Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File:                     4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier:          +Mg60GRyGcqnK3Ercsv50WKnOi6pu+Mpt1Bft96kDn0=
Subject key identifier:   A5:4F:65:A4:BE:DF:4A:3A:1C:B3:A2:64:82:ED:B6:CE:AD:48:54:FA
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer:       /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number:          025B
Signing time:             Thu 19 Feb 2026 01:00:44 +0000
Manifest this update:     Thu 19 Feb 2026 01:00:44 +0000
Manifest next update:     Thu 26 Feb 2026 01:00:44 +0000
Files and hashes:         1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: JJYySqjM28CE6ipwzndM8TdPl/LpKkf4k2iduNBp/mo=)
                          2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: mkay78ArXCLuTCpk5LBJHpYSqvgsay5EEQLpiKDYBb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
                          rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
        Validity
            Not Before: Feb 19 01:00:44 2026 GMT
            Not After : Feb 26 01:00:44 2026 GMT
        Subject: CN=699660bc-5425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:51:c7:de:3c:1a:7d:58:8f:3a:ac:7e:d2:
                    42:f3:2e:aa:f6:da:7d:f3:7b:dd:04:b9:fe:8d:91:
                    ae:7d:7b:29:dc:cd:ec:a9:2c:af:b8:86:84:aa:38:
                    21:11:25:dc:58:3f:87:ff:bd:18:f8:e0:f9:be:2e:
                    08:bd:72:08:0b:6d:c9:87:5f:aa:57:4a:88:58:d9:
                    bf:e4:9e:25:8c:2e:a9:65:d9:52:25:51:c4:33:ae:
                    df:1e:86:69:34:2d:15:2d:c5:e0:5f:b3:0f:10:7a:
                    82:47:5d:90:ba:0b:25:55:87:99:2c:b0:be:98:e7:
                    eb:46:bd:4f:e3:2e:3e:3f:55:2b:27:17:74:40:ee:
                    85:8b:1d:92:d0:98:c8:8d:d5:b9:32:87:e9:97:d3:
                    ae:2d:92:f3:41:4f:05:3b:d6:7b:68:ee:07:a1:57:
                    6a:2a:04:57:e2:fc:d8:d0:0d:83:fc:5a:c7:5f:1c:
                    61:b3:6b:1b:85:d2:2e:f1:ff:6f:2d:ef:a5:23:2c:
                    7e:a2:5d:79:7d:d5:7e:30:b0:54:f3:1f:e4:ed:27:
                    8e:4f:76:50:d5:b9:c5:b5:7d:b2:57:98:2f:9b:50:
                    0b:32:6b:72:06:2c:87:6d:7f:59:82:c2:93:0e:82:
                    0b:91:7d:ba:88:75:10:75:2b:48:e2:2b:41:37:7b:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:65:A4:BE:DF:4A:3A:1C:B3:A2:64:82:ED:B6:CE:AD:48:54:FA
            X509v3 Authority Key Identifier:
                keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:c8:90:e9:6b:2a:ca:da:7d:a1:d6:49:25:13:18:25:c0:
         83:d8:7e:0d:e1:e5:c6:2b:14:e8:30:3f:2f:da:35:78:01:52:
         d2:3c:9d:95:5e:36:29:c5:0d:86:7d:5e:72:6f:2e:e3:16:97:
         c9:65:d3:b6:4d:bf:04:e9:6d:29:e4:f5:1a:49:de:20:68:b8:
         83:6a:81:ae:be:b6:d4:1d:44:bd:8a:f8:fa:7f:35:8c:05:f2:
         c8:20:73:20:46:8a:22:d6:76:1a:1a:45:c5:91:81:93:81:3b:
         f3:d6:08:3c:a4:88:2e:48:25:16:b8:83:e0:58:33:10:b1:ce:
         9f:9d:63:b6:39:93:e0:2f:42:da:2f:3f:90:3d:0e:b1:d9:0d:
         1b:f5:e6:54:88:f5:da:57:b9:9e:e3:04:f3:28:0b:fe:1e:ce:
         0a:99:1e:f1:10:fa:69:8f:fe:85:6c:2d:58:7f:90:af:51:72:
         61:a2:0b:d5:6e:a5:74:01:e5:b9:af:ff:61:fe:af:08:e7:e1:
         34:58:c7:70:92:cd:4d:89:36:02:73:ec:d3:a6:6c:74:43:e8:
         87:bf:46:87:66:99:7e:12:47:90:59:c1:ed:73:48:e2:a5:ce:
         dc:1f:53:5c:5b:ea:64:5a:e3:16:7a:91:78:d4:14:23:2e:dd:
         fc:47:ee:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU1Q0IxMTAvBgNVBAUTKEUxNzMzQjk3MEZEREY3NjdGRjE5NTQyODQzN0UxMjQy
QTM3NjkyNzcwHhcNMjYwMjE5MDEwMDQ0WhcNMjYwMjI2MDEwMDQ0WjAYMRYwFAYD
VQQDDA02OTk2NjBiYy01NDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRtRx948Gn1YjzqsftJC8y6q9tp983vdBLn+jZGufXsp3M3sqSyvuIaEqjgh
ESXcWD+H/70Y+OD5vi4IvXIIC23Jh1+qV0qIWNm/5J4ljC6pZdlSJVHEM67fHoZp
NC0VLcXgX7MPEHqCR12QugslVYeZLLC+mOfrRr1P4y4+P1UrJxd0QO6Fix2S0JjI
jdW5Mofpl9OuLZLzQU8FO9Z7aO4HoVdqKgRX4vzY0A2D/FrHXxxhs2sbhdIu8f9v
Le+lIyx+ol15fdV+MLBU8x/k7SeOT3ZQ1bnFtX2yV5gvm1ALMmtyBiyHbX9ZgsKT
DoILkX26iHUQdStI4itBN3vO+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVPZaS+
30o6HLOiZILtts6tSFT6MB8GA1UdIwQYMBaAFOFzO5cP3fdn/xlUKEN+EkKjdpJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVDQi81Mjg4RENFMDcw
NDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDkyZl9HVlFvUTM0U1FxTjJr
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRYTTdsd19kOTJmX0dWUW9RMzRTUXFOMmtuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTVDQi81Mjg4RENFMDcwNDkxMUVEQjZFMUZCNzhDNEY5QUUwMi80WE03bHdfZDky
Zl9HVlFvUTM0U1FxTjJrbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCL/MiQ6Wsqytp9odZJJRMYJcCD2H4N4eXGKxToMD8v2jV4AVLSPJ2V
XjYpxQ2GfV5yby7jFpfJZdO2Tb8E6W0p5PUaSd4gaLiDaoGuvrbUHUS9ivj6fzWM
BfLIIHMgRooi1nYaGkXFkYGTgTvz1gg8pIguSCUWuIPgWDMQsc6fnWO2OZPgL0La
Lz+QPQ6x2Q0b9eZUiPXaV7me4wTzKAv+Hs4KmR7xEPppj/6FbC1Yf5CvUXJhogvV
bqV0AeW5r/9h/q8I5+E0WMdwks1NiTYCc+zTpmx0Q+iHv0aHZpl+EkeQWcHtc0ji
pc7cH1NcW+pkWuMWepF41BQjLt38R+4O
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:09 2026 by rpki-client