Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
File:                     DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json)
Hash identifier:          5f5ZLX+eDFvBPBproP0urJJOs/AWOrhT/7AN/blvgy8=
Subject key identifier:   B3:C6:83:60:66:F3:64:14:55:28:F4:5B:E3:00:2F:FA:35:02:7C:07
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Certificate issuer:       /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
Manifest number:          01A1
Signing time:             Thu 19 Feb 2026 03:14:34 +0000
Manifest this update:     Thu 19 Feb 2026 03:14:33 +0000
Manifest next update:     Thu 26 Feb 2026 03:14:33 +0000
Files and hashes:         1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: on/AxsaRD0+1vbmjKLx0cpqWjeiQkEmNJANIfKXbdHk=)
                          2: 2FEF460CD41D11F09C0AFC45C4F9AE02.roa (hash: rdQn4B0Eo4gv/K/Yqr8j8ThR1Ni5qGM9wHTsGAWKsWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
                          rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
        Validity
            Not Before: Feb 19 03:14:33 2026 GMT
            Not After : Feb 26 03:14:33 2026 GMT
        Subject: CN=6996801a-0b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:fc:29:23:34:a7:08:7e:2b:1b:2a:8b:94:
                    74:20:88:d4:d6:d0:dd:b0:d9:0a:a4:9a:1b:34:7f:
                    c6:6c:7e:91:5a:d5:77:35:b2:42:fc:42:00:e0:a8:
                    b3:44:0d:ce:fb:79:ee:d3:b7:01:4e:fe:bf:96:14:
                    cf:3a:9b:f2:e2:18:08:d4:1d:b2:d8:7b:b4:d3:23:
                    d0:47:92:86:71:1c:7d:a3:e3:91:b3:ee:8b:48:60:
                    3a:54:9b:6f:f6:3b:af:34:7c:74:d2:17:be:46:09:
                    2a:73:4c:6f:da:cd:06:34:2e:4b:5e:f1:64:25:24:
                    e7:3d:a4:9a:b7:b9:fd:2b:44:ca:a6:a8:4c:ea:e9:
                    30:dc:37:c9:84:c1:aa:92:27:49:c1:1d:50:55:a8:
                    56:6c:fc:1b:4f:bb:2c:ad:68:68:a5:9c:42:38:78:
                    aa:42:7a:f0:0a:75:d1:e8:45:22:d2:7d:c9:79:0d:
                    d3:0e:9e:da:c7:6e:eb:dc:ac:12:8a:4c:89:a1:27:
                    d1:6a:ad:97:a7:3b:21:c6:c4:b9:0f:73:ac:60:dc:
                    ec:d6:c2:d6:9f:32:54:a2:4d:12:17:de:15:5a:16:
                    11:58:d3:5e:09:d0:97:ad:2a:1d:ef:48:73:34:69:
                    95:8f:7c:6d:2e:ba:b2:01:5a:b3:05:d5:e6:f6:ca:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:83:60:66:F3:64:14:55:28:F4:5B:E3:00:2F:FA:35:02:7C:07
            X509v3 Authority Key Identifier:
                keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:32:86:ba:7f:80:4b:04:50:56:3f:e7:2b:b8:cd:d5:09:d2:
         4e:89:57:71:94:28:97:12:ab:2a:e4:63:ff:7e:2a:9a:c8:de:
         09:7f:02:3e:bb:74:58:03:ec:58:40:cd:cd:1c:33:51:90:35:
         b4:34:27:da:a4:fb:f7:13:cd:eb:1b:ba:4e:3a:07:f9:1a:c0:
         af:81:8f:89:85:76:99:9a:08:35:f9:e9:61:51:7c:50:96:59:
         1d:03:4c:a8:08:17:45:ac:98:b0:60:94:56:4a:18:7e:cd:74:
         06:18:f4:0b:35:24:2f:5b:df:dd:ba:a9:11:eb:b6:f4:67:e9:
         33:c0:c5:77:80:b4:39:f4:7d:08:d5:cf:6d:ed:09:9e:1f:83:
         c2:01:87:46:14:22:68:cb:5b:8b:f7:ed:fa:6e:91:69:a3:82:
         21:bc:d4:9f:d4:de:11:78:ca:f4:5b:12:30:a0:0e:7a:c6:db:
         6e:f6:fb:d0:73:70:50:46:43:54:1f:b1:cf:78:94:ae:f4:37:
         71:3b:b2:dc:f9:8c:78:a3:3c:40:0b:84:30:9e:24:26:fa:05:
         d4:72:7f:44:91:aa:80:65:7b:dc:71:a9:60:5e:5e:be:3a:0c:
         cb:6a:2a:29:ed:17:b6:67:b5:c4:85:d0:52:22:26:73:68:87:
         0b:bf:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:09 2026 by rpki-client