Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
File:                     SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json)
Hash identifier:          y+XJwdSGXeO+erBYp8WG79pm5h/NWaQGWLGI7UGQS94=
Subject key identifier:   01:E3:32:59:8B:40:B1:63:AA:5F:7E:66:BC:80:EA:14:EA:B7:00:27
Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA
Certificate issuer:       /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
Manifest number:          47
Signing time:             Thu 19 Feb 2026 06:35:35 +0000
Manifest this update:     Thu 19 Feb 2026 06:35:35 +0000
Manifest next update:     Thu 26 Feb 2026 06:35:35 +0000
Files and hashes:         1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: 3GjrdX3AbF9yAoBsVmNrQDiEAsUWhMkg/NbseL+ECCg=)
                          2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl
                          rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA
        Validity
            Not Before: Feb 19 06:35:35 2026 GMT
            Not After : Feb 26 06:35:35 2026 GMT
        Subject: CN=6996af37-0600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:bf:54:7c:1d:20:1e:83:b7:9a:9c:45:66:
                    cb:bb:f0:7c:5b:0e:8d:2e:a4:47:6d:d1:e2:08:25:
                    7d:a5:1f:e4:ec:1b:6b:a8:91:19:f8:62:d3:e1:99:
                    a8:da:01:1f:45:2c:a4:42:a1:89:4b:c6:eb:6e:89:
                    02:a4:b9:13:7e:69:ea:3d:d6:e9:16:d7:84:d7:22:
                    c3:61:5e:28:e6:58:a5:0e:72:90:4d:0b:9c:6f:d1:
                    d5:aa:5e:3d:67:e6:f4:2a:d2:91:0c:25:36:8e:52:
                    e1:33:22:06:98:5d:d8:82:c8:02:2d:06:96:1d:2b:
                    20:34:e3:b2:0e:3c:80:74:ab:8b:4e:23:3b:19:71:
                    2e:95:11:93:3f:1e:6b:ec:f7:00:57:55:e3:b3:37:
                    30:60:aa:a8:b9:6c:d0:1d:54:49:06:11:8c:28:90:
                    6d:47:e9:cd:02:f3:d7:d9:b9:be:e6:0a:b3:af:11:
                    a3:e5:5b:d6:89:ca:b7:ab:b4:f1:17:06:e7:28:37:
                    9f:2b:a7:c8:4f:a5:8b:99:f4:46:2e:a1:4c:b0:90:
                    a3:15:0d:3a:dc:1d:2b:70:ba:af:b7:a6:86:39:72:
                    22:4f:c0:04:1d:f0:fb:39:cc:6a:65:8d:aa:ed:76:
                    f5:39:82:5c:e1:13:85:c6:a7:4a:a6:5a:f4:33:ed:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E3:32:59:8B:40:B1:63:AA:5F:7E:66:BC:80:EA:14:EA:B7:00:27
            X509v3 Authority Key Identifier:
                keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:8f:dc:a9:6e:94:44:ad:2f:79:6c:0f:95:cc:15:4a:e8:
         ea:eb:84:8d:17:22:c0:58:d3:03:41:a0:ab:9c:be:71:1c:22:
         2b:2e:f6:2c:60:03:e1:ea:3e:f3:33:c8:d0:7a:2d:f9:a6:30:
         61:cf:d4:65:34:2f:bc:c7:66:f7:78:ab:cc:5e:66:e2:42:0a:
         8a:a6:fb:e9:9a:1d:4a:ce:3c:07:7f:c5:b5:ad:9f:cc:36:02:
         8d:97:c6:2d:74:5b:90:ae:1b:14:2c:a1:a3:05:1d:42:6c:36:
         e0:ef:a4:a6:29:d9:b3:b1:77:75:a8:67:b5:3d:6c:84:a2:d1:
         ff:29:9e:48:2c:73:06:87:4f:a6:2e:5b:26:62:4f:d9:61:ee:
         ff:23:ac:a5:83:31:6f:3f:24:cf:5c:2e:33:be:06:8f:4b:4d:
         fe:b4:ff:5b:8d:02:36:4f:bb:03:23:52:41:54:46:ec:20:4c:
         26:60:9e:d5:c0:eb:28:36:c3:94:e6:a9:13:8d:31:fe:96:07:
         a7:c3:23:7e:56:c8:4c:58:6f:14:99:76:4d:83:f8:91:42:16:
         1f:ca:f0:37:79:5a:21:f6:e9:28:58:6f:16:94:61:f2:ed:8c:
         41:7f:3e:57:76:f6:8d:f1:f8:0d:4d:2a:2f:08:0b:99:5f:f3:
         83:75:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:02 2026 by rpki-client