Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File:                     Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier:          Jnkpvbg4FIAtbKcG4hj3mFGo7xqCOPl/eh33ALYC3jk=
Subject key identifier:   61:22:6E:38:0D:89:8E:52:A2:C4:B3:E0:72:7A:FD:A1:C7:61:4B:0C
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer:       /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number:          D2
Signing time:             Thu 19 Feb 2026 05:05:34 +0000
Manifest this update:     Thu 19 Feb 2026 05:05:34 +0000
Manifest next update:     Thu 26 Feb 2026 05:05:34 +0000
Files and hashes:         1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: J+jX0+FcrM81UgHD1Z9SCMlR19aUWLp214hu0QTYsYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
        Validity
            Not Before: Feb 19 05:05:34 2026 GMT
            Not After : Feb 26 05:05:34 2026 GMT
        Subject: CN=69969a1e-e49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:66:49:b4:17:46:56:0f:c1:5a:cc:20:90:
                    f7:40:79:f6:88:81:6d:ba:73:00:ab:21:63:4f:0e:
                    9e:80:71:26:2e:3e:93:57:b9:7a:b5:90:26:f1:36:
                    6a:ae:46:cd:2b:f7:13:c7:0a:30:4e:dc:cc:0c:1c:
                    e1:56:64:5e:cf:18:19:ef:67:e9:47:18:34:c1:3a:
                    db:99:f6:bd:ab:5f:44:7f:b7:9e:7c:db:c0:77:3c:
                    4a:15:a4:67:b9:86:60:44:85:46:a4:89:24:dc:07:
                    f3:cd:9d:ae:6c:a2:1e:8c:05:df:57:d1:83:df:db:
                    55:0f:c7:00:52:6b:25:4d:47:2d:a6:23:7d:99:15:
                    58:43:f9:ec:37:2d:7c:1e:9e:b1:8a:bc:e3:f8:4d:
                    b3:fb:e3:1f:cd:f0:c5:de:8c:6d:9e:bc:99:c3:86:
                    c0:03:a8:a6:e8:21:04:70:cb:cb:13:1a:3e:2b:f1:
                    cd:35:ff:71:58:04:ad:49:e8:4a:ba:ac:66:27:03:
                    28:15:f5:d2:17:54:0b:ef:5c:40:9f:2f:7e:e1:4e:
                    1f:dc:d2:18:24:10:22:31:74:a8:dc:66:29:38:68:
                    57:ae:4c:64:2d:bd:12:d5:cb:56:6f:a0:eb:29:96:
                    c1:39:88:b2:ba:d1:d4:6f:c5:b4:63:7d:19:6f:f1:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:22:6E:38:0D:89:8E:52:A2:C4:B3:E0:72:7A:FD:A1:C7:61:4B:0C
            X509v3 Authority Key Identifier:
                keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:cb:f3:92:2e:44:70:bf:fb:61:35:58:a3:16:a5:1b:93:
         40:10:12:27:f4:6a:c5:c9:11:2d:1a:22:85:54:48:56:0b:28:
         10:c9:69:00:43:4f:ed:93:5a:33:0c:27:c9:ca:01:2b:06:a2:
         92:62:9a:74:d0:6e:8f:05:1d:fb:73:85:61:23:26:72:79:bc:
         bd:a1:a1:c1:80:d4:56:3b:d5:99:c1:b7:40:17:90:56:50:40:
         24:9e:18:78:46:5d:18:1d:47:a1:e2:17:7e:e8:37:b1:fd:bc:
         93:67:aa:20:c9:a5:a6:a0:b7:e0:67:30:53:1a:d5:b0:80:21:
         d9:de:37:d2:75:05:d3:d8:1d:03:69:d4:32:27:74:89:24:81:
         ab:39:33:9c:16:53:3e:f4:26:06:47:0d:a8:0c:d1:b3:69:26:
         ce:5a:82:26:f3:b9:4a:30:2f:cd:ba:94:3d:3b:90:0c:26:21:
         01:59:5f:5d:90:95:c6:b3:5b:69:b8:4e:e5:7f:af:05:c1:05:
         6b:9b:d8:9e:9c:ac:89:dd:16:bf:bb:a5:cd:9f:52:79:98:cd:
         1a:62:0c:f6:35:bc:06:ca:61:1b:c9:1d:98:0a:81:af:10:57:
         82:c0:ef:03:ec:16:95:b3:b2:59:ad:92:57:81:aa:52:a1:b3:
         71:db:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:36 2026 by rpki-client