Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier:          oTwl8brR5dTVWEJ/qqYAUpuPBZTtAC+zyMfpIA0vjt8=
Subject key identifier:   76:80:DA:8F:AA:C7:D8:97:06:F7:CA:69:B8:56:89:B7:43:1E:58:06
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer:       /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial:       0893
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number:          0888
Signing time:             Sun 20 Sep 2026 20:41:07 +0000
Manifest this update:     Sun 20 Sep 2026 20:41:07 +0000
Manifest next update:     Sun 27 Sep 2026 20:41:07 +0000
Files and hashes:         1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: 4EcNeDK+gD99q+hX/RCzmkAA2Ukvp5aRi+30KmJfN/w=)
                          2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Ph8c92WQDE3PL+7dagbPAkspIl3htuWlionfxP6Bph4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Validity
            Not Before: Sep 20 20:41:07 2026 GMT
            Not After : Sep 27 20:41:07 2026 GMT
        Subject: CN=6ab044e3-466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:7c:e7:4f:ef:11:34:96:f4:53:85:5d:d0:
                    99:28:e5:58:1d:6d:13:29:40:4c:42:2a:09:82:84:
                    97:21:3f:30:1b:90:7c:d6:2a:21:79:d9:8a:ff:4d:
                    cb:cf:ce:77:79:c3:49:1b:c9:72:3b:a9:5d:bc:db:
                    98:55:76:30:9e:aa:24:56:98:03:50:44:fb:43:da:
                    7d:f9:c1:0a:69:ba:d5:ee:73:f9:07:c5:32:70:0b:
                    2c:e1:4c:7e:07:2f:b2:1b:14:1e:07:28:b5:23:b4:
                    97:bc:81:6c:77:63:2a:81:ba:4d:0b:d9:b1:e3:4a:
                    18:c2:51:78:fc:46:81:71:02:49:4d:cf:a1:6c:8c:
                    1a:cc:70:b3:76:c0:fb:9a:65:10:b6:9f:d8:62:f0:
                    00:57:39:d4:b2:16:f2:0a:e1:0e:c9:85:5f:17:26:
                    03:8d:de:40:20:ae:6c:dc:6d:a4:d0:e5:16:fc:df:
                    4e:30:8e:84:52:9e:68:0b:a7:61:8a:7d:8e:80:22:
                    0e:d0:e9:13:d6:3f:e7:94:33:2c:4a:02:64:da:5b:
                    f0:14:09:1c:c9:9b:3e:23:72:29:e3:32:f6:05:2d:
                    e4:03:66:97:01:bf:c6:9a:b0:df:c5:cd:12:f4:34:
                    26:14:f1:85:1e:f2:70:b4:79:25:30:39:63:ab:d1:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:80:DA:8F:AA:C7:D8:97:06:F7:CA:69:B8:56:89:B7:43:1E:58:06
            X509v3 Authority Key Identifier:
                keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:d9:b4:81:a4:11:fe:f2:d7:22:2f:fe:2e:8c:f6:6e:ea:
         66:f0:90:ae:2a:ec:9c:4b:40:0c:99:15:29:f2:65:8a:d5:e2:
         b2:3e:a9:98:39:84:ee:68:54:23:f3:cf:dc:32:8b:6f:7c:9c:
         7c:ab:1b:d5:f5:22:ff:d7:08:f4:fe:ce:94:4a:a3:8e:ee:6f:
         3e:88:62:46:8a:6b:d3:a7:2f:58:b9:34:4b:51:ae:dd:68:6c:
         87:11:a8:8d:b2:de:b9:78:b1:e9:2e:c5:38:f0:3e:54:78:0b:
         bf:35:84:dc:c4:80:4a:c5:ae:b0:f6:b7:4b:b9:7c:96:2d:e9:
         43:96:71:e9:93:ef:9e:1d:90:7e:58:36:85:51:0d:3c:dc:c8:
         55:cd:be:7e:f3:84:d0:c1:fd:49:3d:78:46:cd:84:12:30:71:
         f0:9a:d0:af:e6:5a:72:b5:21:cd:37:48:6e:ec:cb:34:b9:59:
         b6:0e:88:54:df:db:c9:0a:02:e8:59:81:46:02:00:0a:d6:7c:
         30:3c:c5:fb:cd:21:cf:35:2d:8d:bf:74:1e:be:6f:72:7f:44:
         81:34:80:53:a0:5e:7a:78:c0:90:2d:3e:8c:9c:4c:55:d9:ab:
         35:61:13:0b:bd:e3:cd:06:ce:1c:1b:fe:ba:a8:6b:70:42:f3:
         90:c7:50:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2
MTc0REU4M0EwHhcNMjYwOTIwMjA0MTA3WhcNMjYwOTI3MjA0MTA3WjAYMRYwFAYD
VQQDEw02YWIwNDRlMy00NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqR9850/vETSW9FOFXdCZKOVYHW0TKUBMQioJgoSXIT8wG5B81iohedmK/03L
z853ecNJG8lyO6ldvNuYVXYwnqokVpgDUET7Q9p9+cEKabrV7nP5B8UycAss4Ux+
By+yGxQeByi1I7SXvIFsd2MqgbpNC9mx40oYwlF4/EaBcQJJTc+hbIwazHCzdsD7
mmUQtp/YYvAAVznUshbyCuEOyYVfFyYDjd5AIK5s3G2k0OUW/N9OMI6EUp5oC6dh
in2OgCIO0OkT1j/nlDMsSgJk2lvwFAkcyZs+I3Ip4zL2BS3kA2aXAb/GmrDfxc0S
9DQmFPGFHvJwtHklMDljq9GltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaA2o+q
x9iXBvfKabhWibdDHlgGMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE
RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY
V1JPWTJDOHowUmhoZE42RG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALgrZtIGkEf7y1yIv/i6M9m7qZvCQrirsnEtADJkVKfJlitXisj6pmDmE7mhU
I/PP3DKLb3ycfKsb1fUi/9cI9P7OlEqjju5vPohiRopr06cvWLk0S1Gu3WhshxGo
jbLeuXix6S7FOPA+VHgLvzWE3MSASsWusPa3S7l8li3pQ5Zx6ZPvnh2Qflg2hVEN
PNzIVc2+fvOE0MH9ST14Rs2EEjBx8JrQr+ZacrUhzTdIbuzLNLlZtg6IVN/byQoC
6FmBRgIACtZ8MDzF+80hzzUtjb90Hr5vcn9EgTSAU6BeenjAkC0+jJxMVdmrNWET
C73jzQbOHBv+uqhrcELzkMdQ/g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:41 2026 by rpki-client