Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
File:                     krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json)
Hash identifier:          U16FhWen+sTo/hVtyFAljU7UqSEbOnZHS5I+Xn+C/A4=
Subject key identifier:   D8:7B:97:11:72:02:46:03:DA:28:DC:B6:E6:A8:36:3B:57:D4:7F:6D
Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
Certificate issuer:       /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
Manifest number:          56
Signing time:             Thu 19 Feb 2026 06:25:43 +0000
Manifest this update:     Thu 19 Feb 2026 06:25:43 +0000
Manifest next update:     Thu 26 Feb 2026 06:25:43 +0000
Files and hashes:         1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: mRg2qgeZkrv3Z2lpHMioTv1WPhHx5uRvMrM2MQ4YtzU=)
                          2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
                          rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
        Validity
            Not Before: Feb 19 06:25:43 2026 GMT
            Not After : Feb 26 06:25:43 2026 GMT
        Subject: CN=6996ace7-36fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:a7:21:54:ff:6e:b0:b2:d0:ad:88:93:09:
                    d7:e2:6c:92:72:eb:8f:a2:52:e3:f0:eb:18:01:f1:
                    56:6b:8e:57:63:45:cf:d8:41:2a:81:56:84:1f:a4:
                    26:58:e2:7b:76:05:6b:f8:40:c4:59:fd:03:ff:70:
                    bc:ea:91:b4:1a:71:9d:38:61:d7:fe:08:fc:26:62:
                    89:a0:0d:b5:7c:a4:f1:55:a5:ed:db:b7:10:3d:84:
                    49:7a:ce:d7:dc:07:01:58:cd:3a:6d:27:19:b6:24:
                    8c:78:fa:fb:29:87:3c:f9:d2:cc:67:fb:ed:74:17:
                    74:79:b8:c9:9b:b2:01:fd:29:4c:0f:9d:bf:74:d2:
                    ef:64:e6:55:39:34:d2:df:aa:f9:cf:44:42:31:f4:
                    05:04:cc:28:68:6b:a2:42:df:68:6e:a2:23:1d:65:
                    b8:23:0c:39:ce:03:9b:bb:4e:74:cc:21:85:b0:a6:
                    85:5f:3e:01:1e:34:49:a0:db:9a:32:a6:96:62:c8:
                    98:46:e0:05:ca:31:a6:48:eb:68:be:f3:9c:42:45:
                    79:55:94:a0:01:76:a8:15:8f:13:11:22:fb:1d:ba:
                    37:47:92:30:cf:a0:f7:f7:a1:82:aa:9b:0b:01:7a:
                    a8:23:2c:ed:3a:bd:8e:62:62:03:ae:86:2a:85:59:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:97:11:72:02:46:03:DA:28:DC:B6:E6:A8:36:3B:57:D4:7F:6D
            X509v3 Authority Key Identifier:
                keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:47:9c:53:a1:59:2e:10:01:d2:e4:82:ab:f4:81:87:cf:
         cc:d0:74:85:54:b6:de:bd:54:ed:84:58:3c:ea:23:fd:40:7e:
         ee:a7:dc:03:21:b0:59:cf:04:97:1e:55:e4:f2:ba:fc:2b:a2:
         88:0c:88:b6:81:98:31:ff:28:f1:94:40:2b:8f:92:d8:60:ef:
         eb:b9:fb:71:45:07:10:59:b3:a8:3b:01:a1:78:16:81:12:16:
         8a:ad:7f:fb:30:43:be:78:2f:bd:ae:b0:09:e2:c6:dc:39:a0:
         55:b3:2d:fc:56:bb:90:ef:13:50:77:b6:ba:aa:b8:82:31:83:
         c1:88:15:74:77:9e:14:72:19:2f:55:17:eb:77:3f:31:89:c8:
         0f:32:58:ea:a1:5b:42:cc:dc:ec:c6:45:c9:bf:4e:0d:24:67:
         7b:74:ef:0f:31:76:1d:dc:62:36:02:3f:af:cf:a9:56:62:ab:
         8e:9e:79:cf:b6:76:13:b3:ff:ad:37:91:e4:cc:f5:b2:7b:f2:
         a8:58:c3:ca:f5:73:50:20:f8:d1:b2:f9:51:bb:f9:5d:bd:a1:
         c0:09:bf:0f:6e:2f:78:6d:85:08:f5:6e:02:0f:50:9d:19:24:
         a9:7e:a8:57:c9:6c:e0:ca:fe:22:3d:7c:23:a5:57:d6:44:be:
         89:48:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:53 2026 by rpki-client