Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier:          MKVguP71WU983FsYwTQ9rL/Esx1wZnzwWl3075lgpNA=
Subject key identifier:   9E:F4:D3:C3:01:7D:0B:67:8E:AA:29:41:61:41:7D:FD:F3:15:C5:49
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer:       /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number:          088F
Signing time:             Sun 04 Oct 2026 20:48:57 +0000
Manifest this update:     Sun 04 Oct 2026 20:48:57 +0000
Manifest next update:     Sun 11 Oct 2026 20:48:57 +0000
Files and hashes:         1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: ABd4Pl79AKgBPKxn2JO9vlRsN8n57toUp6NH39j0p9U=)
                          2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Ph8c92WQDE3PL+7dagbPAkspIl3htuWlionfxP6Bph4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Validity
            Not Before: Oct  4 20:48:57 2026 GMT
            Not After : Oct 11 20:48:57 2026 GMT
        Subject: CN=6ac2bbb9-9a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:d0:9e:b1:b2:f3:6e:67:e2:73:1a:e8:7c:
                    bc:c6:62:ec:7a:a0:93:4f:4b:6b:eb:18:90:22:82:
                    1f:e7:48:37:a1:85:7f:97:8e:83:05:73:2e:21:2a:
                    1c:f3:5f:2c:d0:98:a1:48:00:d5:55:59:45:7a:d7:
                    a7:4f:09:62:60:ea:c0:16:44:fe:fd:12:29:aa:1d:
                    eb:a4:cd:6c:45:a0:17:8b:f3:84:b5:12:fd:17:45:
                    49:50:e0:6e:3e:f7:7a:ab:65:b9:55:f7:32:31:5c:
                    18:0b:89:78:13:5f:85:02:40:d3:3b:42:bf:89:04:
                    b8:39:bf:16:2e:ce:00:81:7b:79:db:2d:32:2d:1d:
                    84:c7:1d:a6:2e:d3:07:9d:e6:af:ff:d1:ff:02:7f:
                    e8:81:22:eb:eb:c3:08:d9:91:0f:98:16:df:b4:54:
                    cc:64:1a:40:b3:9b:4e:e2:f4:8f:3f:8b:45:8a:a7:
                    10:2e:86:91:6d:d6:30:26:19:66:b1:b1:c3:42:1f:
                    fb:2c:9c:05:6e:bf:99:89:81:50:66:e1:d9:0c:d4:
                    ff:33:08:61:7d:32:a6:6d:4d:9d:92:b0:8c:24:08:
                    06:fe:bd:09:83:bd:cd:d2:a2:6d:86:be:0f:95:c0:
                    5f:6c:7c:a7:64:ba:31:14:81:60:da:6f:d8:d7:e2:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:D3:C3:01:7D:0B:67:8E:AA:29:41:61:41:7D:FD:F3:15:C5:49
            X509v3 Authority Key Identifier:
                keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:75:16:7a:7d:4e:07:a9:1a:fc:b5:98:80:e8:df:4b:a3:e8:
         a9:7d:60:3a:3f:39:b9:9a:bc:55:f2:02:aa:6e:d9:23:23:ef:
         ab:eb:9a:a6:c0:52:06:44:49:4d:7b:db:2c:c8:da:9c:30:1a:
         9b:fd:40:48:58:63:ef:dd:6f:de:20:7b:ed:47:d2:82:c9:7d:
         f4:b8:4b:2b:9f:da:6d:bf:f3:f0:a2:3e:2c:cc:54:40:b2:e5:
         b6:90:11:41:fa:32:ee:d5:69:08:0f:74:f6:a0:7f:c5:8e:62:
         d2:02:4f:40:01:a6:a0:37:f0:68:69:02:90:ee:41:10:34:10:
         01:e0:40:09:ec:0f:cd:ac:86:79:41:22:3a:bd:2f:d5:25:51:
         48:ef:db:e8:a3:d9:cd:f3:3d:d5:bc:d3:b4:e6:42:5d:58:37:
         b7:5f:9f:0e:22:22:91:72:7f:98:09:ec:eb:24:22:13:a0:92:
         ba:93:2c:e1:c4:37:16:01:bc:2e:a5:eb:c7:31:09:c4:0a:fa:
         b3:00:9b:ac:dc:f3:fa:98:75:82:ce:c5:a9:26:26:e4:b4:39:
         0c:d9:c4:24:c8:f7:50:37:46:c6:d2:cc:ba:d1:6a:ca:08:6e:
         3e:99:e5:75:f6:cf:bd:d5:3e:6b:34:ea:d3:2d:89:3a:10:5b:
         34:60:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:07:23 2026 by rpki-client