Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File:                     XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier:          WldidrlVP4SCR+qm0CNILPg+Tp271T/SFz09q1NgYRg=
Subject key identifier:   F1:81:B9:ED:F1:FD:88:B3:9B:AB:06:A5:F9:67:0F:34:DF:31:2A:F6
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer:       /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number:          0153
Signing time:             Thu 19 Feb 2026 03:33:18 +0000
Manifest this update:     Thu 19 Feb 2026 03:33:18 +0000
Manifest next update:     Thu 26 Feb 2026 03:33:18 +0000
Files and hashes:         1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: l3+Evf8C+Io3jFdFyr62tnjcIee9+EKS414mR5yjJns=)
                          2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: K+g6F2DggfqAEcFUFS+CObch7aX7JFtpiO+kkOJ8Xy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
                          rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
        Validity
            Not Before: Feb 19 03:33:18 2026 GMT
            Not After : Feb 26 03:33:18 2026 GMT
        Subject: CN=6996847e-ec9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:4b:9b:03:84:93:a4:ea:49:61:1d:b4:03:
                    00:cf:6b:00:7e:a1:d7:6c:d6:23:e3:44:f9:16:92:
                    32:a0:e4:14:3b:58:91:b2:5e:52:9c:d6:48:c7:ae:
                    b0:9d:00:34:2e:d1:04:2f:39:b5:1f:79:2f:40:72:
                    78:de:e3:b1:4e:3c:e8:0a:de:f7:0f:50:36:10:f1:
                    89:13:7a:98:c0:f8:bd:1e:a9:e6:bc:4b:ed:34:8e:
                    44:a7:2d:c8:a3:51:c1:a2:d5:d5:44:af:8c:21:c9:
                    cc:11:60:b6:5a:b3:5a:54:55:01:c5:78:ee:0d:36:
                    b7:81:8f:86:b0:02:07:1b:d7:ef:2f:64:ce:27:c4:
                    90:dd:8d:fc:80:3b:51:6c:4f:c1:34:8c:bc:2d:c4:
                    4f:46:c0:58:e3:20:6a:6e:c3:8c:c9:f3:a3:2e:ae:
                    9b:c1:79:9f:2e:34:41:f0:ef:be:6c:87:f1:5b:fb:
                    aa:58:28:5a:c5:aa:06:56:f7:6c:b8:9e:44:14:65:
                    9e:cf:1b:a6:47:dd:bc:f4:ae:1a:ea:9a:c6:1a:28:
                    13:9b:d3:38:a6:06:84:63:48:d6:7a:4c:e0:47:50:
                    cd:d5:fd:d5:c2:1c:69:ff:c1:8c:95:5b:f8:6f:19:
                    70:c8:61:92:f1:09:ee:96:e4:e3:72:eb:75:d3:a7:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:B9:ED:F1:FD:88:B3:9B:AB:06:A5:F9:67:0F:34:DF:31:2A:F6
            X509v3 Authority Key Identifier:
                keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:66:51:04:5f:c9:87:3f:b7:a1:a4:78:0b:4f:b9:03:a3:
         5f:e2:15:98:7d:f7:e2:64:d6:de:19:3b:0f:73:63:05:0f:63:
         66:73:8c:c5:07:c9:b2:2d:59:2e:40:6c:96:0f:f5:15:f5:41:
         71:c0:b6:8b:fe:f9:d4:2c:3b:b8:99:b1:7c:44:07:25:ba:8a:
         f3:93:d8:0e:20:42:a8:74:84:8d:31:52:68:d1:4f:d9:b5:fa:
         ee:8a:54:e4:b3:8f:a3:65:f0:fa:06:91:c3:7b:19:1e:4d:09:
         34:16:10:39:41:b2:32:da:13:f7:45:ef:fd:78:08:6e:2d:57:
         9b:a3:d4:98:3f:73:2d:16:b1:7a:ce:d2:f5:75:6c:d6:69:e0:
         51:5e:dc:2d:60:c5:51:f5:d6:74:4f:a4:86:42:33:4e:55:19:
         fa:da:ed:7e:73:bc:82:53:ae:c8:33:4e:5b:76:5d:96:36:0b:
         7d:cf:af:b7:05:05:c9:23:72:74:f7:a8:46:64:02:2e:8d:5b:
         b0:c7:7a:ab:f6:45:52:e2:0a:9b:2a:f0:71:86:c8:06:22:3c:
         53:3a:e8:34:ed:d2:37:6b:9f:d1:a6:db:6e:b0:3d:fe:92:34:
         6e:28:b4:6d:bf:eb:a6:74:34:91:dd:ce:52:6d:0c:ac:5b:6b:
         11:3e:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:58 2026 by rpki-client