Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File:                     o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier:          rjZfpVSUpFQb8Is7spZ5v7dbhkGPsfqj2CBqTyoLEdE=
Subject key identifier:   2C:29:86:67:76:71:C4:C7:7B:5B:77:78:3F:81:45:5F:11:54:68:F5
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       08EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number:          08DA
Signing time:             Wed 18 Feb 2026 19:55:37 +0000
Manifest this update:     Wed 18 Feb 2026 19:55:36 +0000
Manifest next update:     Wed 25 Feb 2026 19:55:36 +0000
Files and hashes:         1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: b42LhaWKCkeupq37pNad1W7bLU8RJM9mT/uwbx/EUCY=)
                          2: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: /uldeOBBVv+zaXl5jNRHeGbB+ckh7FIYfUU0p3GU20E=)
                          3: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: kbQycqq6uhbmllHh50J5L3MKomIfAJJoAz4btbBqKyw=)
                          4: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: jS53WXHjCoys1e1t5l2xcO16jh1u3l1FTq8ZOUzIH88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: Feb 18 19:55:36 2026 GMT
            Not After : Feb 25 19:55:36 2026 GMT
        Subject: CN=69961939-3a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:8e:b9:8e:67:4b:a8:bc:dd:76:ab:a4:0a:
                    01:8e:08:89:88:49:e1:be:ab:4d:98:86:4c:fa:b3:
                    64:fe:33:63:7d:8d:88:28:47:94:dd:d5:df:7a:7b:
                    0e:67:ec:8c:88:e1:36:7d:22:63:7e:9f:37:ea:9f:
                    1e:e8:8d:e5:10:32:44:1e:38:b4:b4:13:15:4b:83:
                    65:46:df:38:77:60:f5:94:af:03:dd:a2:da:93:30:
                    7a:02:06:ca:12:cc:2d:7d:78:1e:be:37:d2:21:b9:
                    59:90:b6:c4:cf:4b:a4:1b:d5:21:41:ac:5e:db:94:
                    c7:c6:e1:67:9c:a5:9c:e1:f3:60:15:8d:e2:d7:52:
                    b5:d9:32:da:c8:cb:0f:67:2c:c1:36:d3:3c:36:c0:
                    95:18:b7:3c:b3:f8:68:10:b8:16:9e:e2:b3:a2:47:
                    8d:cb:da:ed:b6:44:05:32:30:02:ad:df:32:83:67:
                    76:68:a3:97:ab:40:4b:dd:1d:cd:9d:6f:02:56:71:
                    45:f3:b5:1c:be:29:03:3e:5e:ef:55:43:78:41:e9:
                    ea:85:a0:06:01:70:ec:1e:b4:2c:8c:99:e8:30:14:
                    e9:f5:cb:47:e2:98:c9:cf:0e:8d:ae:86:f2:b7:56:
                    bf:e3:ea:3e:f3:18:97:33:d2:d9:00:33:58:af:73:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:86:67:76:71:C4:C7:7B:5B:77:78:3F:81:45:5F:11:54:68:F5
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:31:f3:eb:72:27:0d:94:cc:ce:bb:63:34:df:36:4c:c0:
         fa:4b:13:f6:aa:f7:f3:76:14:57:08:98:87:42:38:a0:31:64:
         45:09:f4:d8:1a:87:12:87:79:fa:5a:c4:c3:56:fb:0c:28:70:
         71:37:bb:7f:6d:61:a4:6c:ad:a0:d9:c1:0e:29:77:a9:1e:1b:
         30:82:d9:9e:36:8c:e3:cd:9a:db:55:ef:84:0a:ee:27:c7:ce:
         21:07:f5:09:07:ea:73:fb:f7:36:95:dc:d5:7a:c6:8e:ca:ab:
         e4:72:e8:9e:e2:7d:7c:73:f9:4d:4e:33:cb:ec:c5:e3:7b:c3:
         53:b6:83:9d:89:c7:b6:89:b1:c6:f0:5d:bb:89:93:92:54:fe:
         ea:1b:d5:8c:ed:92:b1:72:e7:ca:65:f1:46:47:20:c8:cb:70:
         60:53:51:7c:2e:a1:58:83:ea:82:89:fc:ac:31:bb:18:f3:23:
         37:fd:07:67:f2:e3:8e:af:13:eb:59:fc:e5:80:e4:db:17:5f:
         ad:99:ff:08:4b:54:1d:0e:11:4c:36:43:4e:6d:2d:59:b5:ff:
         e3:ba:8e:61:67:14:fd:a6:3d:31:fc:ba:14:66:d2:c3:16:71:
         78:77:42:ce:2d:62:d6:e4:48:fd:35:82:ac:47:a0:54:d7:14:
         ed:8f:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:47:57 2026 by rpki-client