Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File:                     X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier:          ggB32WM69x8mvnePv17QM8znr7mdA3QaBW/RboHHHp0=
Subject key identifier:   CF:8C:DC:4D:D6:57:2C:76:A7:38:CB:29:DC:76:52:46:2A:67:35:EF
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer:       /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial:       350C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number:          350C
Signing time:             Wed 18 Feb 2026 14:35:44 +0000
Manifest this update:     Wed 18 Feb 2026 14:35:43 +0000
Manifest next update:     Wed 25 Feb 2026 14:35:43 +0000
Files and hashes:         1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: uOoh6Um5cTaVA7sfiRJ8Cl6cb66fkkH9iwsu2GELx3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
                          rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13580 (0x350c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
        Validity
            Not Before: Feb 18 14:35:43 2026 GMT
            Not After : Feb 25 14:35:43 2026 GMT
        Subject: CN=6995ce40-6c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:37:98:1a:dc:43:54:b0:21:25:a3:f3:2c:
                    5f:1b:12:15:43:06:b2:29:ff:67:69:a3:5c:51:94:
                    f8:2c:2b:3e:a3:5b:1a:e7:92:c3:14:23:80:b6:c3:
                    bd:40:2e:1c:1b:c5:60:14:14:46:1b:02:9e:e4:c3:
                    f9:c6:9e:c2:ac:5c:f1:79:91:a0:cf:09:3c:36:c7:
                    28:d5:f1:64:c6:32:00:fb:e1:47:f1:5d:2c:23:f6:
                    a6:bc:b9:bc:74:c8:8d:41:59:3a:43:fc:e3:3f:28:
                    e8:a4:dd:24:3d:d4:74:fb:35:fa:e1:9d:6e:50:ee:
                    21:a7:73:1a:c4:10:ba:e2:45:55:ae:d4:76:35:fa:
                    45:9b:51:05:10:35:a7:7d:71:be:55:f8:d8:2e:58:
                    6c:1f:d6:49:6b:23:b4:05:cc:d5:69:fa:6b:20:b8:
                    c3:54:1f:93:53:68:e9:f0:e8:73:47:e2:08:e7:41:
                    b1:d8:a8:5a:7f:be:c2:e5:a3:42:7c:c6:5e:81:c8:
                    93:0d:21:36:43:9a:d9:d3:2a:4d:9e:3e:d7:9f:bd:
                    08:e7:0f:41:f6:cf:f1:6d:6d:4e:59:dd:8a:a5:60:
                    fe:ec:ad:fe:11:e7:c4:a8:29:d2:7c:d8:bc:62:8c:
                    39:1e:ee:64:00:36:e7:e2:02:1f:f1:37:e9:ab:ac:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8C:DC:4D:D6:57:2C:76:A7:38:CB:29:DC:76:52:46:2A:67:35:EF
            X509v3 Authority Key Identifier:
                keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e0:31:26:b6:d7:09:31:c3:04:4e:ef:f5:0f:34:41:ad:df:
         0d:3f:77:cc:7c:e8:61:6e:e6:50:8e:08:1b:1a:03:6e:44:1d:
         39:21:a8:8a:0f:b5:2a:1e:8c:f2:2d:69:63:c5:ca:fd:38:3e:
         cd:5f:70:cd:f3:9e:d3:20:a3:3d:2f:f9:c2:fe:76:60:f1:17:
         9d:57:52:db:9f:ab:b5:b1:40:7f:f6:c8:6f:ca:0b:1f:60:c6:
         85:cd:d8:da:8a:42:65:3c:86:2d:14:78:22:41:57:fe:8f:ae:
         ce:d7:20:bf:3f:91:20:be:63:ad:c9:ec:70:01:9a:4f:ee:fc:
         01:52:86:02:69:2c:ac:c1:c2:ce:e9:41:52:e1:12:ef:e8:de:
         80:07:c9:64:45:dd:37:0f:5c:c7:3b:b4:9c:30:00:18:60:f4:
         f4:40:e1:8f:54:54:b0:02:f8:8b:d2:74:9f:c5:8a:11:09:93:
         36:de:ce:2b:c9:10:ce:f4:89:4e:10:62:51:72:f2:e4:f5:b6:
         95:b6:82:5e:96:e1:97:4b:56:35:3d:94:9d:ef:af:32:bf:4e:
         c0:82:ea:0c:13:a5:29:35:b0:85:17:d3:f8:82:85:bb:4a:af:
         4d:cd:7e:bc:41:5a:bd:13:69:c8:fa:9e:f5:05:87:18:10:03:
         b7:ec:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:30 2026 by rpki-client