Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File:                     GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier:          WM8jCNDwxfWMlK3ltP3om06yCEiforTxvkMU7h7Y88g=
Subject key identifier:   60:2F:2F:F3:85:B6:4A:94:CC:8B:2A:AF:94:91:3B:E1:BD:94:82:4B
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer:       /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial:       1570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number:          1565
Signing time:             Wed 18 Feb 2026 16:33:18 +0000
Manifest this update:     Wed 18 Feb 2026 16:33:17 +0000
Manifest next update:     Wed 25 Feb 2026 16:33:17 +0000
Files and hashes:         1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: IPB4Bddt2q7dLcKKUYT8/VyYSgVzB2H+s81rhp9cWeQ=)
                          2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: 73TnPaYse5Jq88UH3d/+sChGvcrApkf6vCKZhwuKess=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
                          rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5488 (0x1570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
        Validity
            Not Before: Feb 18 16:33:17 2026 GMT
            Not After : Feb 25 16:33:17 2026 GMT
        Subject: CN=6995e9ce-009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:58:9c:e7:57:b2:67:12:b9:ea:33:84:4f:
                    a1:78:5a:51:0c:cc:6f:a6:8f:42:b0:f9:0e:8b:08:
                    13:7b:1d:0a:2a:f3:ef:db:57:47:11:d4:4d:82:02:
                    cf:99:31:eb:c1:a5:9e:d2:ee:07:a3:92:4a:1f:30:
                    16:c6:a9:4d:7b:3e:19:9c:4b:47:af:c2:88:c7:37:
                    9a:45:03:bc:e1:ec:f6:50:fd:ea:8a:5c:a9:1c:b2:
                    5a:74:a4:37:15:d3:97:c6:c4:30:44:da:ee:74:7d:
                    44:7b:67:34:21:f4:bc:d5:a3:20:70:9f:5a:65:fe:
                    23:70:98:40:11:24:0f:58:81:8d:d7:3a:49:65:5f:
                    58:ec:de:be:97:43:7a:97:54:bf:89:35:e3:c7:06:
                    24:9d:d4:3f:8f:fb:76:aa:ff:6b:91:1e:4f:f0:f6:
                    03:ac:63:80:99:d4:a5:ca:48:b6:f2:5f:4f:79:c4:
                    3a:b1:d6:c4:8e:55:32:ed:39:3b:c8:05:9e:dd:26:
                    6d:a7:4d:a8:9a:cd:11:c7:2b:27:72:20:0f:38:b2:
                    58:2b:2c:4f:b3:61:2c:d5:65:f2:73:c2:06:ba:73:
                    c7:8c:9e:0d:f5:11:9c:fc:9a:a2:be:86:1a:4d:fc:
                    7c:ea:68:0a:8f:64:ad:b6:2a:c2:98:d5:88:5f:ce:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:2F:F3:85:B6:4A:94:CC:8B:2A:AF:94:91:3B:E1:BD:94:82:4B
            X509v3 Authority Key Identifier:
                keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:11:35:36:d5:dd:15:c2:9b:04:f7:50:a7:fe:cf:a9:b8:12:
         af:65:c8:1e:48:a9:06:19:37:e6:ab:7b:41:58:d6:3f:8c:6b:
         d0:d1:7f:79:f0:df:a0:a9:2b:98:51:37:b4:34:bc:5a:ea:81:
         10:71:ca:d9:91:4e:40:71:b6:66:1e:1b:89:0f:ff:55:86:22:
         bf:ea:0a:5f:06:34:5b:3d:79:43:65:d3:77:87:57:bc:34:1d:
         5b:f9:d5:88:f6:c4:0e:86:1d:e7:81:fb:6d:6d:62:57:86:e3:
         68:db:6d:20:63:7c:bd:22:d0:6c:a5:56:1a:25:6f:78:7f:6e:
         f6:f9:82:4f:45:5c:1b:99:0d:1c:2f:70:9a:01:f4:55:5a:3e:
         74:eb:2b:fe:de:74:02:a0:8b:b8:ba:d5:ca:1f:a1:70:91:22:
         6c:d5:cc:40:26:a1:1e:20:cc:17:bb:c4:0d:dd:ae:31:ca:9b:
         d8:c0:99:7e:e7:a3:46:8f:42:fb:23:e3:87:dc:7b:66:dd:8e:
         59:c7:f4:8c:ca:0a:ef:ed:1a:f4:3e:63:dc:46:c4:86:b1:ad:
         7f:1a:89:9d:4d:64:64:a2:89:1c:5c:8d:89:82:9b:26:51:aa:
         25:72:60:2a:c7:51:1b:01:1c:2d:1c:85:65:2b:d6:33:4a:ec:
         ad:ac:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:13 2026 by rpki-client