Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File:                     TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier:          fh4o/iTu9ahsm/xFSFC5pq98T+xd9lksWlBzqshse0Y=
Subject key identifier:   85:00:EC:9F:0A:7F:E1:57:2A:36:C7:40:FE:0E:1A:77:94:8B:59:82
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer:       /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number:          0B8A
Signing time:             Wed 18 Feb 2026 18:44:56 +0000
Manifest this update:     Wed 18 Feb 2026 18:44:55 +0000
Manifest next update:     Wed 25 Feb 2026 18:44:55 +0000
Files and hashes:         1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: qNZ4O9OZ1Jx9J9ni1iJhEjao3nLYE6GbOgfO0QyJxSU=)
                          2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
                          rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
        Validity
            Not Before: Feb 18 18:44:55 2026 GMT
            Not After : Feb 25 18:44:55 2026 GMT
        Subject: CN=699608a8-e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:a3:33:4f:c2:0b:09:6a:e9:b0:54:fa:3c:
                    21:e5:6a:4e:98:4f:c7:38:29:34:d0:bd:b2:f7:16:
                    fc:35:eb:34:38:48:fd:4e:1e:fb:9f:33:79:be:56:
                    05:29:d4:b7:c3:88:4a:f5:fc:a3:ae:e4:e6:50:8e:
                    38:72:67:dc:bb:8a:bc:74:0d:4f:3b:d3:42:0a:e0:
                    a4:7e:82:cf:45:cc:fe:0e:b2:ae:3d:56:12:5f:48:
                    0d:48:a6:c2:85:56:1a:56:4b:08:12:b2:09:93:d2:
                    9f:2e:e5:4f:19:a9:22:60:67:97:1b:69:76:f5:56:
                    5b:fc:58:2b:ed:01:94:93:2c:46:eb:ce:4d:c3:86:
                    f3:de:af:87:b1:df:08:8c:92:f6:cb:5c:34:57:40:
                    b9:67:8f:29:ab:1c:cd:fa:7e:b9:c2:54:15:5a:09:
                    cf:ff:53:e3:69:5a:59:28:dd:37:b9:4d:05:81:36:
                    49:40:f3:c7:f2:0f:bc:92:55:db:83:e8:12:bb:bc:
                    36:e4:a4:e1:b6:55:be:a8:1b:95:14:7b:66:5a:cc:
                    7f:0c:0e:42:04:18:09:93:f8:61:20:20:40:59:29:
                    63:89:1d:6e:b0:f6:b5:0b:41:85:a1:3f:d7:61:11:
                    aa:1f:bb:08:d1:82:71:72:15:6f:36:45:a5:11:2f:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:EC:9F:0A:7F:E1:57:2A:36:C7:40:FE:0E:1A:77:94:8B:59:82
            X509v3 Authority Key Identifier:
                keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:f0:c9:ef:ae:2d:1b:ec:f4:bd:34:83:98:35:40:2f:c3:
         dd:b1:8c:de:44:cc:5b:38:4c:6a:69:3b:ba:fd:27:8c:b1:d9:
         f1:e4:1a:90:ea:6d:15:bd:88:0f:63:ab:84:d6:99:a0:8e:dd:
         64:1c:8d:45:6c:20:6b:d2:89:50:df:e4:24:53:63:54:13:1a:
         78:aa:4b:a4:f9:1e:f9:1c:e5:aa:78:ba:4d:25:c3:cc:d7:12:
         48:b9:2d:5d:a4:8f:0b:7a:41:1e:d8:08:3b:3c:b6:d2:72:cb:
         b9:60:f0:ba:1f:68:35:4f:26:c6:69:7b:25:7b:ed:dc:4a:79:
         18:e2:e2:a9:50:a3:9a:d2:09:9a:74:2c:98:a1:4d:ff:39:3d:
         a3:f6:99:be:0d:b5:7f:f4:b3:1c:12:ce:ed:57:1d:eb:71:bc:
         63:14:7d:e6:1f:78:a8:c0:02:f9:4f:b8:44:3a:44:98:4d:90:
         43:0d:9d:aa:6b:83:ab:e9:ec:1d:3b:07:8c:89:fc:1f:18:82:
         81:e6:45:a2:e7:60:a9:69:56:8d:99:10:48:e6:eb:20:d6:c2:
         2c:30:c9:e1:59:60:d0:68:51:95:9c:f6:68:9a:ec:c9:a2:e4:
         75:f2:53:aa:af:db:18:9d:e2:43:df:f5:60:d7:23:d1:41:06:
         df:be:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:53 2026 by rpki-client