Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
File:                     5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json)
Hash identifier:          GG+V1Tpyb6xoJXwQQuZmoHB+4Yr+G50F1E6A1jeC+6s=
Subject key identifier:   C7:88:2A:1C:43:91:90:0B:E1:54:27:0D:17:73:85:D5:91:8E:B1:43
Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1
Certificate issuer:       /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
Manifest number:          0223
Signing time:             Thu 19 Feb 2026 01:32:39 +0000
Manifest this update:     Thu 19 Feb 2026 01:32:38 +0000
Manifest next update:     Thu 26 Feb 2026 01:32:38 +0000
Files and hashes:         1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: W1Jp0wBmCaXNAj/42XDRAyPXA5yt/Wjs1ZVgjT0gQcw=)
                          2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: q2X86VHJqC8YK/yrmo7V1F0aH3xF1U+PZ+Ybsd1czh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
        Validity
            Not Before: Feb 19 01:32:38 2026 GMT
            Not After : Feb 26 01:32:38 2026 GMT
        Subject: CN=69966837-a814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:a2:b9:b2:c1:d2:4a:c4:5e:33:a1:ff:68:
                    79:68:18:79:43:8c:8b:bb:8b:ad:64:fb:66:38:b3:
                    ee:92:d0:b8:e2:7b:73:d4:5a:83:25:84:01:23:0c:
                    e6:e9:0f:44:dd:f7:25:63:2b:10:1d:b6:19:62:c5:
                    1f:4a:d6:38:f7:dc:3f:ae:66:22:bc:6c:c4:76:f3:
                    bd:b1:7a:69:14:09:c1:2c:c3:a3:10:89:03:52:75:
                    af:74:d9:fe:03:a4:2d:15:03:1c:9e:af:76:db:1e:
                    e7:92:a3:93:6f:9e:a2:f9:12:fd:c4:53:6b:63:c6:
                    4e:ae:d7:48:1f:95:b9:14:1a:9c:85:55:33:52:c2:
                    92:d7:21:4b:17:a5:e8:91:1a:60:f6:8a:a4:15:35:
                    60:f0:5b:74:31:67:93:b9:68:cc:56:a8:48:28:4e:
                    4c:4b:aa:81:21:17:16:c0:67:f4:75:97:35:b2:c7:
                    0f:c2:48:5b:5a:f4:a1:f6:12:d7:1e:29:13:44:6d:
                    fb:e5:a5:dc:65:59:78:73:af:39:0f:41:9f:65:26:
                    1a:64:8d:b7:65:6c:87:9e:7f:e4:c0:f0:86:35:cc:
                    ec:d9:43:03:62:a6:58:cf:63:2f:36:97:5b:7f:c7:
                    d6:31:b3:95:88:1d:44:3d:c5:5f:54:e3:51:2d:15:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:88:2A:1C:43:91:90:0B:E1:54:27:0D:17:73:85:D5:91:8E:B1:43
            X509v3 Authority Key Identifier:
                keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:61:0f:43:a9:3a:89:11:09:fd:57:34:da:aa:05:90:78:0e:
         90:1d:f7:b1:30:d6:d5:9d:49:65:33:bd:82:f4:3c:3f:83:75:
         11:cc:e5:24:b5:45:11:44:30:b0:7a:b9:2e:09:4d:b0:82:ed:
         ab:48:c4:09:23:89:af:af:39:4f:25:53:b1:12:aa:c2:01:48:
         cb:98:22:97:0c:e1:78:c8:c2:f3:fb:52:77:6c:46:b4:15:bf:
         8e:fe:69:a1:ae:30:b7:4a:34:fc:4f:15:50:48:41:bb:bd:53:
         fb:af:85:d8:35:ad:a6:bb:fd:e0:d1:1a:22:d2:b0:6c:bc:b7:
         32:d6:60:56:e0:fe:21:a2:80:10:03:f8:bf:1e:70:ea:77:29:
         fb:36:b2:c1:79:8c:6a:e1:b2:38:b4:2a:4c:2d:2e:25:32:e2:
         78:30:94:2e:a7:c4:64:38:25:9e:74:d3:d2:16:8f:65:e0:aa:
         02:37:93:c4:ee:95:b5:88:e7:ef:1f:94:0c:c3:1b:60:33:e1:
         5a:76:ff:5a:ff:b3:09:c3:92:9f:97:a9:bb:45:33:76:33:44:
         83:84:60:26:65:4e:0e:31:8c:f2:10:c2:37:ba:0a:bb:d4:03:
         6c:7e:1f:27:02:41:d6:73:1c:f2:ac:d9:26:f1:26:25:bb:32:
         e1:d1:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:31 2026 by rpki-client