Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File:                     kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier:          9cMEc+H4y7RAAwqqv3Dj65dODYhHuahnCf/HN6WC9ZQ=
Subject key identifier:   1B:24:DE:37:93:64:F5:9D:BC:71:F2:3D:83:FC:BE:91:FF:C8:B2:A6
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer:       /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number:          D1
Signing time:             Thu 19 Feb 2026 05:05:48 +0000
Manifest this update:     Thu 19 Feb 2026 05:05:47 +0000
Manifest next update:     Thu 26 Feb 2026 05:05:47 +0000
Files and hashes:         1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: W15Kz61KazLkcyWTT0vP2MSGlF+ovH6tfFSA+lROfPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
        Validity
            Not Before: Feb 19 05:05:47 2026 GMT
            Not After : Feb 26 05:05:47 2026 GMT
        Subject: CN=69969a2b-5b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:15:e2:ba:ab:47:a2:b2:66:22:60:41:20:
                    f1:65:a9:33:e0:58:87:98:54:28:08:0e:62:a1:fe:
                    2f:4a:21:27:46:69:20:6f:ea:37:04:b7:c6:5d:8a:
                    f8:1a:59:4c:02:f0:27:d0:2d:54:7b:70:31:d9:8c:
                    95:96:b6:ff:3b:17:bf:2f:e9:7a:83:53:4d:3b:f6:
                    11:5f:e4:27:6e:d0:93:1c:e4:2a:1a:12:bd:8a:9e:
                    96:bc:69:5c:45:08:4c:17:fa:ac:a7:7f:e1:50:6d:
                    38:36:99:17:0a:e5:82:55:89:1a:fc:20:41:1a:01:
                    b8:5c:63:b3:a2:ec:78:5a:a7:21:97:d8:06:69:c3:
                    8e:3c:69:03:64:46:33:fb:89:ca:a7:1c:43:bc:08:
                    56:93:d8:8f:84:78:e2:4d:74:8b:69:52:13:0a:4b:
                    60:3f:c6:4e:1e:46:2e:e3:e0:9b:e8:6b:c8:cd:4b:
                    4f:e2:ab:61:a7:f1:9d:be:79:3b:99:28:54:1f:4b:
                    be:17:7c:0b:3b:72:17:4e:b4:19:5e:32:bc:15:11:
                    64:17:bc:13:c4:43:7d:7a:46:46:0a:87:0a:16:33:
                    9f:c6:c1:c7:a0:b8:91:67:a8:25:2f:81:84:09:c4:
                    2b:af:47:7e:6d:66:96:c5:74:ba:21:b2:71:88:b6:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:DE:37:93:64:F5:9D:BC:71:F2:3D:83:FC:BE:91:FF:C8:B2:A6
            X509v3 Authority Key Identifier:
                keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:b3:e8:9b:da:73:44:e6:83:e6:8c:66:45:22:2c:32:bf:
         22:9b:1c:0d:00:71:f1:b2:f5:a4:67:a6:69:b5:9a:6e:a0:e7:
         c5:57:bf:6c:2d:2b:f4:0c:d1:d6:b9:bf:fd:8d:a4:46:e5:57:
         57:ab:05:56:de:8b:18:5e:60:ce:77:1c:4b:27:fe:cd:ef:23:
         60:ca:e4:80:f5:3d:d9:1f:7a:42:40:90:43:b0:4f:d8:98:50:
         13:db:84:01:67:12:50:ce:30:f6:9e:8f:b0:8a:1b:65:0d:eb:
         56:dd:ef:cf:c2:67:db:01:cd:4a:30:1f:2a:3e:f4:af:58:59:
         8d:61:23:4c:e7:43:c3:81:e8:17:98:87:7e:16:ad:eb:2b:7d:
         bc:7e:3e:9d:35:b0:ec:cf:ee:a9:2d:ef:a5:6a:aa:51:8e:a6:
         43:30:07:dc:d8:95:77:49:b7:cf:a9:73:0c:d8:aa:16:2c:7a:
         aa:2f:f5:f8:5b:15:89:a2:5e:7b:9a:e9:dc:d2:e2:5c:fe:82:
         7b:b0:f7:7b:7a:6b:23:84:55:f1:67:d4:ee:61:45:e3:a3:81:
         5e:04:e2:33:aa:98:0a:05:73:44:80:91:2a:2f:7b:00:1c:60:
         d7:21:5f:fc:e5:10:03:1b:e5:e8:6f:e0:15:ba:fd:8a:ef:3b:
         a6:16:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:16 2026 by rpki-client