Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
File:                     0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json)
Hash identifier:          HEbM7FcfGO/kr8K3kpQqtr6xx+yEmgcdlBnhcieQhlQ=
Subject key identifier:   D0:DB:96:DE:45:6B:0D:DF:28:3C:6A:6B:26:B4:24:4E:FA:8E:73:CD
Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23
Certificate issuer:       /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
Manifest number:          0277
Signing time:             Thu 19 Feb 2026 00:45:25 +0000
Manifest this update:     Thu 19 Feb 2026 00:45:25 +0000
Manifest next update:     Thu 26 Feb 2026 00:45:25 +0000
Files and hashes:         1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: vRvj8o5uzgl2uh7GHGk4pzxXZLwky6bmlXPTiWRI7zE=)
                          2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: 389SWD8U0n/S34l3x1fnKTD4IcOssPuVilWlMrYufM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B39, serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
        Validity
            Not Before: Feb 19 00:45:25 2026 GMT
            Not After : Feb 26 00:45:25 2026 GMT
        Subject: CN=69965d25-e09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:d1:fc:8d:02:e0:2c:6e:8c:55:9a:1e:1b:
                    27:31:23:11:5d:a0:22:17:2d:14:0c:1b:5c:2e:a5:
                    16:38:a1:a0:8f:54:46:74:ac:32:2f:2b:83:19:17:
                    f1:e8:71:63:de:c3:d1:ad:6b:2b:9e:c6:cc:13:54:
                    e0:07:99:57:73:d9:58:61:e4:6a:a5:bf:5f:59:54:
                    a4:28:4b:a7:d5:64:91:92:12:71:8e:d5:bc:48:38:
                    52:0f:42:65:11:8a:98:cb:00:18:51:01:52:f2:e0:
                    09:7d:e5:e9:f6:5e:12:17:53:3f:38:8a:2b:3e:1b:
                    84:c6:b7:73:21:5d:46:6a:39:38:86:12:b4:a4:d6:
                    2c:14:cb:d7:89:03:0c:83:d8:59:05:e8:11:2e:5c:
                    a4:b8:01:1e:31:71:fb:b6:67:d3:8e:a9:9f:bf:f7:
                    7e:64:15:0e:ae:49:c8:e7:1a:8e:79:12:95:dd:84:
                    9b:03:95:7c:6b:17:5c:ed:e2:be:6d:59:30:ef:9d:
                    44:2d:b8:c8:25:c9:1e:db:8b:70:a5:a6:2e:8d:a2:
                    cc:c3:25:46:70:2c:33:de:e4:2e:3f:84:b9:3c:05:
                    0b:96:75:96:dc:bf:1a:9f:4a:ac:4e:30:e9:03:2a:
                    08:30:8c:72:4a:65:c4:ac:32:9b:5b:a7:6b:3e:b1:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:96:DE:45:6B:0D:DF:28:3C:6A:6B:26:B4:24:4E:FA:8E:73:CD
            X509v3 Authority Key Identifier:
                keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:23:45:93:e4:e4:cf:c7:ea:53:39:e7:77:43:4d:df:a7:
         47:bb:9d:aa:2a:93:50:d9:a5:2b:c0:31:91:ef:a7:b0:a6:03:
         88:e5:9a:fb:26:c8:90:9e:41:d5:c3:a2:e8:a8:c1:19:49:e2:
         75:f6:52:17:56:ba:7a:78:ac:6b:0f:09:ab:c5:af:a7:d1:c6:
         73:fc:f7:cc:a4:96:19:13:d7:2a:7d:af:86:ff:41:91:18:58:
         fd:a3:c0:c0:e0:50:74:9b:80:17:08:fd:19:23:0a:ec:d8:f0:
         24:cb:5d:0b:c5:03:90:f1:ae:49:db:f5:20:ab:cd:dd:3f:68:
         bc:b4:00:c2:a1:c9:c3:97:5f:ca:1e:cb:eb:fc:2e:e0:63:1b:
         7b:76:b5:f9:e8:28:e2:e7:54:1f:1d:7a:49:8b:86:44:5b:74:
         e3:82:6d:4a:9e:47:bd:a7:08:1d:92:77:0b:30:d3:4b:ad:9c:
         4c:63:74:31:10:a4:8d:d9:97:24:fa:35:e1:d2:e6:6a:20:e5:
         99:af:69:60:4c:f9:fc:c3:f8:d7:ee:fa:3f:78:3c:78:c8:1c:
         8d:a4:01:a7:13:36:c0:be:78:06:bd:42:ff:ab:b8:4e:d1:aa:
         61:14:6a:42:21:f4:ce:43:6b:4f:75:f7:89:f9:30:1a:f4:0a:
         57:d4:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:17 2026 by rpki-client