Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
File:                     23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json)
Hash identifier:          fY3MvXgt9un2PY2y/5ndoIer3cyWgO2uKTnrycqI/Gc=
Subject key identifier:   5A:A8:13:B9:D0:50:17:10:DF:4B:89:4C:F8:C9:DF:25:A5:6F:F6:11
Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
Certificate issuer:       /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
Certificate serial:       0925
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
Manifest number:          091D
Signing time:             Wed 18 Feb 2026 19:46:34 +0000
Manifest this update:     Wed 18 Feb 2026 19:46:33 +0000
Manifest next update:     Wed 25 Feb 2026 19:46:33 +0000
Files and hashes:         1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: t5pdJ+Izy7lTpJ9Z6EkGHanVimZLCWioxMs83BG+FeU=)
                          2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: f4udCcisFsQWGXJxlj4yAW3MNSfW4g1HYUDDKGCbXqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl
                          rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
        Validity
            Not Before: Feb 18 19:46:33 2026 GMT
            Not After : Feb 25 19:46:33 2026 GMT
        Subject: CN=69961719-3e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:ae:79:12:dc:ed:70:e7:a2:2c:73:05:06:
                    1d:20:f0:b3:1a:5f:bf:fa:ef:ca:17:e7:21:1a:1f:
                    57:4f:fd:00:46:03:64:94:82:3f:12:97:54:37:90:
                    c4:77:0f:96:bb:2c:14:40:ec:1d:76:d4:09:b9:6d:
                    ac:b2:40:de:70:f0:47:07:c8:99:c4:71:c5:53:63:
                    3f:54:b4:b2:ee:c2:bd:e3:78:0e:cc:a1:42:34:f6:
                    3e:54:83:87:8c:22:49:65:3a:51:6a:e1:be:a5:45:
                    8e:9e:75:d9:69:08:8a:0a:4a:b8:38:55:5d:3a:18:
                    d3:e4:e8:50:9d:9b:53:94:39:fc:d6:74:5d:3d:28:
                    df:a9:b8:e1:26:33:95:bb:57:bd:33:93:b4:a9:0a:
                    69:8e:ab:9f:48:d5:ae:9e:fa:0a:c6:57:c6:22:f9:
                    c3:20:4e:ad:60:68:53:f7:71:f5:6c:75:89:8b:ce:
                    78:14:a7:d0:34:5b:94:22:30:46:34:2a:f2:ff:47:
                    5f:ad:9f:82:84:a3:58:dd:a0:56:ca:ea:03:a1:cd:
                    b3:69:d8:2a:05:fa:26:02:4f:1d:41:13:a6:d9:ff:
                    eb:a1:1a:f1:fc:54:62:62:ba:99:df:bf:9d:3b:24:
                    af:93:67:2f:cf:d8:2b:b9:91:b0:08:19:a8:a5:47:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A8:13:B9:D0:50:17:10:DF:4B:89:4C:F8:C9:DF:25:A5:6F:F6:11
            X509v3 Authority Key Identifier:
                keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:29:93:90:f6:2b:bd:48:08:41:1f:04:33:f7:30:56:d5:
         e3:62:92:e9:55:a8:df:6e:fc:f2:74:ef:9f:c2:c6:dd:f6:6a:
         a4:4a:b2:71:4d:c9:62:ee:8b:87:fc:bb:9b:ad:3c:5e:39:76:
         e0:e5:cb:71:31:32:1c:df:66:2b:e9:84:44:38:96:f1:c1:cb:
         c7:d2:14:1c:18:c0:6d:0a:5e:a0:b5:ee:4f:0c:db:93:2b:0b:
         fb:26:e1:96:4a:c5:16:88:42:18:a1:9d:15:7e:fb:35:c2:ba:
         e0:b7:a1:83:d4:7b:b5:96:d6:70:4d:f1:57:45:db:14:ef:52:
         df:e1:37:8c:23:cd:98:fb:9b:56:3e:2a:6e:c2:38:a4:6b:ef:
         ae:58:21:1b:fd:85:c8:66:56:6d:97:09:1e:62:99:a1:b5:97:
         07:55:8d:e6:24:b4:1f:e0:2e:b6:1a:1d:5b:70:c7:de:67:8e:
         73:e2:5b:44:56:e5:47:7c:38:0b:b2:f8:d2:9d:24:61:27:65:
         d8:e1:05:f9:e3:21:1f:7b:c5:a5:00:96:7d:49:77:c3:59:b5:
         e8:72:79:99:83:93:cc:74:32:52:df:64:b9:4f:7a:ca:9a:a9:
         f6:f4:0d:30:0e:0e:0f:61:0e:7a:6e:b7:43:46:bf:7f:22:ef:
         74:64:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:35 2026 by rpki-client