Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
File:                     JD5IKavy-QnBLdoET-XTa4IQU5I.mft (raw, json)
Hash identifier:          gYI4GyYv/g4MkFM14imKW29IiEpGUERAiBH/kBmHriE=
Subject key identifier:   6F:A2:F9:52:C6:DF:6C:E0:6E:92:A8:3D:9F:55:CE:4B:96:2E:17:5B
Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
Certificate issuer:       /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
Manifest number:          0CD5
Signing time:             Wed 18 Feb 2026 17:59:49 +0000
Manifest this update:     Wed 18 Feb 2026 17:59:49 +0000
Manifest next update:     Wed 25 Feb 2026 17:59:49 +0000
Files and hashes:         1: JD5IKavy-QnBLdoET-XTa4IQU5I.crl (hash: QQBasnP111unCzCFBA0rw1+3CfDvXOWS1OpHqrVUWhQ=)
                          2: 2CF214DC93A611F0B9B44571C4F9AE02.roa (hash: gDTlO8JdKBOhrYpdJ9YbTAbJbDClxcUd9QV6sNxI620=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392
        Validity
            Not Before: Feb 18 17:59:49 2026 GMT
            Not After : Feb 25 17:59:49 2026 GMT
        Subject: CN=6995fe15-62a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:f6:39:6b:62:f5:0e:0f:5e:ee:fc:c6:dd:
                    6e:aa:c4:6c:c0:29:d7:d0:ed:e4:9b:c6:20:22:68:
                    4a:a2:d6:ee:45:58:50:60:e4:c7:7a:ad:00:48:a2:
                    f7:5e:2a:c7:eb:1d:69:f6:4d:7d:e7:f1:31:68:9f:
                    fa:2b:e9:80:03:74:3e:e2:05:20:2c:2f:45:46:e8:
                    76:e5:1c:d8:77:a2:35:26:de:d4:d8:59:f9:f3:14:
                    20:85:ab:f6:a9:7e:66:53:2d:71:fd:14:0b:c9:44:
                    34:46:aa:a7:c9:3f:59:43:7b:dc:b7:cd:6b:04:67:
                    f9:a8:a0:6a:92:df:2b:de:52:f5:94:03:a8:be:b5:
                    bc:86:13:b3:a6:4a:a9:24:2c:6e:10:54:ad:8b:cb:
                    f1:cf:b2:39:93:2d:b9:4b:bd:bc:9d:85:c5:4a:a8:
                    e9:2b:09:15:b0:3c:bb:58:7b:ed:77:e4:8f:04:f1:
                    b9:0c:ec:9a:f1:b0:c0:a0:d4:49:b2:11:b9:b9:e6:
                    3e:6a:82:e2:b3:34:6f:ee:41:9a:68:4c:20:f5:a5:
                    3f:e6:1a:b1:f7:4d:eb:cc:04:87:9a:56:77:0d:f7:
                    7d:01:a7:48:c9:cb:12:99:bb:d6:50:a6:f2:7c:d7:
                    23:3e:8d:68:84:49:d1:38:f2:3d:4f:a0:bb:33:46:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:F9:52:C6:DF:6C:E0:6E:92:A8:3D:9F:55:CE:4B:96:2E:17:5B
            X509v3 Authority Key Identifier:
                keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a9:a6:56:f4:6c:4e:80:fe:00:ce:b1:91:51:0c:f0:40:63:
         34:17:29:4c:74:3f:c9:f4:30:54:4e:7a:91:6e:c1:dc:00:f4:
         4f:88:a7:d8:97:bf:e5:c3:7e:65:87:45:6b:ba:18:19:c1:f4:
         33:2f:cf:32:e9:02:b5:b7:18:97:78:ca:13:75:58:e8:76:bc:
         d7:9d:db:02:9e:f8:5e:77:3c:52:19:d0:86:fa:4c:e1:c0:f9:
         94:30:d8:91:85:d7:aa:3c:75:bc:ef:0f:e7:3a:7b:1c:a2:93:
         f1:79:55:fb:62:fb:fd:f7:13:39:59:ba:61:8b:b5:c0:50:8e:
         ec:3e:0f:bf:6c:b5:4f:86:4e:a7:5a:ef:d3:71:67:61:4b:7d:
         a1:7b:1d:43:d0:ca:fe:4b:51:5c:d3:93:92:9e:f1:5d:95:95:
         89:dc:d0:52:f0:35:b3:92:b3:fd:35:10:b2:bc:4f:4e:49:a8:
         24:c5:f3:f9:d3:3e:16:07:93:ef:a1:83:a2:89:51:0b:07:81:
         05:58:df:34:d8:8f:73:05:75:37:02:8f:0b:b4:2e:42:69:47:
         1e:e7:5b:fe:79:4f:0b:6b:2b:64:c6:38:6d:66:fb:9c:0a:47:
         b7:26:fb:45:3c:37:08:eb:31:80:66:28:88:92:52:e9:04:7a:
         33:3a:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:38 2026 by rpki-client