Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
File:                     3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json)
Hash identifier:          k8wDhhKixPuTCZX9605JtlCmaKzLccL/VBwxzm9sJeQ=
Subject key identifier:   42:80:84:E6:0B:62:9F:59:5E:3A:F3:CF:75:14:A0:2C:8E:3F:49:8C
Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B
Certificate issuer:       /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
Certificate serial:       042D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
Manifest number:          0424
Signing time:             Wed 18 Feb 2026 23:37:32 +0000
Manifest this update:     Wed 18 Feb 2026 23:37:31 +0000
Manifest next update:     Wed 25 Feb 2026 23:37:31 +0000
Files and hashes:         1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: BE2kOBIp8Km+KzuKNUenKFXPwttfLWpZJHlas9vxVso=)
                          2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: YvFcrpBbAoiYQIP04bSjgNkLWr3WOARquHbbaVU+Mxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl
                          rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
        Validity
            Not Before: Feb 18 23:37:31 2026 GMT
            Not After : Feb 25 23:37:31 2026 GMT
        Subject: CN=69964d3b-0298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:4b:2b:13:5c:cd:28:8f:ed:b6:b5:70:5b:
                    d9:ce:e8:82:e7:0b:77:32:23:36:3d:c8:60:07:43:
                    82:5b:f5:87:cf:8b:45:2f:46:c8:6e:34:01:b8:cd:
                    d8:91:a2:16:95:c7:ad:f3:28:c7:f4:47:62:3b:d6:
                    f8:8a:ae:68:8c:d0:43:4f:e9:c9:d8:41:e9:f1:b3:
                    87:c8:12:75:0b:fc:a7:88:36:2f:03:0e:4b:62:74:
                    ea:ff:d0:9a:15:b3:94:f6:3a:dd:d5:88:19:dc:66:
                    44:4c:cc:5d:70:34:a7:b1:5a:ba:8d:a5:ce:3a:09:
                    fb:71:06:71:c7:e9:1d:17:c2:d5:11:df:a7:e6:d4:
                    fc:4a:48:43:96:d6:bd:e8:97:c4:8a:d3:62:f5:c5:
                    1c:32:b6:10:6c:ef:5d:2f:7a:36:a0:b0:c7:44:f3:
                    a6:09:ee:98:c2:05:a1:76:4a:b7:08:cf:04:ad:35:
                    34:27:ed:0e:bf:6f:98:f5:a4:53:41:17:cb:74:48:
                    bc:42:12:e8:ce:a9:aa:d8:65:bd:37:90:b0:65:a7:
                    ec:a5:6e:e6:90:78:9b:b3:36:d6:56:a1:eb:56:31:
                    dc:5c:38:82:97:70:23:48:2b:0e:9c:4e:27:16:96:
                    21:04:40:e7:7b:55:6a:e8:7c:f3:e4:b8:b9:6a:78:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:84:E6:0B:62:9F:59:5E:3A:F3:CF:75:14:A0:2C:8E:3F:49:8C
            X509v3 Authority Key Identifier:
                keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:8d:5b:c3:04:d4:11:68:f2:b5:f2:51:77:25:f8:b6:3a:
         9e:f6:92:46:e5:e0:31:3b:29:bf:d2:55:78:e2:13:38:ef:ec:
         80:07:fd:91:72:ce:1f:d0:4b:1c:bd:d4:fd:54:97:54:c8:ee:
         41:9c:23:de:e1:70:c0:6b:56:59:cf:34:d6:f6:c6:75:e3:ba:
         a8:c3:f3:0d:74:89:d7:b5:cb:9a:31:d4:3e:bb:9a:52:ae:5f:
         2b:59:fb:1b:f5:fb:4c:bc:b8:70:47:1b:80:cf:fb:10:a9:aa:
         74:00:58:18:4a:5d:2c:a3:7b:0a:30:8c:5c:cf:7e:5b:77:dc:
         ee:3b:24:97:5a:47:8c:0f:a7:85:e7:97:04:be:70:b3:cd:51:
         ad:d2:50:a6:e6:b3:e6:16:25:28:6e:c2:04:c0:13:a3:a1:41:
         f4:00:8e:ab:e9:c9:29:c2:e1:d1:b9:47:10:f4:5a:93:c3:1c:
         4a:c6:a0:aa:4b:86:ff:90:aa:2a:46:3d:4b:c8:0e:cb:7a:d0:
         cb:d8:4b:80:b0:1c:32:cf:68:a9:96:66:14:ac:fc:7e:0b:be:
         6c:64:7f:ab:32:1c:4a:65:cb:00:d5:4a:6d:56:95:3a:45:29:
         b4:39:43:3c:c9:9a:7f:70:f0:74:7e:95:30:da:ed:aa:c0:af:
         43:47:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:31 2026 by rpki-client