Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File:                     MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier:          yp8uFu2ar89fTPVO8YkL6jurOLQ3v4RTOxBV+uk5Fz8=
Subject key identifier:   A2:24:B4:32:23:4E:37:E4:E7:E3:41:A6:E4:46:50:D3:6B:C6:78:22
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer:       /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial:       14D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number:          14C5
Signing time:             Wed 18 Feb 2026 16:37:48 +0000
Manifest this update:     Wed 18 Feb 2026 16:37:47 +0000
Manifest next update:     Wed 25 Feb 2026 16:37:47 +0000
Files and hashes:         1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: NszREm/spV30am2yakFnD8dE4NKniie6s3gGVAtfRw8=)
                          2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5328 (0x14d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
        Validity
            Not Before: Feb 18 16:37:47 2026 GMT
            Not After : Feb 25 16:37:47 2026 GMT
        Subject: CN=6995eadc-352c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:10:bf:32:39:c4:58:ba:c0:a6:3c:29:ab:
                    8b:88:c6:12:7a:e1:ff:26:4c:84:03:72:a5:9a:1c:
                    b3:61:ac:1f:d7:f3:7f:02:49:1a:f3:00:2a:13:56:
                    87:6e:ed:8d:b0:1d:76:3f:e1:2c:47:18:cd:d6:41:
                    47:6a:8c:93:f8:6f:a6:0a:43:bf:0d:fa:4d:76:4a:
                    4d:6a:a3:02:f3:d1:4b:eb:3d:fc:d6:10:09:08:19:
                    70:b1:7e:52:b6:66:f8:61:a5:79:79:15:8b:f2:26:
                    98:16:aa:c1:8f:e4:4f:76:78:0e:e3:7b:11:d8:82:
                    04:d5:1d:9c:4a:59:25:d3:f5:e0:ef:bf:2c:68:72:
                    9f:5d:fc:49:30:b0:8d:53:9c:5c:a5:3e:5b:26:cd:
                    be:91:34:5d:79:d3:9a:20:2e:fb:5d:87:03:6e:6f:
                    bb:66:28:c6:cc:e5:b7:2d:d5:ac:9a:4f:cc:d8:49:
                    76:f0:ba:4f:43:0f:a8:1f:7d:e3:ac:01:a6:b5:bd:
                    76:0b:6a:0a:eb:65:6f:4a:d1:c3:a6:03:ed:df:7f:
                    4a:4a:0c:49:8c:df:85:c2:9d:55:4d:4b:c0:4e:d1:
                    a0:ca:f7:b2:ea:a2:d4:b7:e8:1d:f8:71:76:2f:7f:
                    ea:f0:a1:e8:ac:f7:23:61:df:b0:d1:f5:7e:2c:73:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:B4:32:23:4E:37:E4:E7:E3:41:A6:E4:46:50:D3:6B:C6:78:22
            X509v3 Authority Key Identifier:
                keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:d6:76:24:ca:df:a4:bd:33:9d:9e:23:2d:8b:fd:b3:3b:
         21:0a:33:0d:b4:38:65:0b:cf:01:84:f8:fc:62:8d:41:65:04:
         1a:5d:fd:fd:9a:e8:1a:7d:68:e6:c2:62:7f:0a:71:24:d0:65:
         50:2e:24:cc:fc:a9:d2:86:87:fc:65:da:3d:41:c0:9c:37:02:
         c4:95:ae:b2:9f:a1:2b:12:13:1b:9a:5c:d7:46:00:e0:8c:c9:
         9f:5f:b5:fc:2a:9d:c0:71:2e:d4:7a:71:bf:e6:49:4b:34:91:
         2a:b8:f1:d6:2f:87:9a:b4:07:b4:a7:ac:76:27:14:4a:f6:b9:
         da:ed:cb:fb:fe:2b:5a:0d:ec:9f:d1:45:4e:9d:e8:65:68:bc:
         ad:ae:36:1a:dd:cb:3b:96:3b:42:72:a5:a5:76:04:48:f7:62:
         e1:78:8d:03:b6:f9:93:47:87:94:45:6f:81:5b:bf:b6:43:ae:
         e8:12:d8:e2:0f:b6:eb:94:be:6f:3d:8c:9d:94:8a:c6:21:74:
         c7:5b:fe:1d:a4:63:2d:09:20:98:e5:fb:35:4f:5b:cd:39:39:
         0b:40:9b:b9:5a:fd:33:cd:2e:8d:ab:7c:8a:97:33:0c:b3:46:
         2d:4f:3a:b4:29:db:fb:f8:46:77:90:d2:89:13:a4:e7:62:5b:
         88:73:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:00:43 2026 by rpki-client