Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File:                     tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier:          vw7yGci3bYC3LNCrVJWy67AqJlZMwpDrnFgYvf3CLrw=
Subject key identifier:   E6:1D:1E:32:28:65:16:65:28:2A:DC:12:B7:13:26:AB:98:D8:05:35
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer:       /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial:       0CD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number:          0CCB
Signing time:             Wed 18 Feb 2026 17:57:54 +0000
Manifest this update:     Wed 18 Feb 2026 17:57:53 +0000
Manifest next update:     Wed 25 Feb 2026 17:57:53 +0000
Files and hashes:         1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: jl5Wxsgk5RTg6mk5JjA0MBAxeWNdhb5ctNcnMgpwInk=)
                          2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: Tom7u2KILmaBR19TjEIpuUPoq7F9nKzmH+Ll43MgfGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
                          rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3285 (0xcd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
        Validity
            Not Before: Feb 18 17:57:53 2026 GMT
            Not After : Feb 25 17:57:53 2026 GMT
        Subject: CN=6995fda1-b2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:9c:61:3f:78:a8:81:0b:60:b6:87:2d:6d:
                    4c:a6:7d:41:7a:18:1b:3f:a6:a0:85:d0:81:40:41:
                    26:01:90:f6:91:d0:31:c2:91:59:0a:01:a0:9e:32:
                    5b:d4:c7:e3:b0:4f:3f:c4:65:7b:90:2c:46:5f:31:
                    8c:77:cc:07:11:9a:4d:4a:55:c0:b7:a8:10:87:e0:
                    71:12:32:a7:34:d2:57:7b:35:88:0d:8f:b9:bf:66:
                    1a:5b:f2:06:16:b7:b7:53:da:9d:4f:34:3f:58:8e:
                    c0:4a:81:26:24:7e:5b:08:e1:83:15:41:df:8c:5d:
                    f2:30:85:2e:d7:2f:1d:c5:0a:2b:9b:7b:bd:e8:e3:
                    b1:6b:a6:54:0b:93:60:0b:35:00:ef:ac:e1:3f:7c:
                    19:3c:af:58:23:c3:3b:55:cd:1e:76:ea:08:92:77:
                    c3:b9:67:e3:2d:f0:b9:a1:eb:cd:f6:9c:de:15:7c:
                    80:a9:80:9d:b5:3c:58:50:ce:25:6a:72:91:75:0d:
                    bc:b5:01:57:b2:de:3d:e9:77:30:38:01:6c:77:c4:
                    4d:44:0e:5f:50:3e:d6:36:14:6a:c5:41:83:97:14:
                    70:3f:ec:56:f2:30:7b:19:5a:3d:f4:28:e1:9a:fc:
                    5c:10:51:e6:37:2f:f6:79:48:4d:ac:de:c5:49:0f:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:1E:32:28:65:16:65:28:2A:DC:12:B7:13:26:AB:98:D8:05:35
            X509v3 Authority Key Identifier:
                keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:49:1a:7f:3c:56:06:09:29:00:e4:e6:25:30:94:19:20:28:
         f6:4d:58:2e:81:ab:e0:83:f0:bc:d9:56:1a:20:94:7b:e3:29:
         1c:c4:37:d4:7f:7c:6e:88:4f:59:eb:7a:42:b7:0f:9a:e5:2e:
         6f:0e:fb:62:2a:63:30:21:e0:f5:a3:73:03:0c:b8:13:c7:8a:
         a4:1d:29:e8:66:32:eb:52:51:49:96:13:43:d5:44:b5:c9:d3:
         f6:56:3d:15:d1:6a:45:73:da:60:f5:25:cb:89:c4:fe:fe:fb:
         83:91:8f:76:e3:36:da:b6:bd:9c:3c:c7:70:27:09:40:2f:c2:
         bc:2c:fd:c9:43:de:eb:76:89:9d:ae:07:da:cb:eb:40:c7:07:
         de:20:11:54:c3:23:38:81:b6:32:ed:4a:23:db:ac:81:3c:b5:
         16:35:7d:94:6f:8e:06:c4:d0:80:17:4c:89:35:db:15:03:fc:
         ed:ad:09:65:93:92:d4:8f:3a:f6:37:49:f7:f8:a4:94:ae:66:
         66:51:14:d7:8e:33:d1:cb:a8:00:fa:31:4a:59:8a:ec:18:02:
         af:98:de:7c:5e:9d:73:59:3b:10:34:ee:f7:aa:23:26:ca:a3:
         1d:c8:3c:08:38:3b:c4:91:05:34:8a:0c:2f:64:d2:24:a6:74:
         b2:fb:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:16 2026 by rpki-client