Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
File:                     iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json)
Hash identifier:          1rFEtYc71De4YjQfbPTFqiYu/Lfy6khSbLGC2U7jQaI=
Subject key identifier:   86:5E:C1:8E:A6:1C:CE:8D:6C:F8:A7:C9:8B:71:04:E8:78:61:07:9B
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Certificate issuer:       /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial:       0B1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
Manifest number:          2C5B
Signing time:             Wed 18 Feb 2026 15:46:21 +0000
Manifest this update:     Wed 18 Feb 2026 15:46:20 +0000
Manifest next update:     Wed 25 Feb 2026 15:46:20 +0000
Files and hashes:         1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: zlyrqdQbzUOpMMFEVVBU5e3DBl+MrpuGxbZCbitnZLg=)
                          2: DD7FC172E17D11EFAC0A7E29C4F9AE02.roa (hash: CR884Fx/vNDalD1W0H8kE8PE03fgD5p2vcrIaYfDsSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
                          rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4413, serialNumber=8AA8786526852346839372631DFB09984BC3005E
        Validity
            Not Before: Feb 18 15:46:20 2026 GMT
            Not After : Feb 25 15:46:20 2026 GMT
        Subject: CN=6995decd-5244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:4f:46:96:89:4b:93:75:38:0a:dc:97:8a:
                    79:d0:05:2f:64:4d:10:13:e6:5b:c5:46:a5:85:62:
                    c7:dd:0b:d2:d8:2c:19:4b:0a:97:68:5f:81:5d:6f:
                    d1:30:b5:70:b5:c1:d7:83:80:7f:68:2f:0c:91:bf:
                    d5:28:b3:d4:5f:85:d2:ea:a3:15:a2:92:05:d4:d3:
                    f6:6a:f8:8a:fa:42:4d:f7:6e:6e:87:b4:ae:7b:2c:
                    8e:10:e6:ae:56:9b:1c:33:58:de:fd:10:90:d2:2c:
                    35:cf:84:ad:bf:e6:ff:8c:ce:74:41:04:4a:81:f3:
                    51:bc:5d:11:83:2b:46:6f:57:13:f6:ca:c4:ad:02:
                    d7:43:4a:23:a9:fb:fe:8b:73:88:a8:6b:08:87:f3:
                    5d:8a:8e:05:61:03:a3:11:52:a5:37:41:53:35:bc:
                    7d:08:bb:f8:aa:64:4f:61:e8:4b:69:0f:a2:59:7b:
                    e3:5a:f9:73:e4:1b:ab:be:3a:47:5d:bb:05:0a:2f:
                    65:fd:b3:76:75:8e:c0:7e:0c:1e:eb:14:2a:86:68:
                    65:ae:fd:ca:67:ac:34:02:4a:e9:82:91:7d:48:2e:
                    5d:e5:36:aa:d0:4b:69:bb:fd:a6:0f:a6:c0:01:d5:
                    f6:14:3f:a5:27:17:d8:98:7a:c9:f4:e0:e9:31:d3:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:C1:8E:A6:1C:CE:8D:6C:F8:A7:C9:8B:71:04:E8:78:61:07:9B
            X509v3 Authority Key Identifier:
                keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:81:59:96:be:82:c9:33:2c:06:ef:cb:12:67:26:af:ba:
         2d:02:70:83:ab:b1:ab:7a:cc:ff:72:24:96:8c:81:d8:c1:83:
         85:57:8c:51:95:09:5e:a1:37:71:8c:0c:c6:06:05:06:6a:17:
         d9:99:d4:50:e1:d2:3a:6e:8f:25:3e:d5:48:2c:5e:53:9f:93:
         94:6c:6f:da:b5:90:62:d8:a4:00:63:5c:3c:3b:cb:c2:bd:3c:
         34:f1:30:ce:a2:3f:e4:60:c2:56:e3:82:0f:a7:10:72:66:76:
         ed:de:63:78:ba:14:df:60:58:c5:b3:b7:1a:5b:67:95:a5:df:
         3c:2f:39:b2:c9:29:6f:83:cf:c8:1b:1e:f1:7b:f4:2c:2b:76:
         0a:e1:6c:2c:ec:04:8b:95:d1:4b:1c:19:46:34:8b:9d:e8:42:
         c4:91:7a:b9:fc:64:0d:64:b0:3a:fb:a3:ad:57:e6:b3:c9:cc:
         f0:98:74:d3:9b:d9:c0:9b:13:cf:1b:51:25:7e:d0:a4:9b:e9:
         9e:e0:c9:18:7d:7f:9b:45:60:ef:73:76:31:4e:8d:a7:35:8a:
         dc:9c:eb:6b:ba:5f:14:06:d8:88:07:44:1b:46:63:b9:9d:6a:
         c6:56:61:bb:7f:07:37:52:43:1b:85:c1:9e:82:4e:58:18:eb:
         a4:0b:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:28 2026 by rpki-client