Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File:                     _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier:          tMIaswyAE8rGtzR6ugPkMT7pPcmgHlUKM+BEjtWDFxM=
Subject key identifier:   5C:1A:8E:42:B0:7A:82:90:13:E0:E9:32:7E:50:E1:72:49:BC:AF:AE
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer:       /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number:          06
Signing time:             Thu 19 Feb 2026 07:26:58 +0000
Manifest this update:     Thu 19 Feb 2026 07:26:57 +0000
Manifest next update:     Thu 26 Feb 2026 07:26:57 +0000
Files and hashes:         1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: TwrK96a6ah66HRPGx25/i/+sZ/zLb807inM1itZcMYA=)
                          2: 472DDE380B2111F19BE0F4953F3D8C67.roa (hash: mMNig57nix4fiqqBGWQLJMaeMKbE+w7YNaW0SfWEWPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
                          rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
        Validity
            Not Before: Feb 19 07:26:57 2026 GMT
            Not After : Feb 26 07:26:57 2026 GMT
        Subject: CN=6996bb41-e462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:94:2c:21:95:29:fa:f7:e6:d7:f9:72:d2:
                    6b:aa:27:7e:5e:25:51:c9:7f:aa:93:9b:c5:40:a7:
                    3e:63:67:a2:69:68:6f:64:95:83:de:8a:c1:46:e6:
                    94:4f:97:37:b8:41:92:ac:bb:13:43:fc:8e:46:3a:
                    4d:d5:48:40:47:9e:5f:12:ca:51:48:e9:48:d5:45:
                    4c:28:d8:6d:ae:a9:2e:d5:3a:8d:39:9e:69:fd:b2:
                    9e:45:b4:49:51:93:b5:ce:d4:a0:fc:13:a9:6f:63:
                    e2:83:34:7b:04:42:76:6b:df:68:89:a6:72:71:79:
                    0e:df:89:b8:04:94:8a:80:3e:78:20:36:16:0d:75:
                    38:74:20:b0:07:b1:a5:23:76:a7:52:b1:21:85:e7:
                    0c:db:2c:37:7f:01:a7:5f:f1:41:b1:62:8a:78:42:
                    45:10:c8:01:8b:28:e6:9d:c7:17:df:fc:98:c7:8d:
                    99:8a:59:6d:f2:6c:14:e5:d8:de:1a:09:73:4b:01:
                    75:b7:20:ff:92:09:ae:79:15:ef:50:8d:e5:c7:14:
                    f4:82:a7:51:53:04:9b:a9:72:db:bf:c4:41:9f:ae:
                    9d:3e:56:0c:f2:39:3f:9c:2b:45:5e:7d:53:a4:be:
                    95:d0:12:75:74:73:5c:31:dc:7e:d0:73:e0:4c:88:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1A:8E:42:B0:7A:82:90:13:E0:E9:32:7E:50:E1:72:49:BC:AF:AE
            X509v3 Authority Key Identifier:
                keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:2c:55:6a:28:a0:1a:98:18:53:c8:e4:aa:09:d7:2d:24:
         14:34:f6:c3:63:59:53:64:0f:d2:23:50:43:63:c6:15:28:61:
         65:2d:80:8f:08:e7:7b:eb:40:7e:a1:67:79:82:5e:5f:b8:c5:
         0f:fd:a3:54:e0:22:75:48:c9:a4:d8:f8:67:a5:9f:08:ba:d6:
         98:ea:97:02:13:6c:16:f3:5f:08:f7:a5:b1:86:cb:83:e8:71:
         46:0d:26:cb:20:dc:3d:f1:a0:15:6b:3a:fd:f9:5c:ad:a8:b1:
         e3:7c:11:40:44:28:54:bf:16:dc:63:9b:72:60:ea:c8:35:dc:
         df:1f:f0:8b:02:a5:75:eb:2a:7e:a9:d7:8d:8b:72:9f:50:d5:
         6e:d4:83:60:7a:c6:d9:6a:df:43:7a:9d:fd:cb:23:fc:2b:df:
         91:56:bf:63:07:6f:58:54:bb:27:b5:5c:cf:1e:16:44:7b:bf:
         42:fb:a0:d0:34:a5:5d:d8:9a:c5:1b:23:4f:33:82:a5:be:84:
         39:6f:70:88:88:ff:89:f0:dd:fc:5f:93:c5:56:3a:25:8b:47:
         b8:95:a2:ee:40:db:73:6f:f4:52:8c:8d:4a:5b:67:b0:bd:22:
         3a:5c:81:10:72:eb:57:af:68:c2:49:cd:bf:1b:97:06:f8:64:
         93:58:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:14 2026 by rpki-client