Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          2eErLsk5jj4rtsg3n6lqAKySsFgjL+sZKEi5OuO+yCQ=
Subject key identifier:   31:CC:FF:CA:0C:1A:BE:8E:D6:10:7E:AD:81:64:84:45:25:C4:B6:F7
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          86
Signing time:             Thu 19 Feb 2026 05:57:03 +0000
Manifest this update:     Thu 19 Feb 2026 05:57:03 +0000
Manifest next update:     Thu 26 Feb 2026 05:57:03 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: LTMNCxwfOXVHgdIdqfCgQ4KLJU99WpcccVEWJb/76KM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Feb 19 05:57:03 2026 GMT
            Not After : Feb 26 05:57:03 2026 GMT
        Subject: CN=6996a62f-25f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:d0:b2:ed:9c:aa:d4:b3:b0:03:22:08:01:
                    e7:15:c2:3f:cd:ec:26:f0:f4:fd:a2:3f:b5:e9:6a:
                    b0:4d:34:3a:d6:56:c0:02:02:a8:13:e4:c6:6b:97:
                    85:10:2b:ba:89:41:6c:0f:58:d4:04:c1:ad:e4:3a:
                    09:24:17:de:e8:7f:43:e0:12:63:ff:24:31:a4:e3:
                    77:71:40:d9:3b:97:0b:2f:54:bb:f4:79:ab:f6:78:
                    d0:bb:6e:ca:f1:fa:53:51:f0:b8:cd:18:c1:36:96:
                    52:e6:19:c4:4c:d6:26:c2:ea:a0:9a:81:ae:42:dc:
                    cb:fb:29:7a:ba:10:fb:ee:4e:1e:3d:99:c0:8a:e7:
                    97:48:4e:b2:d9:d8:a8:bb:bd:30:a1:8f:a3:97:a0:
                    1c:87:f2:6b:7b:d5:58:4c:ae:74:85:76:a1:be:8a:
                    f2:bf:89:66:44:f3:4f:46:49:99:cd:29:8d:c0:7e:
                    f7:2a:7d:90:35:eb:c3:7e:c0:49:6c:09:4b:8c:02:
                    aa:3d:ad:5d:12:5f:ee:ee:fa:c7:d8:f9:d0:ad:a6:
                    b5:52:92:dc:09:0c:af:90:47:ef:df:c5:d5:18:b1:
                    f9:f5:33:27:61:ce:3c:df:70:28:73:dd:cf:96:0e:
                    6c:41:86:cf:ef:63:8f:2b:f4:0e:77:e6:6d:28:d7:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:FF:CA:0C:1A:BE:8E:D6:10:7E:AD:81:64:84:45:25:C4:B6:F7
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:17:1e:c9:d6:cb:6f:f1:28:91:f6:8c:25:5e:f7:b1:f1:
         ed:85:79:84:59:78:fc:52:e1:07:6f:f4:60:cc:e6:db:07:a0:
         d4:61:51:dc:d6:0a:6a:1f:0e:0d:d4:21:a5:1b:a9:89:06:78:
         22:05:e9:d6:73:98:2f:5d:3d:e9:98:6c:f8:e5:a6:37:4a:c5:
         f8:b7:48:19:da:49:85:06:c2:c5:45:5f:af:f9:70:b2:d9:19:
         f0:45:9f:8e:54:42:8c:ca:5d:38:43:83:39:98:1a:a9:a4:d5:
         36:75:db:e9:7f:bf:cd:e8:94:86:53:9c:fc:e2:4e:d9:49:e8:
         22:0f:59:0f:67:4e:65:dc:58:d5:72:0e:40:37:2f:c7:7d:fc:
         70:3f:bc:4c:62:35:5c:ba:e0:b6:f5:78:7d:fd:f2:cc:4d:c5:
         75:81:2e:74:37:bd:b6:39:70:cb:73:9b:0a:65:cc:40:54:96:
         3c:ad:cd:9d:ac:21:7e:69:b0:6c:7d:0f:e1:56:ce:76:8f:d6:
         3f:e4:64:fb:80:93:97:10:2c:53:57:b7:c9:0d:be:f5:52:dc:
         48:85:40:e0:9b:d1:6c:94:3f:27:fc:f2:8a:e5:a4:f6:32:0c:
         15:f9:f0:2d:b3:81:c5:2c:26:64:d7:ac:ef:75:3f:2a:73:5b:
         cd:e2:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:47:20 2026 by rpki-client