Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File:                     4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier:          GKjxsJxAjS9Cr1kaRXTzDEZKhz6C6Npxz1PEWGGzdWI=
Subject key identifier:   02:63:27:83:6A:BF:B0:DB:92:C4:01:D7:97:02:41:2C:03:C0:7F:92
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer:       /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number:          33
Signing time:             Thu 19 Feb 2026 06:52:17 +0000
Manifest this update:     Thu 19 Feb 2026 06:52:16 +0000
Manifest next update:     Thu 26 Feb 2026 06:52:16 +0000
Files and hashes:         1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: EWLowoOta2vC+fl++tp4SwlpxK2nTfZqG3efUljP/vM=)
                          2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: ngTl1QXL5Q3wXD/1/SJVtQgcLrvKal5vK5Vj1V/6mq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
                          rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
        Validity
            Not Before: Feb 19 06:52:16 2026 GMT
            Not After : Feb 26 06:52:16 2026 GMT
        Subject: CN=6996b321-832e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:e0:98:70:ca:aa:a1:51:05:da:db:16:31:
                    3f:34:ec:c2:21:97:7e:c5:04:1f:01:3a:2d:d9:79:
                    8f:ec:75:9e:18:7e:87:c5:d1:f3:64:4f:2b:6b:cd:
                    f8:8d:28:26:c1:54:aa:23:d7:85:b5:27:ee:83:b4:
                    14:99:63:be:3c:94:58:4c:b8:bb:47:7c:25:43:f5:
                    95:4e:a4:96:fd:58:cb:ac:06:3d:c8:96:cd:2e:54:
                    d2:9c:1d:7d:d3:2a:e4:e2:dc:8d:d5:d5:34:5c:12:
                    a7:47:47:52:a8:90:2e:0b:af:a5:94:ad:d3:39:f4:
                    ee:5e:50:e1:e4:85:13:25:4b:fd:8b:45:45:e1:23:
                    0d:ed:2d:50:b9:92:7d:92:aa:5b:d4:be:bb:ce:a6:
                    90:38:f6:13:92:9e:d6:0d:01:24:c9:d6:d8:57:53:
                    67:69:2b:a4:f8:73:ba:e5:d4:a5:6e:46:2b:94:53:
                    50:24:b6:b0:77:21:17:da:14:c7:08:64:fc:4f:a0:
                    7f:ff:e3:f7:c2:cc:c0:96:4f:62:52:82:fa:4e:19:
                    6d:cf:35:a2:e9:b5:10:84:a7:c7:f1:a0:d5:f1:00:
                    ad:72:a8:db:50:a0:f7:7d:03:b8:49:47:bc:8f:06:
                    50:23:3e:fa:f6:5a:e5:6c:6f:e5:3b:97:02:3c:31:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:27:83:6A:BF:B0:DB:92:C4:01:D7:97:02:41:2C:03:C0:7F:92
            X509v3 Authority Key Identifier:
                keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:16:10:1d:79:cc:79:79:03:c6:96:6b:62:6c:8c:71:8f:
         45:cf:57:c6:a7:36:17:62:2c:1c:f9:39:2d:3a:5c:fc:06:33:
         3c:45:eb:c6:6a:87:65:5e:23:92:41:aa:22:d4:36:0d:e1:14:
         1c:57:c7:71:fa:e7:b5:8f:f8:09:26:b2:37:25:4d:aa:18:6b:
         b2:f5:9a:c2:1e:0c:84:7d:bc:1e:39:68:92:0d:69:71:63:1b:
         ba:27:1d:e9:95:9c:0c:20:71:d3:14:b1:88:4c:8f:9c:c4:43:
         f5:45:e2:f0:dc:c2:fe:f0:0d:61:c0:1e:db:2b:1c:00:19:13:
         8d:8a:b4:4a:02:28:4f:1c:ba:98:4e:b2:c7:0a:9b:1c:ca:5c:
         a2:6c:e0:fb:24:dc:5b:ce:a0:ea:7e:4b:81:ff:64:1d:ef:ed:
         c5:a9:ab:65:44:38:9d:35:8c:8e:b8:68:a4:a7:5b:84:2a:ac:
         91:d5:2d:ef:3c:52:51:b1:74:5d:03:38:d5:0d:a5:52:08:fa:
         77:e9:33:f8:cd:b5:c6:8b:44:f9:97:ec:db:e3:fe:cd:ac:57:
         f8:b6:79:ba:0e:75:e4:ef:fe:5b:0c:b6:9d:39:7a:8f:9e:a6:
         ff:1a:28:df:50:87:15:66:71:55:55:b9:64:a2:e2:20:fc:00:
         0f:39:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:36 2026 by rpki-client