Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
File:                     gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json)
Hash identifier:          mLgn10qDq6/24h15a+kHzw6xIai3uznKqXYNgeaCvyA=
Subject key identifier:   5E:89:06:C9:A3:B3:35:30:7F:92:29:E9:D4:D4:9D:36:9C:98:2F:B5
Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71
Certificate issuer:       /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
Certificate serial:       0A3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
Manifest number:          0A2B
Signing time:             Wed 18 Feb 2026 19:20:29 +0000
Manifest this update:     Wed 18 Feb 2026 19:20:28 +0000
Manifest next update:     Wed 25 Feb 2026 19:20:28 +0000
Files and hashes:         1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: i0MhbVQxEDIQDgZ7zSQcfI9ryl0rMFTLoPHrg/wZ66Y=)
                          2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: WiGuv2/JSxx57676h5jedUA8T7uDbrDtdsfZtv+usVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl
                          rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571
        Validity
            Not Before: Feb 18 19:20:28 2026 GMT
            Not After : Feb 25 19:20:28 2026 GMT
        Subject: CN=699610fd-462f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:a4:5f:44:a1:e1:f4:17:d4:ee:55:3b:13:
                    5b:c5:8c:ed:06:6a:c6:49:ee:07:7f:76:65:fe:1a:
                    82:c8:20:6a:48:9a:33:71:2e:6d:a2:00:4a:c8:b9:
                    4d:84:e9:b7:e6:81:8e:fe:e5:90:c9:5d:91:81:b4:
                    2d:be:7a:bc:f8:ce:75:93:7f:66:12:f6:ae:f5:53:
                    82:5c:4e:0f:09:26:c2:2c:8f:e0:90:0e:ed:e6:ab:
                    e8:ed:c9:c2:52:e6:f8:e7:30:b1:c0:da:ce:28:d6:
                    f5:ea:75:d1:6e:0d:f3:4c:fb:03:af:27:44:d9:df:
                    14:b2:0b:fe:57:ae:1e:45:f3:2b:ce:d8:f4:b8:8e:
                    31:f1:bf:54:41:e9:3e:30:1b:af:f8:79:8e:53:1b:
                    2b:13:d6:63:cd:28:5f:5d:b6:61:1e:c6:c9:6a:33:
                    27:e2:0b:c2:38:5f:b4:a4:0c:df:32:22:d5:a8:93:
                    32:58:96:fa:25:85:37:ad:e9:5a:75:37:42:02:a1:
                    97:e6:ef:e0:60:3b:f4:ae:64:02:f6:ae:07:32:46:
                    45:50:d6:6d:fb:03:53:01:7f:cd:f0:d9:6c:51:93:
                    dc:a5:47:7d:d9:11:10:c4:ad:51:a3:20:4f:92:ed:
                    c8:f6:63:4e:b4:4a:10:b5:24:e8:25:24:c2:5e:68:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:89:06:C9:A3:B3:35:30:7F:92:29:E9:D4:D4:9D:36:9C:98:2F:B5
            X509v3 Authority Key Identifier:
                keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:6e:c7:7f:9e:4c:54:2f:57:24:a1:ec:69:d2:81:5d:fa:
         fe:ad:4a:62:ca:38:5c:ca:80:89:74:3a:a4:4b:d7:06:85:4e:
         a2:fe:f5:dc:36:b6:d7:63:e5:c0:76:12:7c:5a:f3:d6:ca:51:
         21:d1:45:4e:13:ed:63:cc:ac:63:b6:19:0c:70:1e:75:c9:ce:
         04:e9:05:7f:d3:97:80:18:98:83:87:ff:50:f1:26:f3:71:c9:
         79:e7:18:35:da:e1:07:81:f7:59:a6:71:9f:a4:ec:09:4c:0f:
         54:ae:67:99:b8:80:5c:84:2f:15:cb:97:59:93:8f:96:13:d4:
         6a:f3:73:80:b6:90:31:43:34:75:a8:8b:c6:30:bd:87:b5:f0:
         ac:be:96:43:65:9a:e0:40:71:33:7b:8a:05:1f:8d:97:51:51:
         e5:3b:26:d3:d8:f6:6b:61:f4:ec:fb:2d:f5:b6:a7:89:33:5f:
         bf:3e:bc:99:bc:a4:3a:7e:05:3c:97:83:5b:7a:6c:1b:e6:12:
         b8:ee:d8:30:16:4e:3a:3d:cf:b4:df:ef:e5:cb:77:f9:80:28:
         62:60:ff:24:de:bd:00:ab:b6:de:24:94:10:0b:f8:6e:fe:87:
         f2:5a:40:68:f8:9c:3f:5f:c8:b5:f5:5d:54:c0:d1:d1:89:20:
         cc:6d:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:43 2026 by rpki-client