Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File:                     M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier:          1vA6/8BMIOqx9Vx1Wn29XGtBwAeOTcTzqP3yBSHjuwE=
Subject key identifier:   2D:06:FD:64:32:19:48:07:4F:17:9C:21:73:FC:C3:FF:E9:3A:19:74
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number:          44
Signing time:             Thu 19 Feb 2026 06:38:51 +0000
Manifest this update:     Thu 19 Feb 2026 06:38:51 +0000
Manifest next update:     Thu 26 Feb 2026 06:38:51 +0000
Files and hashes:         1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: HSknxA+Ij/YStLExOtWWjDgJFGACd6PWK64oC+3cfsw=)
                          2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: kENvzHNKo6IjGoWcT7mvOgf2Y85E5p1Dl4B5gZlD2OE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: Feb 19 06:38:51 2026 GMT
            Not After : Feb 26 06:38:51 2026 GMT
        Subject: CN=6996affb-eccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:bf:fe:d5:82:ed:65:0e:27:cb:98:80:0c:
                    dd:18:cd:9f:f6:ba:34:69:d7:4d:da:7e:73:90:69:
                    fc:5e:66:4a:2a:3d:85:b1:1d:00:35:e5:01:b0:3b:
                    2f:64:c0:92:ad:bb:33:e0:1d:a1:51:71:e9:64:db:
                    52:60:b0:a9:b7:62:e9:78:5c:77:ee:44:b3:6f:89:
                    3e:69:6e:dd:ce:fe:24:d9:cc:74:4c:72:c2:dc:fc:
                    94:32:59:28:d4:88:e3:8e:1a:b5:33:61:ef:c2:19:
                    5f:3e:a7:57:de:c5:21:e2:5e:ea:03:33:b7:9e:c8:
                    c5:2c:70:34:3b:16:2d:4f:3d:e6:84:9e:34:40:93:
                    b0:76:09:d3:37:00:cc:e0:4a:05:55:ec:37:33:03:
                    5c:ae:30:ae:9f:be:c1:fb:92:52:27:fd:c5:d6:4f:
                    40:8d:da:53:dc:98:83:37:0d:b7:df:39:a0:df:ea:
                    0b:1d:4a:80:91:10:29:c5:49:b1:c9:0f:bd:0a:6f:
                    31:f7:f4:c5:ff:93:43:60:9b:7d:05:cb:5c:c6:10:
                    68:bd:bd:bd:c7:a9:82:82:60:0a:a1:79:59:66:57:
                    39:64:01:76:cd:92:1e:e3:9c:1c:0e:51:27:cf:60:
                    92:7a:1a:68:44:b9:b8:8c:1a:77:53:7a:fe:ba:e4:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:FD:64:32:19:48:07:4F:17:9C:21:73:FC:C3:FF:E9:3A:19:74
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:35:cc:46:f2:75:ca:14:19:0f:08:5e:25:ec:33:cf:89:57:
         98:ed:a6:b2:f0:e5:84:8e:5f:27:37:3d:ab:c6:79:2a:9a:96:
         fd:05:f1:a1:ad:89:2c:0d:fe:ef:76:44:5d:1f:0a:ff:a4:e1:
         1a:0f:f4:49:c2:3b:4b:f6:0c:22:bf:07:37:71:b6:7f:f9:d9:
         de:7a:2a:8a:d6:0a:1d:05:a6:48:1a:ce:e8:98:4d:05:e8:91:
         a9:60:ab:64:15:2e:0f:17:30:82:bf:77:1c:e7:28:86:fd:d5:
         c7:21:4a:e2:1e:3d:18:02:61:b3:4a:f2:df:0b:36:b2:8e:d7:
         cf:71:b3:f4:00:4c:f5:eb:7d:53:fb:57:00:a4:4d:75:ed:a7:
         bb:53:38:44:c0:0c:77:2e:9c:15:c4:b0:5c:3a:79:1a:2b:2c:
         1a:04:8d:32:7b:a8:24:6d:2c:82:85:72:8a:4c:a5:0d:ad:dd:
         e8:5e:07:9e:40:c1:c7:30:58:21:aa:f4:09:ce:e3:63:74:24:
         ea:50:d7:c9:0e:1f:e4:ef:ab:c0:90:29:d4:47:a0:29:85:dd:
         f3:ff:bd:60:9a:99:0c:f5:9f:0f:f0:47:cb:b9:b3:72:67:2d:
         26:02:9e:6e:a6:89:d4:50:d2:ee:76:65:08:66:83:65:d5:84:
         c9:7e:af:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:27 2026 by rpki-client