Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File:                     XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier:          WFHltVGI4ioPivPBmEmpSLw/LoUQ3FRyBBvgff6Ql74=
Subject key identifier:   3A:59:49:4E:D4:62:76:1F:7B:A7:C5:D6:2A:A7:B1:D5:F9:9F:74:0D
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer:       /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial:       0984
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number:          097D
Signing time:             Wed 18 Feb 2026 19:34:50 +0000
Manifest this update:     Wed 18 Feb 2026 19:34:49 +0000
Manifest next update:     Wed 25 Feb 2026 19:34:49 +0000
Files and hashes:         1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: TEEF0l8y7F9tbB01X+fHHnsLOS7m2xmVL+4gUCj0OcY=)
                          2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: OW41bUAPIGMrqZxgUYQ1U1pF1P2hht2Fk6aRcB2b9ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
                          rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
        Validity
            Not Before: Feb 18 19:34:49 2026 GMT
            Not After : Feb 25 19:34:49 2026 GMT
        Subject: CN=6996145a-d972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:04:6c:2d:24:8a:e5:58:8c:4c:d0:05:7a:
                    b2:40:1b:39:0d:a1:a1:56:f2:23:43:ec:41:d6:61:
                    c6:22:86:5b:06:b2:9b:41:27:43:b0:00:dd:71:f4:
                    c4:8c:e6:3a:16:cf:76:d0:c6:57:82:0b:6d:3e:ee:
                    ab:83:64:50:af:1d:0c:7a:f1:57:fe:b7:b3:8d:2c:
                    67:6d:31:81:0f:a6:78:c4:a1:43:48:07:e4:3b:8a:
                    8b:a2:62:a4:0f:c5:00:97:f3:6f:dd:b3:33:c0:23:
                    21:e5:a4:8a:5a:51:18:27:06:65:47:5f:b1:2f:58:
                    7a:56:61:ab:c9:d3:24:6d:6f:67:1b:7b:9d:0d:a0:
                    d7:a3:24:f5:00:17:22:42:ab:fe:f8:a6:40:17:ec:
                    dc:e2:1a:7b:be:e0:e6:97:1d:bd:d1:16:31:cd:67:
                    d9:a4:51:eb:f5:06:32:fc:6f:2a:7a:28:d8:37:6e:
                    1a:5c:59:8d:ac:52:9a:6a:ab:91:b1:b4:54:02:de:
                    c8:b1:81:40:15:59:1f:b0:ae:a9:d2:16:f2:e5:1b:
                    c1:86:fd:fb:11:94:85:77:61:ee:c8:78:c0:9d:24:
                    bb:e9:97:09:84:eb:a9:4f:b0:28:54:f1:29:35:2c:
                    90:82:a6:23:20:c4:fe:ae:7a:4f:93:d2:4b:dc:38:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:49:4E:D4:62:76:1F:7B:A7:C5:D6:2A:A7:B1:D5:F9:9F:74:0D
            X509v3 Authority Key Identifier:
                keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:df:72:90:4b:a6:5e:98:c0:34:31:54:6b:4b:4e:a5:c8:
         9c:dd:c5:06:47:ca:b5:f8:96:05:9f:a5:e4:f0:21:a4:d1:f8:
         52:71:0c:4d:dc:13:78:cc:0a:db:96:8c:78:1f:b6:33:a6:cb:
         75:82:01:a7:dd:09:8d:f4:70:8b:f4:0a:65:af:8c:3a:58:64:
         8d:29:01:4b:05:70:e2:37:47:d2:a5:30:1b:99:70:bb:3c:02:
         fe:5b:12:66:6f:13:af:da:60:6a:4c:a6:f4:9a:62:fc:0f:87:
         c4:ce:17:89:98:26:89:01:56:b5:34:22:bd:33:97:ea:bb:b8:
         99:66:bb:8f:9b:52:b4:51:fb:e1:a1:65:3e:ee:3a:2d:9a:c7:
         25:02:cb:98:58:5a:05:3c:ad:92:a2:93:7e:2a:62:95:06:ef:
         31:7e:51:ad:a8:00:be:ee:b3:d6:94:57:a3:34:d8:67:c6:16:
         2e:fd:e9:84:b7:a6:a3:dd:f4:28:a9:fb:43:9c:a0:98:ba:3b:
         a9:24:28:2e:03:9a:b4:6f:67:93:4e:b5:c4:a3:6a:1b:97:1e:
         36:ef:6e:30:22:4d:e5:32:06:f6:2b:93:8a:db:f3:92:8d:2f:
         47:ae:f2:ef:10:e0:a7:35:bc:0b:72:40:e6:d1:50:5f:bc:3a:
         75:49:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:28 2026 by rpki-client