Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          rtoA86LD/m2cNoFWzOM5jo7RBnhdPIjNA3OF5yKVeDE=
Subject key identifier:   23:84:69:60:B5:5D:11:E3:1B:7B:87:07:B7:39:E5:B1:28:18:01:D5
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          4D
Signing time:             Thu 19 Feb 2026 06:32:28 +0000
Manifest this update:     Thu 19 Feb 2026 06:32:28 +0000
Manifest next update:     Thu 26 Feb 2026 06:32:28 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: oxnUk58Ryk6Iaxqd1ULt03s8xf581W1T9ulXFGXs5xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: Feb 19 06:32:28 2026 GMT
            Not After : Feb 26 06:32:28 2026 GMT
        Subject: CN=6996ae7c-0291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:fb:2d:65:b0:c7:44:56:cf:ac:f4:d6:a6:
                    d9:8e:8a:cb:ac:03:3c:33:a6:c9:3e:b5:51:ca:41:
                    d9:db:89:53:02:7f:51:44:b7:2d:a4:f2:9b:ed:a8:
                    9d:59:66:d3:8a:80:eb:de:59:38:53:6a:2a:85:8a:
                    4a:37:2f:44:d3:54:3a:96:dd:f8:6a:05:cd:a1:6b:
                    d1:c1:e8:9e:ba:6d:cf:e6:aa:99:f0:cb:20:14:a0:
                    b9:26:c1:4e:49:8d:f8:d0:dd:5e:88:1e:24:e6:3a:
                    fa:42:60:33:54:30:54:2d:e1:be:5e:c7:73:22:1a:
                    99:92:55:b5:8c:9b:4f:f8:d1:d5:d3:9f:b2:d8:d2:
                    da:93:dc:87:28:20:bc:83:a4:5d:e9:c1:b7:d9:e6:
                    39:65:c9:a5:c7:12:1d:7b:df:1b:27:f5:1c:be:88:
                    11:b0:55:38:71:00:30:44:ba:83:fb:2b:2c:33:05:
                    38:35:5f:ed:4d:fb:75:ba:bd:e1:17:b8:83:01:8d:
                    92:50:11:55:c3:44:39:41:b2:42:0e:e0:fd:72:d9:
                    39:6e:b7:b0:3f:9a:2f:72:c9:00:b0:ec:2c:44:fe:
                    ca:d1:1a:11:9c:ec:ba:60:f9:bf:e4:51:5e:3a:a4:
                    43:14:5b:89:27:cd:d5:f1:97:e5:16:50:77:67:84:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:84:69:60:B5:5D:11:E3:1B:7B:87:07:B7:39:E5:B1:28:18:01:D5
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:62:b0:ef:82:e3:70:be:24:52:10:fa:9f:af:be:ba:ee:eb:
         1d:90:1e:13:60:08:dd:36:7d:ad:c2:91:d6:f5:3e:2f:79:be:
         16:3f:d7:9b:5b:98:26:37:34:cf:c4:87:a1:7c:31:69:48:c6:
         a6:28:29:ae:be:fb:6f:f1:b4:83:71:b2:d7:72:6d:1f:10:91:
         dd:16:62:85:60:11:94:0f:79:21:91:94:1e:0e:d8:26:31:40:
         b2:0a:0f:cd:a3:67:1b:9c:b9:c5:be:e0:63:b4:ce:13:49:fc:
         d0:e3:3c:db:f6:2c:4c:9a:7a:fb:52:4e:67:27:78:d5:8c:83:
         17:62:78:7a:db:83:42:d1:4d:43:76:10:5f:cf:a6:2d:f2:56:
         18:1a:00:71:65:b6:57:39:26:15:00:17:15:d2:b1:ef:b1:78:
         96:de:90:d9:49:14:00:0b:b0:5f:4b:b7:ca:c1:6d:6c:fb:e7:
         ac:5d:90:90:7b:b3:98:27:74:3b:a9:4c:bd:aa:7c:1f:c3:d6:
         24:95:23:15:48:23:6b:ae:bf:f4:d1:4e:79:83:0c:6d:7b:9c:
         a8:2b:0a:51:df:9e:ee:a2:49:23:ef:2f:ee:ba:ea:82:fe:b8:
         15:db:68:f5:6c:58:f8:c4:4a:96:5c:0d:62:94:68:aa:33:16:
         b2:fe:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:04 2026 by rpki-client