Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File:                     SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier:          W+t9azZI19qg+DDnWyObryGbueBcwR1xOUmEOygaCCU=
Subject key identifier:   E2:6C:04:CB:57:92:17:8E:0E:B9:22:6B:B0:00:18:C7:AC:EC:4A:29
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer:       /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number:          5F
Signing time:             Thu 19 Feb 2026 06:22:13 +0000
Manifest this update:     Thu 19 Feb 2026 06:22:13 +0000
Manifest next update:     Thu 26 Feb 2026 06:22:13 +0000
Files and hashes:         1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: cann4GqgmyEbHLA1m38NuAkn/J/u3M3oec+L8odQ8R4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
        Validity
            Not Before: Feb 19 06:22:13 2026 GMT
            Not After : Feb 26 06:22:13 2026 GMT
        Subject: CN=6996ac15-12d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:46:2a:ad:6a:75:0e:d1:42:a1:40:13:5e:
                    3c:c7:7e:6f:e9:47:c8:8f:32:0a:13:40:68:04:dc:
                    c6:5c:9d:94:35:2f:07:de:6f:87:5b:c7:31:d5:2f:
                    18:92:20:89:f3:83:40:81:81:a0:88:1b:d7:3f:94:
                    1a:8e:59:f9:4a:28:42:8a:62:bb:20:55:65:d6:15:
                    df:6e:6f:eb:a6:3a:97:23:99:2d:d9:a2:c0:65:a8:
                    b9:4b:40:08:12:8c:8d:00:62:70:bc:80:e5:9e:56:
                    25:d0:61:d1:79:27:2f:59:78:a9:41:f4:15:31:c4:
                    cb:a1:c8:54:6b:47:32:4a:31:ab:93:8c:7a:fc:c9:
                    9b:8c:a8:4d:87:2f:9a:f5:a9:d2:f3:75:fd:e8:b2:
                    d3:01:9d:7d:b9:5e:21:88:21:3f:33:ea:f1:65:50:
                    58:cc:27:5c:e7:51:96:ad:3d:27:6d:cf:87:7f:5f:
                    58:d7:12:0a:6c:2c:38:c2:13:e1:18:dc:a7:31:c0:
                    08:42:11:4a:21:48:d9:4c:06:6e:6d:4e:3e:68:68:
                    2b:8d:11:bb:47:a4:5c:05:00:3e:a1:03:7b:f4:e9:
                    89:bc:f8:32:0e:59:05:fa:30:60:64:dc:54:9e:f9:
                    a0:84:17:92:4a:28:ee:5a:77:7c:92:64:d6:85:10:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6C:04:CB:57:92:17:8E:0E:B9:22:6B:B0:00:18:C7:AC:EC:4A:29
            X509v3 Authority Key Identifier:
                keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:e0:6f:19:dc:51:58:0b:37:19:f0:83:1e:1b:73:10:7a:
         d9:36:24:e3:8c:72:c1:47:4e:42:7c:e1:2e:61:fc:6f:8a:67:
         a5:86:51:36:37:06:7f:2a:52:af:8e:8c:23:c2:2b:fc:f4:2f:
         e8:cc:54:21:12:70:ef:11:4c:67:eb:71:a5:bd:8a:7c:4e:47:
         c7:a0:01:81:c0:e1:c6:ac:d6:89:a9:15:c9:36:58:62:fa:ba:
         63:ee:fa:d9:1f:79:3f:bd:42:11:e3:6f:f4:b0:f6:ef:85:b9:
         d0:87:85:47:ce:d5:85:a0:24:96:b5:0b:3b:50:2e:13:fc:c6:
         8e:0c:1e:3e:45:3f:9a:8a:92:07:67:1b:0f:99:92:ca:c9:fa:
         63:87:d8:c0:8f:2c:64:d5:49:c9:65:bf:70:40:65:c9:03:95:
         d1:5a:b8:02:26:50:94:a9:ea:89:9a:23:24:c5:f3:dc:be:e6:
         f1:f4:30:37:3e:a3:91:ab:ec:d1:7d:06:ff:ba:f5:ce:1b:21:
         69:2b:01:05:67:8a:36:c4:9f:e2:68:a6:a6:bb:fa:c4:ef:bd:
         60:9d:80:12:25:69:91:fd:83:3b:62:9f:23:65:e8:55:d2:13:
         2d:80:0c:4b:18:ab:25:5e:15:28:32:85:96:a1:a2:f4:bc:25:
         ed:01:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:15:54 2026 by rpki-client