Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File:                     BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier:          dF5vN2BPAi1y6dgWzAbV+It8IHnYgYeZ9DAm0OqVfu8=
Subject key identifier:   3D:75:DE:AE:95:AE:6F:18:8B:B2:6F:9C:E1:B5:EE:34:43:78:F0:7E
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer:       /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial:       0C4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number:          0C4D
Signing time:             Wed 18 Feb 2026 18:18:35 +0000
Manifest this update:     Wed 18 Feb 2026 18:18:35 +0000
Manifest next update:     Wed 25 Feb 2026 18:18:35 +0000
Files and hashes:         1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: evF8QnsF3U4CpRBZAC0ennnhsVCbilxHQQoodLB/4r8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3149 (0xc4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
        Validity
            Not Before: Feb 18 18:18:35 2026 GMT
            Not After : Feb 25 18:18:35 2026 GMT
        Subject: CN=6996027b-77d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:46:27:3c:ec:28:b5:da:cd:87:41:a2:6b:
                    85:35:8b:bd:ad:ef:2f:e6:09:00:0e:4b:47:4d:3c:
                    66:87:7b:e4:54:82:e7:d6:c7:78:02:11:4e:0e:9d:
                    50:de:21:45:73:b9:95:8a:c4:01:99:db:66:7e:63:
                    56:7f:54:54:6d:85:a3:e6:12:d2:03:68:49:09:e2:
                    ff:e4:a4:f5:1c:ae:1a:b0:b5:9d:35:14:48:f7:23:
                    62:45:08:f6:87:ae:21:ea:d6:7b:f1:ca:62:5c:a2:
                    89:f0:d2:b5:47:dc:54:a8:b8:38:91:26:0c:72:d4:
                    a5:2c:a2:ad:2f:95:17:d1:9c:a8:f3:a6:79:db:ef:
                    2c:d4:52:65:17:1e:42:68:f7:3a:c3:87:1d:4b:7b:
                    85:66:01:0c:5d:b5:d7:e1:88:80:d2:00:24:76:6c:
                    0a:12:2b:d5:41:60:29:ac:aa:23:b1:90:dd:3f:63:
                    be:e0:5b:8b:42:51:8a:69:3b:90:e0:9e:65:5f:33:
                    bf:62:5a:27:3d:9c:2d:68:39:25:4e:a5:3b:66:a4:
                    9f:04:56:e7:50:f9:4d:e5:08:e1:4c:78:da:6b:4c:
                    9d:29:92:28:46:85:71:a8:97:ba:e4:67:8a:68:0b:
                    2c:da:3b:5d:37:5a:66:1f:ff:35:13:46:be:4c:b5:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:DE:AE:95:AE:6F:18:8B:B2:6F:9C:E1:B5:EE:34:43:78:F0:7E
            X509v3 Authority Key Identifier:
                keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:26:b3:8c:b4:d3:cd:49:4f:11:1c:99:fd:48:9c:7c:45:0e:
         a4:2f:29:60:0a:d9:a6:14:1a:6f:9b:e4:c3:ef:77:f9:5c:3c:
         0d:5a:0c:43:99:69:59:00:c1:d0:7a:75:f3:43:fe:ae:b8:ec:
         c1:3f:bc:31:75:5f:ab:94:db:0d:a5:8c:f0:ab:0a:6e:c9:64:
         38:be:52:de:f8:9e:c9:a2:5d:66:16:ff:72:76:ba:8c:57:a5:
         81:21:58:09:08:bc:56:ce:72:48:19:58:35:67:b4:14:05:9c:
         f8:7f:c0:cd:e3:b4:a4:6a:79:f7:c5:c8:29:9e:d6:03:58:f1:
         32:93:b4:6e:ba:a3:4c:da:23:ea:f5:d9:7f:05:13:c7:e3:d2:
         56:ab:45:f8:d2:6c:34:03:26:ba:62:45:f1:ce:e6:0e:0f:a8:
         27:93:89:fd:d5:c9:27:b2:97:1d:e4:05:2e:70:5c:5d:d1:b1:
         6a:54:5f:d5:19:33:3c:39:86:29:df:f7:f4:00:93:4f:d1:b5:
         47:2a:f4:cb:c9:bc:02:cd:c3:3a:88:31:50:20:76:e8:df:c1:
         71:bd:c0:82:fd:51:01:2e:8a:0b:90:e5:5f:51:64:77:e2:64:
         ed:d4:63:e9:6a:d2:fc:7a:f6:7f:d6:ea:bc:5e:d5:c7:e5:bb:
         b4:f2:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:44 2026 by rpki-client