Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File:                     KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier:          K55R1k5iRvdljRIS4GNSRqK1WEd5DpPdn9o411nG/AI=
Subject key identifier:   42:26:E2:45:E8:60:76:76:BE:32:17:44:9C:D8:65:33:C2:82:2D:CA
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer:       /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number:          0130
Signing time:             Thu 19 Feb 2026 03:56:55 +0000
Manifest this update:     Thu 19 Feb 2026 03:56:55 +0000
Manifest next update:     Thu 26 Feb 2026 03:56:55 +0000
Files and hashes:         1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: Lq8hxU1m1bzXe8GT3L7rziWDGLWM++6wRBKAgo1ul2g=)
                          2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: JuJ8UV9zS3u6YlD9fVuda03e1VrBUKTpfcG8rbwxbcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
                          rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
        Validity
            Not Before: Feb 19 03:56:55 2026 GMT
            Not After : Feb 26 03:56:55 2026 GMT
        Subject: CN=69968a07-9610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:df:d5:33:a8:db:30:3b:93:1e:0a:8a:b1:
                    4c:fb:03:26:1f:03:fd:f7:9c:a9:0d:90:ec:c7:b6:
                    55:13:d9:00:da:21:bf:d4:d2:bf:2b:4f:b5:a7:e8:
                    3e:d2:f3:f3:b5:a5:ce:d8:75:18:ef:38:f0:da:e9:
                    ab:cf:8c:98:1e:2a:8c:84:a7:02:1c:a7:0a:75:69:
                    75:34:c7:c5:91:6b:e9:89:eb:ef:eb:73:49:69:c2:
                    51:40:49:7c:3d:12:ff:41:03:fd:c0:ff:c1:db:b4:
                    78:45:eb:65:b1:6a:f6:ca:15:0f:bf:56:04:87:44:
                    c4:16:32:06:a2:6a:b0:6c:f7:bb:0f:8e:30:15:28:
                    68:05:90:26:09:d7:1d:ba:6c:b9:84:b7:c7:98:92:
                    cb:78:7c:dd:3e:6e:ae:5f:c6:77:d7:65:90:66:c9:
                    87:85:9a:57:a4:d5:65:18:14:fc:f0:4f:47:37:7c:
                    bb:03:76:eb:76:38:32:26:dc:25:0b:bc:2c:77:b3:
                    9f:7b:61:7a:5e:d9:80:bc:d4:d8:f4:59:89:5b:1c:
                    6e:45:69:78:f1:39:c6:4f:f0:ab:02:62:45:6d:c3:
                    dc:5c:90:e3:1b:39:00:1d:70:73:ed:bd:5b:35:2e:
                    67:e6:36:61:db:ec:62:6b:0a:6e:00:62:9c:42:e9:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:26:E2:45:E8:60:76:76:BE:32:17:44:9C:D8:65:33:C2:82:2D:CA
            X509v3 Authority Key Identifier:
                keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:95:2e:8d:e8:2f:ad:37:a5:f9:25:c8:c2:ed:90:3f:a1:
         13:1f:e8:d9:57:ec:3f:5a:0b:9d:9d:a9:84:b0:99:40:12:13:
         d2:50:d8:a7:f2:65:c5:71:9f:ba:ca:6c:39:0d:5c:33:61:18:
         e9:51:86:51:b2:51:b8:9a:4f:0d:b3:d0:71:88:10:c1:42:bf:
         9e:1a:6a:fb:8d:2f:2b:11:68:52:8b:eb:ee:84:d2:bb:d3:b3:
         7c:6a:77:1c:ce:9e:81:2a:b9:5b:55:62:52:c5:88:9f:5b:58:
         84:27:5f:06:57:28:1f:38:2f:33:d2:17:d9:45:6a:9e:43:a0:
         4b:dd:27:37:43:70:29:19:aa:72:86:f5:a3:2f:fd:5c:82:59:
         93:82:a0:98:ee:d4:b5:3a:11:85:2f:a5:b3:62:87:42:b5:11:
         00:2e:e4:df:d7:90:c1:1a:49:46:fc:c9:95:07:5d:98:23:8b:
         1f:69:53:e3:0b:cf:46:65:7f:18:de:70:7c:61:ae:38:89:11:
         3d:19:a4:74:e4:c4:0a:d5:a7:cd:6e:af:3c:3a:31:64:f0:42:
         5a:1b:69:5d:79:67:04:18:6a:12:c9:31:60:52:67:48:40:69:
         ef:82:2b:a1:4f:9d:9d:f4:94:73:20:0c:4c:e8:be:31:86:f5:
         ff:e5:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:33 2026 by rpki-client