Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
File:                     1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json)
Hash identifier:          2QWQQA94w182/RXWCG64Z+4ujivPu/Xsq5jImCV5U8w=
Subject key identifier:   3B:A0:69:15:27:35:B1:9F:DE:75:3E:B7:BD:90:09:3D:E1:11:67:BE
Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
Certificate issuer:       /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
Manifest number:          01D7
Signing time:             Thu 19 Feb 2026 02:16:58 +0000
Manifest this update:     Thu 19 Feb 2026 02:16:58 +0000
Manifest next update:     Thu 26 Feb 2026 02:16:58 +0000
Files and hashes:         1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: ra5gEfmKETHr1s1sMRgo4ZtmRje9bvSnsePO3L8M6v0=)
                          2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
        Validity
            Not Before: Feb 19 02:16:58 2026 GMT
            Not After : Feb 26 02:16:58 2026 GMT
        Subject: CN=6996729a-965f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:f6:fd:44:cf:91:17:a8:ef:0d:de:18:b9:
                    2d:dd:b5:bf:69:6f:29:f3:78:bd:c1:df:0d:fd:be:
                    0b:23:b4:09:bf:37:96:68:be:7c:7f:0f:22:81:8b:
                    68:10:1f:6c:80:35:3d:5c:e0:d4:74:eb:d6:76:0c:
                    29:9e:ae:c2:76:5a:52:c3:3d:04:5c:b8:1a:83:f0:
                    8b:27:05:b4:05:7d:4a:31:28:60:a2:43:df:7c:54:
                    67:03:cc:9d:34:dd:dc:6f:70:9b:6a:09:5b:6e:c6:
                    dd:00:52:2d:31:fd:33:1a:22:9c:c9:d0:f1:e9:18:
                    dc:f1:10:8d:16:5d:24:bc:4e:34:6f:cc:33:cf:2b:
                    66:45:8b:40:92:3b:dd:09:e0:9c:f0:5d:63:30:07:
                    b3:fe:9c:b5:68:21:ab:49:2a:cc:9e:6b:10:19:42:
                    3c:b1:e0:87:f0:83:2c:ae:b0:34:9f:29:a7:c3:72:
                    d8:0d:e5:96:0e:9e:d9:b2:3b:56:e2:22:82:0a:7c:
                    05:0c:e1:73:14:7a:fe:89:6c:ca:eb:24:62:1c:3c:
                    62:f2:db:46:0a:f5:a3:18:68:bf:7c:ff:36:61:92:
                    59:ab:14:37:58:e9:f1:43:ef:ab:5d:1e:64:be:cc:
                    95:e0:6f:bf:24:66:18:0a:96:78:5c:d9:c8:6f:12:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A0:69:15:27:35:B1:9F:DE:75:3E:B7:BD:90:09:3D:E1:11:67:BE
            X509v3 Authority Key Identifier:
                keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:ca:47:77:b2:84:8c:8a:18:b4:97:72:93:7c:fd:ff:9a:
         55:c4:53:62:6a:bb:4a:b3:93:09:ac:99:84:2c:2e:c1:97:12:
         4a:58:23:70:99:d1:da:79:63:62:eb:3d:80:b9:e8:42:a1:3d:
         d4:d2:ca:4c:2f:ab:4a:3e:fc:3f:65:39:d1:33:c8:07:d8:3e:
         5a:f2:2d:b3:dd:65:f8:7c:cf:38:57:5e:71:10:37:45:f7:a1:
         1a:53:3f:54:c2:c8:5a:d9:31:96:da:73:40:81:39:65:f1:5d:
         1b:fb:9b:8c:35:a4:0c:af:09:63:29:87:9a:72:4b:80:c9:0c:
         31:59:5b:4f:4e:b2:f7:98:bd:80:14:10:4e:f2:d1:d1:da:37:
         45:b5:0d:56:53:f3:cc:43:95:7a:fd:3e:42:77:38:f6:d8:f1:
         24:f6:fb:06:5a:31:42:14:28:b2:77:4b:2a:18:bd:b3:68:5c:
         8d:7f:cf:c1:b0:ab:c1:46:88:56:73:3e:ef:00:21:9d:7a:fe:
         15:81:c4:45:aa:57:7c:db:97:91:3a:3e:af:a1:8c:25:76:39:
         ee:33:36:34:73:db:8a:15:33:d2:aa:e4:a2:8f:22:ca:8d:46:
         f9:49:7e:c9:8f:ca:59:9a:f3:81:f4:c5:d3:d6:83:45:bd:14:
         10:95:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:00 2026 by rpki-client