Subject key identifier:   C4:35:1B:77:53:58:D9:0D:20:63:C8:82:DF:2C:A6:CF:16:2A:42:87
Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89
Certificate issuer:       /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
Manifest number:          0199
Signing time:             Wed 05 Nov 2025 04:03:20 +0000
Manifest this update:     Wed 05 Nov 2025 04:03:19 +0000
Manifest next update:     Wed 12 Nov 2025 04:03:19 +0000
Files and hashes:         1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: vX7u/pPwECg4jFY28jJ2rMc77+NKvOqT19/d7afQlNo=)
                          2: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: VCw7RYuCqRgcxZgWZmzpPEk1YCa+byu4rAUKwjjwm9k=)
                          3: 83851AF0B4DB11F0AB70077CC4F9AE02.roa (hash: +9BxnlBD3UNYEFNJ83BbPOZ+8B4N+QVOpPQfjDIm2gY=)
                          4: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl
                          rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289
        Validity
            Not Before: Nov  5 04:03:19 2025 GMT
            Not After : Nov 12 04:03:19 2025 GMT
        Subject: CN=690acc87-a770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:a5:4d:ab:de:ac:d4:7b:91:7e:23:e1:e1:
                    a5:4d:51:dd:fb:3e:2c:84:66:cc:1a:bd:99:02:69:
                    1a:9c:7b:03:fa:c8:16:5d:a3:a5:b0:18:e4:17:0d:
                    06:24:ee:1c:aa:c5:b6:dc:91:bd:f2:9d:e0:28:59:
                    1d:39:0d:a7:fd:d7:58:81:20:8c:df:4e:3b:1e:68:
                    59:ff:97:cf:f0:11:dd:30:d2:2c:2a:7c:1f:97:fa:
                    ee:3a:08:24:0f:c7:a9:34:27:23:fb:16:92:9b:35:
                    95:55:6c:d5:5b:96:59:01:58:67:e7:ce:62:5e:84:
                    7c:ed:8f:29:c2:dc:d7:8c:8a:4b:e5:11:ce:aa:38:
                    9a:53:01:c0:21:b6:43:69:22:2e:28:2f:38:bc:04:
                    23:e5:a8:82:c0:c7:3e:af:0f:d2:09:0b:3d:16:b6:
                    30:72:2a:6a:2c:00:e2:58:c8:c6:15:ce:63:b9:78:
                    b5:8f:f2:72:58:74:6e:dc:fe:90:00:6c:94:c2:3a:
                    7f:ef:87:4f:0c:1d:56:61:e6:82:64:f6:1a:ee:6f:
                    10:13:21:37:95:11:97:d1:0f:b4:71:ed:ba:ce:fe:
                    3e:4b:4d:e7:a1:28:46:77:3d:13:cb:64:f7:38:69:
                    d4:64:97:4c:8a:25:33:6c:94:e9:98:3e:71:37:a1:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:1B:77:53:58:D9:0D:20:63:C8:82:DF:2C:A6:CF:16:2A:42:87
            X509v3 Authority Key Identifier:
                keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:3c:c0:60:6b:45:cc:25:7c:23:57:ef:bb:3b:3a:b7:c6:
         fe:c7:ea:c5:6a:42:81:ba:1c:73:0c:ed:9d:38:f6:c5:99:2e:
         74:18:d5:8c:43:40:d6:5c:d6:b9:55:4e:56:06:d2:93:f0:ef:
         a1:4b:2a:1e:16:6f:e9:fa:c5:64:ed:c5:73:d4:b7:fe:f5:a9:
         38:eb:8e:49:8e:dd:fa:1a:2c:6f:bb:a4:b0:2d:5b:1f:19:0b:
         d3:86:4f:72:ad:d4:0a:9a:75:94:d9:24:33:5f:7e:13:03:31:
         2e:c9:f2:4a:44:ee:34:a7:10:d3:9c:05:db:58:e7:77:07:51:
         81:17:1b:75:2c:df:ea:bd:35:71:1a:8c:46:88:5c:b6:2b:bc:
         ad:ff:bb:1b:e3:ff:0e:f7:ca:25:dd:ec:e2:80:9d:9c:d7:dd:
         cf:3c:ee:03:cd:11:c3:ab:73:b4:31:f3:1a:58:08:58:34:3b:
         79:da:a7:2d:6c:32:0f:88:3d:7a:e1:68:9a:44:6a:e9:37:06:
         0a:9a:69:47:89:d7:2a:8a:4f:2c:d0:c8:48:48:bc:af:d2:de:
         2d:71:a3:5f:1f:86:9d:c8:f4:5d:47:fd:ac:59:a8:39:89:42:
         32:0c:1c:c5:4c:b1:63:73:d1:6c:6f:36:8a:f3:3b:64:9f:4a:
         7c:4b:b9:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1
M0RFQjAyODkwHhcNMjUxMTA1MDQwMzE5WhcNMjUxMTEyMDQwMzE5WjAYMRYwFAYD
VQQDEw02OTBhY2M4Ny1hNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4delTaverNR7kX4j4eGlTVHd+z4shGbMGr2ZAmkanHsD+sgWXaOlsBjkFw0G
JO4cqsW23JG98p3gKFkdOQ2n/ddYgSCM3047HmhZ/5fP8BHdMNIsKnwfl/ruOggk
D8epNCcj+xaSmzWVVWzVW5ZZAVhn585iXoR87Y8pwtzXjIpL5RHOqjiaUwHAIbZD
aSIuKC84vAQj5aiCwMc+rw/SCQs9FrYwcipqLADiWMjGFc5juXi1j/JyWHRu3P6Q
AGyUwjp/74dPDB1WYeaCZPYa7m8QEyE3lRGX0Q+0ce26zv4+S03noShGdz0Ty2T3
OGnUZJdMiiUzbJTpmD5xN6GQsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQ1G3dT
WNkNIGPIgt8sps8WKkKHMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF
N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ
TVFoQ3lWVmtCUmRUM3JBb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnHDzAYGtFzCV8I1fvuzs6t8b+x+rFakKBuhxzDO2dOPbFmS50GNWM
Q0DWXNa5VU5WBtKT8O+hSyoeFm/p+sVk7cVz1Lf+9ak4645Jjt36Gixvu6SwLVsf
GQvThk9yrdQKmnWU2SQzX34TAzEuyfJKRO40pxDTnAXbWOd3B1GBFxt1LN/qvTVx
GoxGiFy2K7yt/7sb4/8O98ol3ezigJ2c193PPO4DzRHDq3O0MfMaWAhYNDt52qct
bDIPiD164WiaRGrpNwYKmmlHidcqik8s0MhISLyv0t4tcaNfH4adyPRdR/2sWag5
iUIyDBzFTLFjc9FsbzaK8ztkn0p8S7mn
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:37 2025 by rpki-client