Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
File:                     8GBCLBdcmuWu18weKBDySX-NlZo.mft (raw, json)
Hash identifier:          tFvuzGpTho1aMZWWQ7Im7bdfkT4pBN8qDXXPc0qFU0Y=
Subject key identifier:   E8:23:EC:CB:1A:6C:8A:0E:A5:2E:68:3C:70:D3:1B:59:32:3A:F1:31
Authority key identifier: F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A
Certificate issuer:       /CN=A91491CC/serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
Manifest number:          4D
Signing time:             Thu 19 Feb 2026 06:33:03 +0000
Manifest this update:     Thu 19 Feb 2026 06:33:02 +0000
Manifest next update:     Thu 26 Feb 2026 06:33:02 +0000
Files and hashes:         1: 8GBCLBdcmuWu18weKBDySX-NlZo.crl (hash: /t/fnFgH07WllTXiK09MeRCaeytgQ+v3hmjttEKB5HI=)
                          2: 3283B8BE9A0F11F0BC057E7DC4F9AE02.roa (hash: 5nJEi+gK08dqnKCqeNdYXt9YEVy/CsaGnAGB6m4ykBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl
                          rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91491CC, serialNumber=F060422C175C9AE5AED7CC1E2810F2497F8D959A
        Validity
            Not Before: Feb 19 06:33:02 2026 GMT
            Not After : Feb 26 06:33:02 2026 GMT
        Subject: CN=6996ae9f-e677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:9a:55:34:a2:ab:1d:68:59:e6:5f:96:94:
                    a7:5e:78:b0:c1:6f:cc:ed:99:84:e2:f3:4c:0d:07:
                    e6:28:63:72:36:0c:8f:2a:81:c9:36:0f:d3:0a:b7:
                    78:c6:7e:0e:1a:42:81:b0:98:5a:41:fc:03:ac:43:
                    7f:24:3c:e1:99:42:8e:73:f0:d2:4c:59:97:a3:67:
                    7f:1f:8b:d6:90:cf:20:c1:ea:33:97:5d:cf:c6:55:
                    a0:73:ff:b6:e4:3b:85:6a:ca:ff:90:15:15:c8:03:
                    05:61:06:59:4b:d1:a4:2c:8d:79:d3:0d:39:ac:df:
                    ff:d4:f4:6e:e3:97:42:e6:68:54:d7:ef:d7:83:33:
                    e5:88:e3:03:7f:a3:aa:c2:35:03:0d:c3:ed:a7:ff:
                    08:8f:f9:44:f9:f5:4a:e2:3b:01:eb:df:c6:37:55:
                    de:0a:13:18:9f:d1:79:87:3f:04:ea:13:9e:bd:6c:
                    b0:15:7a:1c:46:c4:14:b3:61:8e:6a:ce:3e:94:74:
                    b7:d0:a7:94:d5:fb:5f:21:8c:d1:2b:0d:4f:69:e7:
                    f8:b1:9d:28:e3:00:83:d3:51:35:0f:69:89:45:a9:
                    de:e6:4f:1f:69:4c:c9:53:fe:ea:5f:7e:14:7e:17:
                    9a:ba:44:e2:c2:39:67:86:a2:0e:9b:f8:15:9a:42:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:EC:CB:1A:6C:8A:0E:A5:2E:68:3C:70:D3:1B:59:32:3A:F1:31
            X509v3 Authority Key Identifier:
                keyid:F0:60:42:2C:17:5C:9A:E5:AE:D7:CC:1E:28:10:F2:49:7F:8D:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GBCLBdcmuWu18weKBDySX-NlZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/A6E23B789A0E11F089C88B7CC4F9AE02/8GBCLBdcmuWu18weKBDySX-NlZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4b:a2:a9:23:63:14:bc:99:3b:4d:25:a6:7a:6c:1b:5a:d7:
         32:9e:53:5c:7c:6e:77:a7:8a:14:8e:42:50:55:a4:3a:fb:d4:
         b5:89:2d:20:f4:df:d7:b2:76:ed:72:95:ab:f6:9e:9d:4f:aa:
         46:72:63:99:97:20:e4:6e:b8:79:1d:e4:a0:68:cc:b5:68:0f:
         7a:af:15:f2:1e:90:cf:71:a5:07:79:1e:34:40:92:f1:0b:0e:
         69:f1:c7:e3:32:52:0e:f8:dc:b5:53:23:20:b0:57:96:3e:d9:
         7b:71:cd:80:8b:5b:ca:91:58:91:fe:85:3d:d6:84:8f:38:ec:
         40:96:b7:1a:2c:f4:ce:6b:d5:45:11:67:51:9c:bb:81:25:cd:
         6e:05:ab:a8:13:3c:25:58:6e:18:53:a9:66:0b:d8:9a:76:da:
         c2:00:0e:f4:09:f3:88:6a:20:a8:5f:ed:fc:e8:06:c5:68:31:
         d3:ca:21:99:ee:02:1d:df:d8:69:05:af:c1:2d:fa:8a:f1:26:
         d4:7d:58:78:0d:1f:4e:56:8a:3e:12:41:fa:2f:f1:d4:fb:ac:
         d5:5c:4e:34:e5:20:1f:35:80:ee:8f:87:57:f7:b9:39:b4:88:
         2a:a5:a9:f6:66:48:8e:fe:33:3c:f2:16:f8:23:8a:6e:2a:5a:
         e2:4a:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:42 2026 by rpki-client