Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier:          WaAr13p14jYBfxOQSh4CtSqsCZ08HQyW9CZGgJYz4KE=
Subject key identifier:   F1:34:28:6E:71:07:70:3C:7E:1C:BE:A5:32:56:A3:B6:97:FE:09:1A
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer:       /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial:       083A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number:          0830
Signing time:             Sat 04 Apr 2026 20:46:26 +0000
Manifest this update:     Sat 04 Apr 2026 20:46:26 +0000
Manifest next update:     Sat 11 Apr 2026 20:46:26 +0000
Files and hashes:         1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: ehuzCWsjHDT7r2OnnHD4ggUNRe4TyDnaF4A3JhIkLJk=)
                          2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: DIF1F4I3XEY1SyEqm6sFB7hbPE0I7U/7i32gJNFVq8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106 (0x83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Validity
            Not Before: Apr  4 20:46:26 2026 GMT
            Not After : Apr 11 20:46:26 2026 GMT
        Subject: CN=69d178a2-4532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:aa:30:ea:18:6c:fe:8d:99:b5:75:87:47:
                    1f:31:86:bd:04:25:ce:02:9b:29:61:56:7c:8e:27:
                    2f:a3:3e:8f:f0:c5:e0:60:eb:2c:33:ad:97:e6:b8:
                    1c:99:60:2e:4f:95:8e:67:79:e1:a1:0f:8c:09:98:
                    8d:de:48:ca:f7:10:b3:24:42:84:a9:c0:85:63:90:
                    1f:76:03:e1:76:22:2c:7c:2e:32:2d:aa:72:f0:45:
                    f8:96:5c:4c:eb:2e:39:7a:61:8f:7a:32:87:f6:9d:
                    2f:8a:5c:d3:31:c7:b2:57:4d:96:9f:24:c0:c7:a6:
                    87:be:cb:ff:8d:20:e0:40:07:80:21:15:d0:88:6b:
                    18:54:73:45:1b:bd:c3:d3:83:a0:22:d5:25:50:7b:
                    b1:e3:58:64:e7:c7:cd:46:10:e0:65:50:f9:dd:0f:
                    b2:d1:05:2c:2d:13:29:ac:86:b9:61:2d:93:5d:53:
                    cb:3c:0f:fc:3a:cc:b5:41:eb:40:31:c0:73:db:84:
                    19:98:e3:2c:ee:b7:4b:f2:5f:4a:db:73:de:e4:6e:
                    35:c3:40:93:dd:39:c2:6a:99:80:4d:92:31:1c:2f:
                    3f:62:c9:d6:eb:66:ec:0d:b6:32:1f:20:95:cc:94:
                    f2:9e:b3:59:4f:f2:37:6c:3f:df:4c:69:61:47:75:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:28:6E:71:07:70:3C:7E:1C:BE:A5:32:56:A3:B6:97:FE:09:1A
            X509v3 Authority Key Identifier:
                keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:ab:88:a5:b9:ec:b3:f4:3a:22:40:ea:0b:ea:7b:b8:52:
         08:bd:ff:fb:24:e4:5f:18:1a:3a:83:29:d7:9f:54:f0:d4:bd:
         ad:fd:a4:a3:c0:b5:d2:6f:61:f2:27:2d:d1:e0:ca:80:1e:8c:
         85:06:2d:9d:41:e4:fa:e0:64:a0:88:a6:40:4e:11:89:0d:7d:
         73:ba:4b:0c:17:df:59:ba:c6:ca:59:e9:8f:3f:c7:84:44:b3:
         2b:1c:0b:4c:02:a3:85:d3:88:d9:02:7d:94:8e:9e:2c:cf:f4:
         46:c0:ad:a9:24:e5:e7:1b:8e:66:2f:0b:2f:12:3e:c7:f3:32:
         43:43:3a:74:04:3c:17:fc:10:08:05:d2:b2:8f:29:27:32:c6:
         a3:77:cd:12:e4:40:50:88:c3:c7:1f:cc:f4:d7:f1:65:6f:d5:
         38:82:82:f4:4a:78:66:40:7e:b0:d7:88:76:9d:3f:05:82:a2:
         a3:cb:e6:fd:ea:29:2e:0d:87:b8:5b:5f:3b:b8:15:f1:a9:7a:
         6a:5e:7a:9d:54:f9:4a:18:3e:77:a8:47:c9:00:ea:e1:79:5c:
         b2:c7:ca:93:c3:43:d8:ad:7d:82:2f:e5:5e:89:fb:51:56:38:
         6c:26:c4:ef:4b:cd:8f:1c:e5:58:5a:0d:21:7a:39:c2:0d:d0:
         6a:d4:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:19 2026 by rpki-client