Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File:                     41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier:          JTs9QgG9RrtTGYBVwJ9L0CkAk/7OWP7rlN3Cn3YB2vM=
Subject key identifier:   12:EC:58:B1:31:87:1C:04:1D:FE:3D:D7:FB:83:4F:B3:0C:B9:F1:B7
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer:       /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number:          0869
Signing time:             Wed 22 Jul 2026 21:22:45 +0000
Manifest this update:     Wed 22 Jul 2026 21:22:45 +0000
Manifest next update:     Wed 29 Jul 2026 21:22:45 +0000
Files and hashes:         1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: +iTuAmzL2N+y4had+IiP5GqOe9Ay6MqyxFKG0za9rHM=)
                          2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Ph8c92WQDE3PL+7dagbPAkspIl3htuWlionfxP6Bph4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
        Validity
            Not Before: Jul 22 21:22:45 2026 GMT
            Not After : Jul 29 21:22:45 2026 GMT
        Subject: CN=6a6134a5-316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:d7:56:86:2f:df:e6:6f:44:e2:b0:43:58:
                    08:21:e2:61:cb:85:17:69:9c:a2:53:32:01:0c:65:
                    19:06:3d:01:31:17:98:f8:e0:02:6a:ac:ee:ec:49:
                    51:f0:1b:81:c5:aa:e7:2c:e2:b3:b6:e3:ff:fb:cf:
                    a2:0c:99:7e:fa:5a:c5:83:46:0f:08:1e:47:59:7e:
                    57:3a:3c:e1:2b:40:61:65:71:bc:06:42:a8:ae:3e:
                    53:75:dc:a5:7f:89:a6:59:12:ef:2f:aa:92:51:a0:
                    9b:0c:c1:2f:f7:76:f2:12:b0:3d:28:0d:c6:bf:06:
                    d4:ae:da:0d:c1:54:57:04:4f:09:bf:ae:d3:a5:e1:
                    60:5e:65:c6:61:b7:73:66:60:39:c0:4e:68:a0:c1:
                    9f:e6:11:9f:f7:56:9b:16:e0:2e:db:fc:2d:3d:43:
                    7e:1c:c0:9f:e6:0b:a6:5c:09:b0:d6:37:ff:e5:f1:
                    97:c9:25:1a:ec:c9:8d:5d:78:22:45:24:ea:09:05:
                    5e:76:4f:8d:fc:62:d5:59:0d:1c:ac:3c:9f:1b:bb:
                    2e:3b:3a:e2:59:da:4f:cb:38:40:16:c4:51:53:3c:
                    f1:27:f1:9b:11:c3:bf:d6:22:33:47:e4:6d:db:f2:
                    d6:ce:5a:0e:22:c7:20:a0:5a:27:02:a6:56:f7:45:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:58:B1:31:87:1C:04:1D:FE:3D:D7:FB:83:4F:B3:0C:B9:F1:B7
            X509v3 Authority Key Identifier:
                keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ac:13:94:11:3a:bc:7a:a5:bf:12:16:8c:ba:3c:b9:50:0d:
         4f:95:bb:2f:f9:24:2e:ce:c5:5f:f6:33:d1:8a:2f:f8:f6:a2:
         46:fc:bd:30:39:d4:7c:42:19:4c:16:78:ef:88:00:77:dd:35:
         cf:9e:58:63:79:d9:e4:81:46:ee:86:ed:07:ac:24:6c:ab:db:
         49:14:0e:e8:de:a9:92:54:a9:72:b7:48:14:0f:44:63:6c:a2:
         47:1b:1d:59:85:56:34:77:8a:ff:a8:73:e3:0d:11:88:7c:45:
         b1:3c:64:98:ea:f2:b4:d4:63:b3:dd:ed:cb:a6:9e:7e:04:6b:
         ad:3a:2d:1d:88:30:a1:8d:35:2a:25:56:a9:4c:3c:d9:34:ad:
         27:68:80:71:60:20:8e:50:24:da:55:17:a0:74:06:ba:b7:71:
         2e:1e:64:a3:5a:ee:f9:46:bf:e9:b6:83:1d:0d:87:b8:5b:67:
         09:1a:7d:78:f4:48:25:25:81:e0:76:b4:0a:50:d7:35:ca:53:
         03:8f:99:37:fc:9c:0b:b5:62:7e:f5:9a:26:5b:73:4c:c2:7f:
         61:20:e7:f5:3d:77:3e:c4:98:11:88:a2:bb:e7:e3:9a:1d:83:
         38:8e:24:bd:bc:6a:4c:9a:73:f2:32:9a:bb:18:d2:bf:49:eb:
         d9:68:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:57 2026 by rpki-client