Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
File:                     sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json)
Hash identifier:          4vzlABIXGALxN7CxpATgBwhcnIOllubnM56ZDIsJYrk=
Subject key identifier:   7D:9E:34:08:BB:80:19:24:4D:36:3C:30:84:02:45:E6:4D:B0:90:3F
Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50
Certificate issuer:       /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
Manifest number:          85
Signing time:             Thu 19 Feb 2026 05:58:22 +0000
Manifest this update:     Thu 19 Feb 2026 05:58:21 +0000
Manifest next update:     Thu 26 Feb 2026 05:58:21 +0000
Files and hashes:         1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: zaCM5bc8WUjN6WI+4153mZrVdy51/G8lE0hwoEJeljM=)
                          2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: NrM1GT0GOIEPUd0x6/lOomv0lodf7Nxw+vo5Gb1q27Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl
                          rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550
        Validity
            Not Before: Feb 19 05:58:21 2026 GMT
            Not After : Feb 26 05:58:21 2026 GMT
        Subject: CN=6996a67e-8e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:67:24:a3:3b:71:b6:54:9a:d8:5f:ae:71:
                    cf:ad:42:6c:5f:95:36:97:fb:9d:76:f4:ba:c3:a1:
                    1a:df:37:2e:f5:5f:54:97:15:ea:30:43:06:4a:cc:
                    c3:28:48:a7:1d:8a:f7:c4:fa:f6:70:19:f0:ee:32:
                    e6:57:3c:17:35:19:ce:6d:ec:3f:17:4b:80:a9:63:
                    11:24:81:60:13:ad:52:f2:cc:3f:1d:4a:ce:cf:91:
                    af:bd:69:90:f5:9e:5e:7e:b5:5d:95:65:b0:59:a2:
                    91:07:17:11:1b:d8:22:07:cd:77:87:13:c3:02:25:
                    8c:3e:a1:0a:ce:80:ca:4f:d7:a9:c7:7e:87:0e:44:
                    19:38:03:05:16:f5:9e:8f:c7:85:72:f0:18:fd:a8:
                    65:48:b6:6a:e0:41:e3:4a:33:44:38:80:66:41:03:
                    1f:d8:b1:83:13:f8:fd:8d:32:6b:00:f9:5b:56:91:
                    c1:65:b5:0d:16:3d:13:16:c4:9d:94:85:83:0c:00:
                    ae:99:05:58:cc:f5:a1:0e:a9:dd:82:b0:06:d4:50:
                    66:24:18:e0:82:3f:28:33:39:61:bc:09:fa:2d:20:
                    1a:1e:5c:fc:81:13:a1:44:60:5f:59:fb:a3:41:6f:
                    54:21:58:6d:49:19:1f:fb:c4:fa:8e:e7:5f:87:22:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:34:08:BB:80:19:24:4D:36:3C:30:84:02:45:E6:4D:B0:90:3F
            X509v3 Authority Key Identifier:
                keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:b4:09:57:24:2c:5d:f2:1a:b9:82:5d:73:a4:a6:11:97:
         b1:10:f8:f9:be:b0:c4:a0:e1:0b:d0:0a:21:ca:3f:06:d4:7e:
         b8:ac:b4:95:ca:fd:22:a3:0c:fc:35:5b:f4:ee:a7:5e:ab:76:
         ff:2b:46:a8:e8:44:0e:b1:c5:5e:b0:7c:38:6d:70:c8:31:9e:
         02:96:c0:a7:68:f4:93:1f:7e:ae:b4:30:23:a6:15:36:93:08:
         53:3a:75:e2:0c:c8:fa:73:0e:5e:f8:11:e5:32:ad:ca:fc:d0:
         6c:0f:b4:32:94:30:80:bc:60:63:35:30:2c:57:55:af:a8:b9:
         09:9f:4e:4f:d8:18:a0:fc:00:fb:f8:19:e5:fa:42:97:9a:a1:
         ee:ca:5f:2f:a5:a9:3a:ac:12:01:2b:4b:ee:f3:6c:4b:42:e4:
         7a:e2:38:f7:98:ac:b7:46:f4:0c:90:94:78:39:e6:4b:91:16:
         d7:e6:b2:d2:90:fe:ba:45:27:a6:9c:2c:fa:12:9c:cf:19:2e:
         ca:7d:e2:18:ec:df:16:8f:30:74:a4:7a:f7:4b:ef:45:82:2c:
         28:ed:b2:03:9c:a8:89:bd:c1:c4:97:3d:24:86:65:ef:39:b2:
         75:44:2b:91:06:71:f5:9b:0c:4b:cc:77:17:7e:8c:34:a5:f4:
         34:fc:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:26 2026 by rpki-client