Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File:                     ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier:          SgCdcXH805Vx+XigmUMan3kU+hBYKFwjWArCKkJMWJ4=
Subject key identifier:   3A:1D:A9:D2:E4:1D:FF:B3:7A:B0:C1:62:0E:E7:BF:24:D2:61:68:A4
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer:       /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number:          4F
Signing time:             Thu 19 Feb 2026 06:30:28 +0000
Manifest this update:     Thu 19 Feb 2026 06:30:28 +0000
Manifest next update:     Thu 26 Feb 2026 06:30:28 +0000
Files and hashes:         1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: 98AFEEu03rP600iNBmZ4AykaxdnkF0iUYcG3wMi5cjo=)
                          2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
        Validity
            Not Before: Feb 19 06:30:28 2026 GMT
            Not After : Feb 26 06:30:28 2026 GMT
        Subject: CN=6996ae04-8700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:d7:55:d0:88:61:37:87:85:dc:19:e3:14:
                    64:a2:a1:9b:ce:31:6d:d3:bd:a0:b9:f0:59:db:ec:
                    b7:35:f3:74:60:76:73:89:9c:57:d2:01:b4:66:ca:
                    85:be:cc:41:12:24:b7:65:ae:15:da:03:2a:27:64:
                    54:47:ee:e9:09:54:d8:c4:ce:90:c0:b4:f8:01:fc:
                    3e:22:5c:f7:59:00:3a:4c:2d:9c:e8:15:5f:f6:b4:
                    18:95:36:94:ef:a8:55:21:a2:02:d7:84:a9:fc:45:
                    b7:1e:df:90:c0:98:54:8d:76:62:bb:f0:d4:9f:00:
                    c3:49:74:ca:6b:e8:fc:eb:00:c9:b1:d0:56:14:df:
                    31:ee:fd:25:3b:67:98:35:10:26:dd:4e:32:a6:bb:
                    ad:77:f5:84:11:13:f3:1e:2d:c7:2f:d3:8a:23:ab:
                    9d:f3:4c:d2:5c:49:93:6d:d2:da:28:36:9f:25:d7:
                    5f:80:4b:c2:1f:e5:25:95:b8:ae:ea:c8:6e:f3:22:
                    32:f6:ac:c7:8f:1c:e1:c7:2f:91:11:d6:64:68:44:
                    f2:19:14:76:03:f5:3a:21:ed:c2:38:2a:e8:e9:47:
                    d3:39:b9:30:9f:50:eb:ea:2d:68:87:47:eb:a2:ec:
                    0b:72:04:39:e6:58:16:9f:dc:7d:92:de:9f:b6:d2:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:A9:D2:E4:1D:FF:B3:7A:B0:C1:62:0E:E7:BF:24:D2:61:68:A4
            X509v3 Authority Key Identifier:
                keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:f4:e0:66:5d:4d:d3:c3:bf:04:86:48:cb:33:1a:ba:b2:
         16:d2:7e:4b:ce:e2:b5:4b:d2:c3:aa:3b:f5:71:30:75:46:e7:
         a6:61:18:c9:3f:1a:5f:46:63:da:60:5e:ba:c1:fd:ab:db:1c:
         d8:33:f5:a5:c3:b3:20:2c:3f:e7:f7:ce:9e:15:0e:46:a3:6e:
         00:87:61:d8:92:9f:92:b1:28:5f:2e:62:fc:68:95:e2:5a:00:
         77:d8:ef:52:c0:e9:ac:94:88:8d:e9:59:51:d2:9c:45:2a:1d:
         00:9f:98:72:35:e2:d4:82:5f:74:fa:4d:8d:68:0b:ed:b6:26:
         f6:05:29:ac:bb:dd:87:01:ff:22:a7:92:7b:5a:94:7c:7e:4d:
         ba:76:c0:35:11:0e:72:52:c5:0b:d0:43:53:bb:76:1e:1f:7f:
         d5:c0:03:53:f4:8b:11:74:46:dc:6f:58:32:c9:fc:4c:ad:8f:
         13:9a:b1:da:7d:1e:32:36:ba:9a:4a:bc:9e:cc:aa:b2:1f:58:
         85:c1:96:25:0d:57:85:90:7a:00:d4:6d:1b:bd:8c:0d:c6:c8:
         f3:9a:b8:c5:4d:ef:78:36:87:47:5e:1d:85:8b:21:62:bf:0e:
         f8:2f:e0:ee:64:b5:cb:4d:01:71:e2:e6:18:c5:64:16:18:83:
         ea:0a:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:51 2026 by rpki-client