Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
File:                     pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json)
Hash identifier:          yXirSmVJmPkeuaYCl/MEPvbhSmBZv7neVX8pXefhK78=
Subject key identifier:   7B:13:03:9E:6B:44:AB:E7:68:9C:71:2D:C1:FE:96:D3:A7:8F:5C:89
Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Certificate issuer:       /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
Manifest number:          022E
Signing time:             Thu 19 Feb 2026 01:25:41 +0000
Manifest this update:     Thu 19 Feb 2026 01:25:41 +0000
Manifest next update:     Thu 26 Feb 2026 01:25:41 +0000
Files and hashes:         1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: jAUTiQOc8+YJqshJ9+kYuCMjrOpFqId9Pu1UvOMV2ss=)
                          2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: m/OLPsM6ynBix8nuh4bjX0QKg8+81tb5WXXf1UHLuyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
        Validity
            Not Before: Feb 19 01:25:41 2026 GMT
            Not After : Feb 26 01:25:41 2026 GMT
        Subject: CN=69966695-4be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:ef:60:2d:45:23:6e:49:cb:fc:44:7e:eb:
                    8a:dc:4c:b2:25:f3:05:0b:85:7a:f3:68:7d:11:a4:
                    aa:37:37:6b:75:1c:af:80:83:83:58:45:0b:c5:56:
                    23:ce:98:a2:13:3a:ed:1a:6a:ad:b1:06:95:93:06:
                    26:3d:5b:38:56:e1:90:2e:64:9b:2d:c6:78:c0:82:
                    d5:b6:33:cd:36:66:8f:f4:2c:f4:9a:fc:51:8e:55:
                    0c:98:bb:d5:5b:71:8f:2f:fe:21:ad:18:fa:c7:76:
                    78:eb:dd:66:e5:b7:ac:dd:f4:b2:8d:0d:48:a2:bd:
                    a1:98:d8:47:f4:0b:99:99:6e:2a:1f:10:7a:ac:96:
                    d7:6e:de:5e:57:11:4e:d1:31:19:d8:82:e8:ce:26:
                    2b:26:db:9c:f6:de:76:eb:c0:13:57:93:17:05:69:
                    bc:57:02:8c:94:0d:90:f0:05:d8:d6:31:3c:7b:5b:
                    8a:57:4b:99:d5:b8:7f:ea:64:04:3f:d5:bd:1d:b9:
                    3d:b1:fa:b8:02:7d:db:de:38:71:d7:bb:68:eb:e3:
                    0d:de:9d:df:35:f5:79:10:d4:4c:ff:76:53:54:6d:
                    ce:3e:31:ee:86:f7:10:95:73:c7:38:67:f5:75:6f:
                    c3:b8:1b:8c:b4:19:dc:e5:a8:82:38:03:0a:59:0a:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:03:9E:6B:44:AB:E7:68:9C:71:2D:C1:FE:96:D3:A7:8F:5C:89
            X509v3 Authority Key Identifier:
                keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f9:3d:60:38:42:5e:a7:97:29:3b:06:3b:fb:a8:7b:6f:33:
         04:7e:57:a3:50:54:62:99:b4:0a:59:44:18:ff:f5:72:da:13:
         a2:06:fb:9d:a5:fa:7c:74:08:da:4f:78:70:33:2e:5f:2d:ab:
         ff:24:71:8b:c3:a1:c9:1e:f7:82:64:51:08:38:0f:4d:c2:b1:
         6e:c0:45:b6:a0:58:34:50:03:65:b0:d1:04:f3:03:e6:32:9a:
         b1:76:a4:ac:8d:2a:2f:2b:11:9d:0c:ff:d8:d1:16:81:c0:a6:
         ab:69:1f:bb:01:87:be:4b:d6:8c:49:39:54:43:1e:64:cd:a1:
         05:2f:cc:1c:0d:52:1a:af:b2:52:2a:0f:1b:9d:2d:6a:d7:57:
         af:17:b8:ef:92:53:66:15:64:e3:42:38:31:71:4b:69:4e:ac:
         2e:0f:e7:16:e3:e5:1f:3a:01:ca:a7:5d:6c:a4:42:12:56:61:
         b6:4c:84:32:40:65:4b:ad:63:04:e2:01:fe:b8:43:f6:28:3c:
         92:3f:75:61:81:f9:a1:00:95:a2:ec:92:a6:c7:f1:69:b7:ca:
         16:83:e4:78:20:1b:54:75:5f:f7:a0:1d:26:b0:ad:99:2c:38:
         89:3d:88:ae:41:17:04:57:98:d4:5d:a1:b4:34:ca:91:2d:77:
         a7:50:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:01 2026 by rpki-client