Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
File:                     CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json)
Hash identifier:          eyI+Bg8BqIe+VUvYTSk82izw3YCBsNNo0rWs+QKtOTQ=
Subject key identifier:   71:AA:7C:19:8E:99:4C:8A:96:B5:FD:AF:07:C2:30:8F:B1:54:8E:45
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Certificate issuer:       /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
Manifest number:          0500
Signing time:             Wed 18 Feb 2026 22:57:41 +0000
Manifest this update:     Wed 18 Feb 2026 22:57:41 +0000
Manifest next update:     Wed 25 Feb 2026 22:57:41 +0000
Files and hashes:         1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: 6IcX8PKhFoy0h3PYPCWQbJH+hcuS4tg6oDIm60e5WUs=)
                          2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: PC3JLVy9ph8UWlBC5sdOTbv0EvOcfdPL1O4IKJVccxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
                          rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
        Validity
            Not Before: Feb 18 22:57:41 2026 GMT
            Not After : Feb 25 22:57:41 2026 GMT
        Subject: CN=699643e5-b834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:b7:5c:3e:b4:17:b3:12:0f:4f:75:d7:fc:
                    eb:9b:c4:c9:f1:9b:09:ef:20:66:1d:2e:3d:49:ec:
                    ec:51:d2:cd:73:87:39:7f:f9:50:fc:bc:f8:27:8c:
                    6e:a2:14:dc:1a:b7:d2:bf:2b:37:3f:16:fd:e4:d9:
                    b7:91:2d:bd:e3:73:79:17:5f:79:bb:27:3d:66:ad:
                    23:60:d8:f7:40:98:63:f8:e0:39:9f:1f:7e:0d:76:
                    36:18:3d:5f:47:72:c1:0f:3c:9a:ed:f1:df:3d:95:
                    45:b9:ee:01:1a:e7:d1:86:49:51:34:87:35:5c:61:
                    59:71:ab:22:35:5d:eb:ee:e8:4b:4f:b2:0c:b9:65:
                    12:96:08:b7:f0:b2:78:66:3e:98:8e:61:71:13:0f:
                    35:4b:f7:6f:f8:9a:29:eb:e7:1c:6d:a8:98:9f:3c:
                    be:0c:31:05:28:16:43:86:3f:07:aa:a2:35:3e:87:
                    8f:e1:fd:33:25:92:6d:cd:a0:aa:46:0b:34:85:92:
                    78:df:9d:aa:e1:2e:aa:8b:1f:f0:12:89:ab:19:2c:
                    bf:0d:96:49:e0:68:ab:66:f7:74:ba:c6:69:f3:7c:
                    7c:b6:d1:ee:f9:09:41:1e:9e:a1:c0:e2:dd:c0:f2:
                    23:9a:7e:3e:5a:f0:c8:f2:85:b5:c2:8d:6f:3f:14:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:7C:19:8E:99:4C:8A:96:B5:FD:AF:07:C2:30:8F:B1:54:8E:45
            X509v3 Authority Key Identifier:
                keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:41:68:19:52:48:4a:ca:8b:4f:6a:e8:b5:69:0c:5c:70:fc:
         9a:5f:39:60:00:49:09:fa:ee:36:00:e0:bc:56:15:3d:57:33:
         5c:50:a2:0d:45:29:04:78:bc:b4:13:89:ba:1a:ed:69:e8:a5:
         e1:cb:78:fd:b6:58:d2:c4:2e:b5:8a:77:c5:b2:19:9a:06:88:
         14:07:6f:04:aa:fd:8a:17:82:86:9a:0f:a4:5a:a9:51:03:a0:
         13:19:ec:ed:db:14:20:5e:84:24:d3:2e:2a:15:c0:1d:83:4c:
         4c:b2:5a:cb:e0:37:9f:78:0f:33:30:8a:66:1a:25:6a:30:75:
         ba:4b:96:54:9b:2a:3f:40:52:6f:fd:bb:50:bb:ba:03:86:9a:
         05:60:5d:7c:e8:09:9d:a0:d7:5a:a6:6e:38:a6:2b:58:c1:e9:
         e3:ce:2a:c2:86:ea:00:cb:f8:e4:2b:df:f3:5e:8c:fc:18:dd:
         49:a5:4d:c6:e1:10:b0:90:21:96:b6:48:ba:cf:58:57:a4:fb:
         67:42:1a:74:92:7b:eb:08:d0:d6:22:d9:20:7c:29:60:75:04:
         83:e6:0b:bf:c4:5e:2a:a5:cc:ac:d8:80:2c:47:35:0c:5e:19:
         b2:59:2d:94:7c:c0:ee:27:53:e5:4b:69:ea:26:97:13:40:40:
         bf:4b:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:00:17 2026 by rpki-client