Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
File:                     dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json)
Hash identifier:          hKCeoza+HzqVKwM69Ad58wek3ouTmRQPq1URHxvvGDY=
Subject key identifier:   62:EC:33:EC:11:83:41:B4:A2:B6:31:AE:73:48:EB:E0:89:04:17:8D
Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37
Certificate issuer:       /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
Manifest number:          0F
Signing time:             Thu 19 Feb 2026 07:17:59 +0000
Manifest this update:     Thu 19 Feb 2026 07:17:58 +0000
Manifest next update:     Thu 26 Feb 2026 07:17:58 +0000
Files and hashes:         1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: Blh1/WGzGNvFHPHI2j3q1JtWyCsGzAIDS7wGiKvDGEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl
                          rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937
        Validity
            Not Before: Feb 19 07:17:58 2026 GMT
            Not After : Feb 26 07:17:58 2026 GMT
        Subject: CN=6996b926-0462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6f:cf:16:a4:7b:9f:58:d0:00:43:0d:8c:f0:
                    89:e8:01:6f:4a:92:02:f1:c5:56:bf:4e:ef:02:48:
                    bd:b1:ac:26:62:72:90:a7:cb:47:91:6e:d1:ab:4a:
                    03:c7:2d:43:6b:32:5c:78:bc:d5:41:ba:cf:d7:78:
                    09:3e:63:cb:ca:ab:71:6e:44:bb:66:fd:0f:48:3b:
                    b0:bf:f2:55:33:b6:cb:1a:a7:a4:f8:13:25:f4:9d:
                    99:1e:e7:19:40:7a:9f:81:8d:bb:64:ae:74:3a:5d:
                    46:43:a3:d4:6a:53:3e:26:5b:d6:4e:15:57:a6:f3:
                    25:e4:3b:2d:63:24:d8:7d:21:8b:ae:0f:84:77:c2:
                    e4:bf:e0:9f:44:ac:4b:39:1e:b2:81:03:a0:81:13:
                    d8:22:ff:8a:09:f7:d0:e0:bf:03:41:8d:99:96:4d:
                    3d:10:2a:bc:23:6b:72:9b:21:8f:5b:da:48:80:f9:
                    6e:7c:b7:55:c8:d7:78:84:38:62:d1:98:44:89:19:
                    e7:be:c8:8f:01:0c:a3:61:fd:56:ec:ba:b0:2c:bd:
                    9d:73:18:13:94:a2:4a:5e:ab:11:f8:1f:e7:37:6b:
                    b9:16:9c:f0:a6:c5:ff:5d:c2:11:98:bb:e6:22:fa:
                    a6:69:0e:25:3e:1e:d4:7a:17:d8:16:3d:87:76:e4:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:33:EC:11:83:41:B4:A2:B6:31:AE:73:48:EB:E0:89:04:17:8D
            X509v3 Authority Key Identifier:
                keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:87:8f:e9:2e:36:9c:24:4c:90:42:a9:53:fa:22:2e:13:
         86:1e:f7:41:a0:b3:85:01:b7:ad:6f:32:38:62:bb:5b:f4:e6:
         a2:c9:05:d2:52:a8:6b:fa:f2:06:ad:6f:39:af:75:51:93:a0:
         8a:a3:aa:44:9e:64:15:ab:fc:79:99:ec:f4:16:f3:08:60:d8:
         57:22:54:23:71:cf:a4:e7:ad:e2:b6:26:83:99:8e:e0:40:c0:
         9c:7c:c6:55:11:6b:3a:df:e7:22:42:47:7b:38:15:8d:39:ed:
         c8:ee:23:85:b2:94:9e:be:98:9b:86:1d:54:a4:c6:dd:c5:86:
         bc:9c:65:98:e4:76:ee:ff:88:29:04:73:5f:cf:7c:77:6c:ce:
         26:b4:af:d6:16:09:f0:c1:67:46:b2:1c:fd:a6:ab:6d:34:90:
         44:4b:cd:c7:de:44:1b:24:35:a2:35:67:2d:9a:87:61:d0:e5:
         da:7c:88:2f:77:bc:21:cb:e1:ad:51:b9:73:19:d8:d6:2f:a7:
         95:a0:6b:1c:b6:b0:a9:0c:9d:24:41:26:47:76:06:ae:82:2f:
         21:1c:05:51:69:d3:e6:e3:a6:2c:2c:b4:9e:78:91:fd:a5:2c:
         1e:fa:9c:b4:09:72:5f:89:3d:36:79:26:29:79:42:b7:33:20:
         fa:01:0d:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5
NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0
OTA4MzkzNzAeFw0yNjAyMTkwNzE3NThaFw0yNjAyMjYwNzE3NThaMBgxFjAUBgNV
BAMMDTY5OTZiOTI2LTA0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5b88WpHufWNAAQw2M8InoAW9KkgLxxVa/Tu8CSL2xrCZicpCny0eRbtGrSgPH
LUNrMlx4vNVBus/XeAk+Y8vKq3FuRLtm/Q9IO7C/8lUztssap6T4EyX0nZke5xlA
ep+BjbtkrnQ6XUZDo9RqUz4mW9ZOFVem8yXkOy1jJNh9IYuuD4R3wuS/4J9ErEs5
HrKBA6CBE9gi/4oJ99DgvwNBjZmWTT0QKrwja3KbIY9b2kiA+W58t1XI13iEOGLR
mESJGee+yI8BDKNh/VbsurAsvZ1zGBOUokpeqxH4H+c3a7kWnPCmxf9dwhGYu+Yi
+qZpDiU+HtR6F9gWPYd25CVnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYuwz7BGD
QbSitjGuc0jr4IkEF40wHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy
NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ
RWFsSTVvRjdQOEVrSU9UYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHrLh4/pLjacJEyQQqlT+iIuE4Ye90Ggs4UBt61vMjhiu1v05qLJBdJS
qGv68gatbzmvdVGToIqjqkSeZBWr/HmZ7PQW8whg2FciVCNxz6TnreK2JoOZjuBA
wJx8xlURazrf5yJCR3s4FY057cjuI4WylJ6+mJuGHVSkxt3FhrycZZjkdu7/iCkE
c1/PfHdszia0r9YWCfDBZ0ayHP2mq200kERLzcfeRBskNaI1Zy2ah2HQ5dp8iC93
vCHL4a1RuXMZ2NYvp5Wgaxy2sKkMnSRBJkd2Bq6CLyEcBVFp0+bjpiwstJ54kf2l
LB76nLQJcl+JPTZ5Jil5QrczIPoBDYM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:14 2026 by rpki-client