Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File:                     DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier:          bQpaqis4eW7dZq7seK3Av04nFMFcrCgEtDKUPdider0=
Subject key identifier:   11:E3:F1:76:C9:C9:FD:51:E9:F5:03:5A:91:94:51:A0:ED:30:91:F6
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer:       /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number:          58
Signing time:             Thu 19 Feb 2026 06:25:50 +0000
Manifest this update:     Thu 19 Feb 2026 06:25:50 +0000
Manifest next update:     Thu 26 Feb 2026 06:25:50 +0000
Files and hashes:         1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: TzFe1zLLd+fFZPIEpB1wGMQiQ7mQkb6nUYbBBMvd0cQ=)
                          2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: AQ4Lse7zCFP3/9JvqgPaWnl1J8Ednlxm8McvA0KBIHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
        Validity
            Not Before: Feb 19 06:25:50 2026 GMT
            Not After : Feb 26 06:25:50 2026 GMT
        Subject: CN=6996acee-7c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:61:37:43:a8:f9:80:5d:b2:5c:75:18:df:
                    f3:04:30:8f:64:ac:18:ee:b0:78:fa:f4:8f:fe:d8:
                    8b:dd:1f:6c:0d:53:ec:fe:2b:3c:58:26:49:af:c5:
                    ca:bc:31:88:59:a6:46:b6:91:89:5e:d8:05:19:0f:
                    d5:d8:7f:25:9a:6b:e6:16:e5:26:b4:95:40:5f:ec:
                    79:88:b2:ec:6f:75:ff:c0:a7:a6:5e:d1:5b:99:50:
                    0d:f0:25:b0:ba:10:f9:1e:ce:e3:1e:36:ff:e1:59:
                    bf:94:4e:c0:7c:32:a3:04:85:08:5f:07:43:4c:0a:
                    ac:b7:38:f0:e9:17:60:3b:87:c9:4c:ed:b2:ad:d9:
                    b8:43:37:52:d7:eb:89:8e:c7:fa:31:1d:6f:82:64:
                    24:89:7c:54:15:66:31:41:3b:56:c6:64:69:3b:d3:
                    31:49:07:b7:cd:18:77:cf:e1:7d:15:cf:a1:dd:45:
                    cb:16:d1:bc:6f:9b:65:ad:45:87:4b:18:44:e5:94:
                    ba:2b:fa:5f:cc:1f:fb:b2:33:0b:bf:96:57:d0:74:
                    72:3e:f7:66:42:a6:6a:e1:60:2f:5b:7a:7d:a6:e9:
                    77:4d:09:b8:1e:89:3f:a6:c7:2c:87:0b:2d:a4:b9:
                    d7:b2:76:db:de:e1:8e:5a:4a:3d:73:06:7e:00:0f:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:F1:76:C9:C9:FD:51:E9:F5:03:5A:91:94:51:A0:ED:30:91:F6
            X509v3 Authority Key Identifier:
                keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:30:d0:73:15:d5:f6:0f:a3:0b:9c:d7:9b:3b:1c:8d:fc:
         9a:85:cc:8d:e3:b0:19:a7:93:1c:63:b1:3b:2c:22:d5:2c:c5:
         5d:cd:17:83:94:b4:69:4d:8f:ba:61:38:05:01:5b:b4:b4:72:
         39:45:17:69:28:f0:f9:bf:87:46:95:61:5f:55:78:28:59:65:
         00:a2:ab:65:83:ce:60:61:dc:8f:bd:87:45:32:8f:73:8a:b9:
         63:3a:80:c0:3c:48:4d:e0:43:60:bd:11:f9:a6:93:c0:55:89:
         6e:ac:8c:76:8d:db:d3:87:eb:4c:23:f0:8b:80:e2:b5:a8:d1:
         f0:0c:cb:43:26:ff:0c:6a:41:76:7a:bf:66:8a:d1:7e:50:46:
         bd:46:c3:73:94:16:b0:93:b9:a0:99:76:97:41:91:eb:b2:81:
         f1:8f:9b:1d:d7:a1:e6:d7:24:22:58:70:c8:df:1f:d3:14:c7:
         e7:fa:79:8b:a7:ae:54:90:cb:09:31:11:a4:1a:7a:ac:0b:88:
         21:95:e2:c5:61:b1:57:86:c0:c1:17:b8:ab:b1:67:37:56:0d:
         7f:2a:7f:1d:2d:5c:ac:7d:3d:20:3d:34:21:6b:5d:fa:a2:f0:
         b7:d8:c5:2d:d5:b4:d6:1e:73:6e:48:58:02:7d:d4:a5:5c:6a:
         3a:42:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:28 2026 by rpki-client