Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
File:                     3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json)
Hash identifier:          FfBrrdb4o2ZI2oob/i6yGPioCBO7R3Bnw2qc3OOMjhM=
Subject key identifier:   B0:06:17:F3:5C:7E:AE:DC:0D:F4:11:B1:85:9A:BF:41:D3:F8:E6:A9
Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7
Certificate issuer:       /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
Manifest number:          56
Signing time:             Thu 19 Feb 2026 06:26:20 +0000
Manifest this update:     Thu 19 Feb 2026 06:26:19 +0000
Manifest next update:     Thu 26 Feb 2026 06:26:19 +0000
Files and hashes:         1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: +BU7qHbSOcNVNPAvTkuPXGo4jqKV7u8GC1le7jBY65Q=)
                          2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: l/wARrq1lISnaNIca31Ucy5U5vcCEK4kZC3D4iFHaJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl
                          rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7
        Validity
            Not Before: Feb 19 06:26:19 2026 GMT
            Not After : Feb 26 06:26:19 2026 GMT
        Subject: CN=6996ad0b-f088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:71:7b:b1:d4:d9:a6:63:46:25:c7:fd:b5:
                    72:bd:86:26:ee:70:2e:15:0e:2b:90:6f:56:0e:65:
                    8c:5c:c2:22:44:fc:0a:57:1c:15:b7:de:2c:10:fa:
                    07:a7:38:63:07:ef:ed:87:23:2f:c4:49:05:a2:9e:
                    29:a5:f8:62:a1:a6:38:a2:6b:0f:9c:7e:7d:89:78:
                    43:d6:24:a3:30:2e:61:4e:be:99:eb:ef:6b:7a:fb:
                    8f:5e:b3:9b:4d:79:f9:de:d5:10:24:15:20:dc:51:
                    3a:33:f9:9f:98:c6:35:79:31:8c:b7:bb:04:19:f2:
                    b3:6c:fe:c3:d7:04:2b:69:ae:4a:2e:a0:dd:60:b6:
                    b8:8f:07:36:78:4c:f8:3b:d4:0b:1d:41:4b:1d:e4:
                    05:a5:99:80:4a:28:1c:33:77:f9:69:f1:02:f3:5e:
                    32:33:6a:d7:71:40:f7:85:1f:f0:0e:af:cc:ee:e3:
                    d7:bb:a1:94:fb:f6:88:96:e3:24:3f:57:fe:60:6d:
                    42:7c:fe:db:2e:fa:40:77:0e:36:0d:42:78:80:1d:
                    fc:51:07:3b:31:cc:37:14:94:76:3f:89:57:2a:a8:
                    34:1e:2b:be:3e:26:9e:85:df:68:c7:db:e2:43:1d:
                    8b:79:0a:11:1a:cd:f0:37:06:76:4b:82:85:9b:8f:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:17:F3:5C:7E:AE:DC:0D:F4:11:B1:85:9A:BF:41:D3:F8:E6:A9
            X509v3 Authority Key Identifier:
                keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:8a:fb:e3:ee:ef:1a:3b:21:e9:7b:0b:30:c1:ab:2f:9e:
         8f:24:e0:23:85:1f:69:d0:76:03:dc:a5:59:71:31:0a:8a:c5:
         99:08:fd:76:e9:4e:42:83:a8:b7:ba:58:4a:da:e9:ea:45:25:
         0e:13:f3:c9:1c:d6:82:aa:01:db:7f:8d:08:32:70:64:f3:64:
         fa:65:c1:0d:fc:56:c3:14:27:03:e6:21:bc:44:1a:de:1b:b1:
         71:62:db:86:d6:6b:dd:e0:08:22:87:93:ea:65:0b:f9:2f:91:
         a1:d5:9d:e8:db:93:4f:e1:ab:68:45:ab:ec:8b:67:64:f0:4a:
         bb:5f:af:21:b6:2e:9b:12:2a:33:f3:77:bf:38:23:8c:9d:6c:
         c2:d0:df:cc:80:ad:58:e2:dd:42:46:0d:e7:83:79:85:71:0c:
         d5:6a:14:89:77:e3:23:45:0a:10:6e:6c:b7:63:37:17:05:92:
         60:1a:a5:97:6b:08:5e:72:5b:56:53:3c:a0:e0:60:1d:a6:fe:
         da:a4:7b:f6:d7:c2:52:cf:5a:e4:89:c3:8e:6c:8a:8a:ae:9e:
         d4:22:90:30:a8:03:86:24:70:4b:77:5c:dd:81:89:ec:00:4a:
         86:e4:0d:4b:39:9c:02:71:b3:ae:89:23:d6:cf:c9:bf:de:0a:
         e4:43:03:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QjJFMjExMC8GA1UEBRMoREREQ0M0MEFERTY3N0YyM0Y4QTc5QkE0MTY4RUY2RjZC
RUYwNjVDNzAeFw0yNjAyMTkwNjI2MTlaFw0yNjAyMjYwNjI2MTlaMBgxFjAUBgNV
BAMMDTY5OTZhZDBiLWYwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdiXF7sdTZpmNGJcf9tXK9hibucC4VDiuQb1YOZYxcwiJE/ApXHBW33iwQ+gen
OGMH7+2HIy/ESQWiniml+GKhpjiiaw+cfn2JeEPWJKMwLmFOvpnr72t6+49es5tN
efne1RAkFSDcUToz+Z+YxjV5MYy3uwQZ8rNs/sPXBCtprkouoN1gtriPBzZ4TPg7
1AsdQUsd5AWlmYBKKBwzd/lp8QLzXjIzatdxQPeFH/AOr8zu49e7oZT79oiW4yQ/
V/5gbUJ8/tsu+kB3DjYNQniAHfxRBzsxzDcUlHY/iVcqqDQeK74+Jp6F32jH2+JD
HYt5ChEazfA3BnZLgoWbj9FNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsAYX81x+
rtwN9BGxhZq/QdP45qkwHwYDVR0jBBgwFoAU3dzECt5nfyP4p5ukFo729r7wZccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMkUyLzQxMUM2M0IwODk1
OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pj
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM2R6RUN0NW5meVA0cDV1a0ZvNzI5cjd3WmNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC
MkUyLzQxMUM2M0IwODk1OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQ
NHA1dWtGbzcyOXI3d1pjYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIE7ivvj7u8aOyHpewswwasvno8k4COFH2nQdgPcpVlxMQqKxZkI/Xbp
TkKDqLe6WEra6epFJQ4T88kc1oKqAdt/jQgycGTzZPplwQ38VsMUJwPmIbxEGt4b
sXFi24bWa93gCCKHk+plC/kvkaHVnejbk0/hq2hFq+yLZ2TwSrtfryG2LpsSKjPz
d784I4ydbMLQ38yArVji3UJGDeeDeYVxDNVqFIl34yNFChBubLdjNxcFkmAapZdr
CF5yW1ZTPKDgYB2m/tqke/bXwlLPWuSJw45sioquntQikDCoA4YkcEt3XN2BiewA
SobkDUs5nAJxs66JI9bPyb/eCuRDA9I=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:25 2026 by rpki-client