Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File:                     DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier:          7aMmT1MYARgCG9/PsJGcmncBsxEJSU07csEALODIE6o=
Subject key identifier:   F7:25:CE:9A:08:A0:F8:B4:BC:1B:94:93:DA:09:5B:0A:D6:D9:2B:CB
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer:       /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number:          024C
Signing time:             Thu 19 Feb 2026 01:10:43 +0000
Manifest this update:     Thu 19 Feb 2026 01:10:42 +0000
Manifest next update:     Thu 26 Feb 2026 01:10:42 +0000
Files and hashes:         1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: Dx5XEtKaNN2sBxAQj/IQgcxWjxv0XmPskbJ7qAiORqo=)
                          2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 4u5QNoJcEGBkXy8XRMZ846SeZinFB+3AOCkdTLg5xUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
        Validity
            Not Before: Feb 19 01:10:42 2026 GMT
            Not After : Feb 26 01:10:42 2026 GMT
        Subject: CN=69966313-ab1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:5d:84:d0:c3:29:52:f1:fb:2d:3a:41:5f:
                    19:72:b4:a8:53:6a:57:31:6e:5b:d4:cc:0a:42:d4:
                    3b:a6:24:aa:9e:35:67:1f:ed:6b:e6:03:8c:d2:14:
                    d1:81:9a:e7:00:fd:7c:0b:8a:0e:11:3c:f1:c1:e4:
                    4e:40:31:a2:99:20:1b:15:07:8e:9f:39:3d:e3:7e:
                    bf:2c:85:dc:30:5c:a9:b6:34:95:8f:fd:97:80:fc:
                    e2:41:9f:cb:cd:8f:af:05:d2:7f:78:ab:dc:5b:6c:
                    70:57:6b:16:f7:b9:78:1f:a7:ce:0e:c2:f4:6d:36:
                    e2:ce:a3:fb:9d:b9:b2:d6:2c:fe:8a:da:de:15:64:
                    d7:3b:4a:eb:16:ef:29:49:dc:14:8d:94:7a:81:0d:
                    ab:73:ee:78:78:b1:fe:a1:9b:cf:40:82:72:18:a5:
                    2f:d9:b4:56:f6:c0:b1:99:9b:f5:ec:ca:e6:14:b4:
                    0a:25:44:90:6f:a2:0a:ee:b3:b9:99:ec:a1:51:c5:
                    9b:06:d5:a8:7b:54:59:44:da:bb:90:0d:96:07:9c:
                    36:41:09:bf:78:d4:23:5d:7f:9b:40:44:3e:3e:5c:
                    ca:4e:a3:7b:71:e5:40:04:50:c0:cb:30:b8:a7:d8:
                    c0:43:d7:95:a4:46:57:fb:72:c5:95:c9:53:49:d0:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:CE:9A:08:A0:F8:B4:BC:1B:94:93:DA:09:5B:0A:D6:D9:2B:CB
            X509v3 Authority Key Identifier:
                keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:1d:ae:52:a8:6c:92:f2:35:fd:3d:5c:19:73:93:eb:71:
         63:d0:58:c4:c4:be:27:5c:dd:46:45:ab:4d:04:e2:7b:dd:91:
         5c:c3:47:fc:53:37:d0:56:2f:21:8c:92:46:45:dd:fd:ff:25:
         e0:c4:4b:3d:f2:04:36:db:c5:e9:45:2b:eb:77:d5:d2:cd:af:
         56:6c:bb:47:1b:b3:44:bb:56:d1:5e:d0:1d:29:ea:a5:23:e5:
         05:8e:dd:0a:2d:5c:40:14:0b:dd:71:77:d3:19:ce:dd:78:52:
         63:f1:2b:64:d6:a3:34:c9:14:72:f5:92:c8:4b:61:9e:21:1b:
         64:34:f2:23:10:59:a5:50:d9:06:00:62:2e:ca:98:b6:5e:03:
         74:b8:21:fb:b6:08:10:53:67:e7:56:07:03:10:6b:99:2d:fd:
         83:92:f7:5b:7d:a4:d5:ad:08:30:8f:76:fa:8f:bc:50:6e:86:
         45:f2:9a:3a:6d:dc:35:5f:e0:87:a1:8a:ca:6f:01:c7:8b:8f:
         69:a6:39:73:9d:5e:03:07:55:2a:f9:e4:85:74:10:d0:85:39:
         8b:9d:b6:85:8a:62:24:86:a4:5f:48:59:37:89:22:b4:6f:13:
         2f:d2:2f:a4:ae:d7:92:58:2a:ff:fd:f8:72:72:38:03:0d:01:
         bc:e5:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:57 2026 by rpki-client