Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File:                     CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier:          HDaqg+635FxeSBO/qu0W45SjIaylggVbKdcY6dFfJgg=
Subject key identifier:   1E:63:D4:8F:D9:2F:B1:08:50:E9:66:7E:09:47:02:95:21:DB:F6:3C
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer:       /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number:          D5
Signing time:             Thu 19 Feb 2026 05:03:11 +0000
Manifest this update:     Thu 19 Feb 2026 05:03:10 +0000
Manifest next update:     Thu 26 Feb 2026 05:03:10 +0000
Files and hashes:         1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: ntERWP4DlLYp0JX6Kzznu2qEjRhaA09pFDIsfOEzIE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
        Validity
            Not Before: Feb 19 05:03:10 2026 GMT
            Not After : Feb 26 05:03:10 2026 GMT
        Subject: CN=6996998e-f5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:e6:7b:36:97:04:c8:dc:d4:b9:73:6c:91:
                    75:a4:17:49:74:7e:7a:e3:cb:4b:51:3c:f4:45:c4:
                    16:ac:64:18:eb:7d:2a:9f:ff:75:90:f0:5e:85:2e:
                    89:69:0d:d4:bb:01:9a:c5:64:8d:91:f5:2a:f3:45:
                    7c:6c:b8:39:9e:51:bc:0a:f8:2e:c5:42:20:89:6e:
                    3f:05:25:19:3e:a4:ce:33:af:e9:6e:76:0f:4f:2d:
                    c3:c3:e9:ed:d3:95:d5:6e:c9:8e:ac:8f:4a:3e:2b:
                    1f:0e:29:f6:5b:07:6b:f7:04:f7:50:5d:19:bf:86:
                    32:02:f9:8d:7d:c7:cf:e9:a9:7d:33:4a:e7:58:cb:
                    dc:4c:b0:25:42:50:9d:d3:78:38:31:43:3c:07:5c:
                    48:20:92:05:58:bf:48:11:15:3f:f7:c3:5e:72:27:
                    41:ca:5c:8d:02:51:4d:93:08:5a:3b:c2:8c:26:a8:
                    82:9f:3c:5a:44:c4:58:70:a7:9f:d6:05:34:92:c4:
                    63:21:63:b5:6c:97:9c:eb:6f:f3:bd:26:65:22:e6:
                    35:a3:d2:71:27:37:00:07:27:cd:79:54:f3:47:e5:
                    ad:06:90:bd:9e:a7:cc:0e:ed:d2:d6:d2:cf:1e:4f:
                    79:c2:28:ce:93:ec:94:29:ba:4d:3d:30:62:a1:d9:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:D4:8F:D9:2F:B1:08:50:E9:66:7E:09:47:02:95:21:DB:F6:3C
            X509v3 Authority Key Identifier:
                keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:30:e2:46:c7:d3:34:64:6f:33:39:06:ad:b3:e6:d7:30:
         1c:4a:51:12:f0:6e:c5:7d:f9:e9:c1:4e:98:0e:66:21:68:70:
         71:c3:a5:5c:a8:de:09:bd:42:df:81:44:42:b6:f4:da:29:21:
         06:df:c0:0d:af:63:b1:33:c4:87:00:32:bb:10:0a:09:28:97:
         37:d5:39:88:67:b5:f0:23:64:e1:ca:0b:c6:4c:7a:f1:28:dd:
         c8:95:6d:72:d2:3c:70:ee:3c:de:8c:b0:1d:12:4c:f1:62:86:
         01:72:48:d4:97:49:7e:14:cd:d9:96:bb:7c:1d:a6:1e:da:81:
         2a:98:3b:da:91:4f:fd:b2:fc:1c:18:0c:30:27:85:37:eb:b9:
         5e:8e:2d:49:c5:e8:97:72:e6:17:13:0b:33:04:ef:c2:95:f1:
         ab:00:b0:8c:9e:89:e8:cb:00:70:ad:7d:06:d9:05:46:31:02:
         94:f2:fc:40:29:1d:76:c7:2e:29:a7:7b:51:43:b5:bb:56:18:
         87:1a:36:e7:6a:8e:b1:91:24:b3:36:79:5f:9a:8d:55:31:15:
         00:4e:e5:25:d3:1a:76:34:5b:33:cc:3f:13:07:9c:0e:c6:8b:
         df:98:42:be:bc:dd:a0:b7:b4:24:2e:80:32:bc:bc:60:14:9c:
         ba:1e:fd:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjE4QkIxMTAvBgNVBAUTKDA4RUZENzE5MzhGN0Y5REM4N0E2OUY1Q0IzRjg0QzdB
NEI3MkEwMEEwHhcNMjYwMjE5MDUwMzEwWhcNMjYwMjI2MDUwMzEwWjAYMRYwFAYD
VQQDDA02OTk2OTk4ZS1mNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEjmezaXBMjc1LlzbJF1pBdJdH5648tLUTz0RcQWrGQY630qn/91kPBehS6J
aQ3UuwGaxWSNkfUq80V8bLg5nlG8CvguxUIgiW4/BSUZPqTOM6/pbnYPTy3Dw+nt
05XVbsmOrI9KPisfDin2Wwdr9wT3UF0Zv4YyAvmNfcfP6al9M0rnWMvcTLAlQlCd
03g4MUM8B1xIIJIFWL9IERU/98NecidBylyNAlFNkwhaO8KMJqiCnzxaRMRYcKef
1gU0ksRjIWO1bJec62/zvSZlIuY1o9JxJzcAByfNeVTzR+WtBpC9nqfMDu3S1tLP
Hk95wijOk+yUKbpNPTBiodm3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5j1I/Z
L7EIUOlmfglHApUh2/Y8MB8GA1UdIwQYMBaAFAjv1xk49/nch6afXLP4THpLcqAK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMThCQi83MUQ1MDYyRUM4
QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9DT19YR1RqMy1keUhwcDljc19oTWVrdHlv
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NPX1hHVGozLWR5SHBwOWNzX2hNZWt0eW9Bby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MThCQi83MUQ1MDYyRUM4QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9DT19YR1RqMy1k
eUhwcDljc19oTWVrdHlvQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARozDiRsfTNGRvMzkGrbPm1zAcSlES8G7FffnpwU6YDmYhaHBxw6Vc
qN4JvULfgURCtvTaKSEG38ANr2OxM8SHADK7EAoJKJc31TmIZ7XwI2ThygvGTHrx
KN3IlW1y0jxw7jzejLAdEkzxYoYBckjUl0l+FM3Zlrt8HaYe2oEqmDvakU/9svwc
GAwwJ4U367leji1JxeiXcuYXEwszBO/ClfGrALCMnonoywBwrX0G2QVGMQKU8vxA
KR12xy4pp3tRQ7W7VhiHGjbnao6xkSSzNnlfmo1VMRUATuUl0xp2NFszzD8TB5wO
xovfmEK+vN2gt7QkLoAyvLxgFJy6Hv26
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:12 2026 by rpki-client