Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File:                     QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier:          csYip69s8Wr7MZz9T2hBDq6Vmvf2s80hCHj5MYLP5a0=
Subject key identifier:   03:52:ED:1C:22:FF:59:45:1A:FB:66:00:45:EB:42:99:06:1E:AB:DA
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number:          01BA
Signing time:             Thu 19 Feb 2026 02:29:16 +0000
Manifest this update:     Thu 19 Feb 2026 02:29:16 +0000
Manifest next update:     Thu 26 Feb 2026 02:29:16 +0000
Files and hashes:         1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: jdghpPZiL3CowGnNsEP0qRbrYTJ+sOJSxWHKifVDQ9U=)
                          2: 294325DC699711EEB317603DC4F9AE02.roa (hash: 8wlSlxdWRVQsKWpecDfGTBfpDDK2RtL9v/+VCfGWZ7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Feb 19 02:29:16 2026 GMT
            Not After : Feb 26 02:29:16 2026 GMT
        Subject: CN=6996757c-dd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:67:29:54:3b:ed:7b:34:72:e6:f2:32:2e:
                    57:84:0d:f6:72:d4:29:1e:6e:33:36:57:25:e0:ee:
                    1b:44:8f:c5:e6:4f:65:71:e7:20:fb:fe:06:2c:55:
                    fb:8a:de:78:0a:d5:ab:af:a6:55:68:de:56:b7:ba:
                    38:05:c5:98:68:f2:7f:fc:fb:16:2c:84:71:30:56:
                    38:d7:ab:b7:43:ea:2e:a7:bf:4d:34:1c:e2:d5:6b:
                    00:6b:8b:38:1f:74:1e:1e:94:57:3a:b0:ce:f2:ea:
                    24:da:c1:e8:8f:57:7d:ee:81:05:20:f7:bb:30:47:
                    f2:e9:9f:de:66:0d:f5:d2:cc:4e:46:05:c0:b5:be:
                    05:0e:06:9f:c4:96:f7:b6:b3:ad:6d:8e:ee:c3:76:
                    aa:e4:dc:30:d4:89:1c:72:1d:65:1b:4d:e9:d4:4e:
                    03:e6:37:88:03:0c:66:85:6e:57:30:1c:8c:5b:72:
                    75:f3:ba:a9:ff:98:55:6f:81:29:82:8b:a6:9b:f3:
                    1f:01:20:b0:e7:c7:70:2d:57:32:b2:a1:0d:45:5e:
                    2b:c9:4b:34:00:8d:3d:ca:2a:61:b9:46:d4:20:41:
                    1c:50:45:d3:88:3c:4c:c7:09:db:ea:d8:0d:b4:28:
                    19:6e:73:75:39:00:30:24:f2:82:5a:0e:16:c6:5c:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:ED:1C:22:FF:59:45:1A:FB:66:00:45:EB:42:99:06:1E:AB:DA
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:2b:01:9b:2f:4d:68:25:e5:bc:c5:10:17:27:8f:4e:10:
         03:e8:72:c5:2b:25:e3:93:3c:78:b6:1b:94:cb:cc:ff:d5:18:
         2e:ce:15:5e:5e:cb:01:76:26:44:6d:73:9b:62:e5:3a:15:ef:
         f1:ff:8d:d9:e1:39:9b:4a:ee:d7:30:03:80:36:cf:16:9e:1e:
         77:95:b3:3e:9a:b4:46:9a:c7:c7:fa:5e:ea:bb:a3:2e:00:75:
         4a:48:57:d5:9c:e7:9e:95:7f:f5:42:e9:5e:fa:bd:73:bc:0f:
         3f:c4:3d:ce:bd:a3:c3:dd:b8:cc:4a:65:00:63:58:0b:d1:88:
         48:fa:28:c2:5a:32:d9:42:55:f8:28:50:ae:4a:90:ec:ae:45:
         fb:03:35:54:67:45:5b:a7:ba:9c:f1:c0:9c:a3:87:51:57:ae:
         69:63:dc:bd:11:7c:9a:b2:06:97:38:09:fa:95:fd:1d:31:78:
         e3:3c:1d:f8:e8:6b:9c:7f:8c:0a:c7:2c:66:5f:11:ff:4c:33:
         6e:4c:3e:4d:65:82:f9:fc:25:2a:e9:3c:5a:ff:7f:f3:0d:d5:
         4e:36:f6:c3:ae:0f:6f:d6:b9:da:8b:2d:e4:88:f5:0a:b9:42:
         dd:a8:40:b0:22:36:28:72:d5:f0:9d:2c:79:f8:e4:8b:76:b1:
         9a:00:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:17 2026 by rpki-client