Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
File:                     3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json)
Hash identifier:          CiWZg5ush20JS13ZRGPnQgAuPV9BgvUclTtPek2z4h8=
Subject key identifier:   EC:E5:4D:4E:65:92:5D:2E:AD:E5:8D:BF:5B:6C:4B:76:AE:8D:A9:C6
Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
Certificate issuer:       /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Certificate serial:       159F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
Manifest number:          1597
Signing time:             Wed 18 Feb 2026 16:32:03 +0000
Manifest this update:     Wed 18 Feb 2026 16:32:03 +0000
Manifest next update:     Wed 25 Feb 2026 16:32:03 +0000
Files and hashes:         1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: /Rk/1j1VkMEHWPbs+wtagd1jsAdAnTxm2Z/xaocClno=)
                          2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
                          rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5535 (0x159f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB
        Validity
            Not Before: Feb 18 16:32:03 2026 GMT
            Not After : Feb 25 16:32:03 2026 GMT
        Subject: CN=6995e983-d709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:c6:1a:79:65:15:1e:79:4f:0e:42:3d:8f:
                    ab:86:c1:ad:19:3b:49:a6:7c:da:7f:d3:4b:a1:ae:
                    ff:b6:60:e9:79:93:0a:ab:a4:14:a7:14:72:71:65:
                    a2:d6:8d:4d:a2:28:e9:48:16:7d:70:de:73:82:53:
                    59:06:ae:90:99:b7:57:7a:02:24:04:3b:5c:eb:ae:
                    dd:cd:38:72:e8:d9:80:f1:37:47:fb:94:5e:04:af:
                    62:da:13:b2:d3:85:03:6c:4e:eb:5a:9a:17:aa:b3:
                    3e:4b:cb:93:79:63:5a:ce:bd:5f:0b:9b:d4:71:3b:
                    5e:f4:ef:11:89:16:cb:d6:c7:02:93:a0:59:56:08:
                    5b:71:9e:70:66:36:ff:18:d3:c3:b1:78:24:8b:c3:
                    82:32:72:02:f9:cb:01:a8:54:b1:cf:fa:ae:39:37:
                    7a:db:15:8b:d6:1f:53:cf:62:2c:22:25:cf:6c:06:
                    fe:3c:11:f3:6d:c8:8a:c5:bf:62:85:8a:de:7d:03:
                    93:ca:73:78:e4:a4:d9:41:7e:7c:67:42:13:ad:61:
                    07:4c:a5:5f:42:43:f5:24:2f:62:f4:a3:44:02:2e:
                    c2:e5:f4:28:da:86:78:52:30:19:d2:7b:f2:60:7c:
                    08:81:4f:56:7a:90:37:8f:2c:51:fa:e5:f7:86:a8:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:4D:4E:65:92:5D:2E:AD:E5:8D:BF:5B:6C:4B:76:AE:8D:A9:C6
            X509v3 Authority Key Identifier:
                keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:39:18:b9:07:e7:89:85:41:ce:4c:42:7d:f6:10:2a:3b:94:
         af:d6:c0:38:8e:51:a0:c9:93:bc:38:be:b7:21:ff:b4:f0:88:
         d5:57:ba:e4:32:96:da:f0:38:b9:81:22:78:fc:93:dd:25:c7:
         f7:9c:31:71:b6:71:02:f1:27:39:c4:b4:52:24:59:11:c8:36:
         87:96:5a:6d:d7:58:cb:00:fc:34:08:f2:11:d8:c0:e6:ce:2b:
         2b:08:1a:a4:d6:05:e9:aa:da:e0:64:74:2f:8b:2f:a2:7c:70:
         3e:ec:f7:d4:7e:56:7f:29:b6:69:65:57:c1:bc:dc:23:f3:3b:
         11:0e:e9:14:c2:32:b3:d9:ae:df:fb:ea:d3:07:d4:bf:be:31:
         67:3d:7a:7d:5d:8e:eb:76:90:f0:e2:71:de:96:8c:6d:75:f8:
         58:ba:f0:e7:e8:ca:20:d7:1f:5f:3b:ef:af:c4:a0:99:b2:67:
         46:fe:fe:c1:f3:44:94:67:5b:9a:8f:3a:5d:b9:59:07:f7:99:
         7d:fd:29:8d:9d:3c:ec:3e:df:e1:92:b1:9e:5f:64:ca:bc:b3:
         60:80:e2:9d:4b:08:93:94:1f:61:c4:fc:9f:05:0c:18:3a:8e:
         a2:a5:97:41:de:4e:11:23:29:22:cb:b7:64:8c:b7:d4:a4:7f:
         d8:0a:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:50 2026 by rpki-client