Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
File:                     cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json)
Hash identifier:          /1rWlTt9FDXIWzc8znBOJlQzf9FXtBTpYIDDi6IWsVk=
Subject key identifier:   35:49:94:23:9B:BC:44:72:F7:F9:DE:12:3C:14:FD:57:AD:34:AD:86
Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
Certificate issuer:       /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
Manifest number:          353D
Signing time:             Wed 18 Feb 2026 14:17:55 +0000
Manifest this update:     Wed 18 Feb 2026 14:17:55 +0000
Manifest next update:     Wed 25 Feb 2026 14:17:55 +0000
Files and hashes:         1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: dpQg2AWFrfBkb/MWKyCf+NWQmDasZrU8DNKNKxzgZic=)
                          2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: Zj1VjgjescNA34ntuLagaf4Gpvf1qUoGCJyDKrDQ9CM=)
                          3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: ZsKZ4KjphdPT0jn69q25ishvkQ6ZWEITVVyaEZP50Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
        Validity
            Not Before: Feb 18 14:17:55 2026 GMT
            Not After : Feb 25 14:17:55 2026 GMT
        Subject: CN=6995ca13-dd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:ed:46:d8:0e:43:05:11:db:be:73:3a:87:
                    8f:39:87:a3:bc:52:f9:52:c4:67:da:10:94:4e:28:
                    54:1c:19:d6:34:0b:fe:f5:f6:b8:34:a4:7e:23:bf:
                    86:33:ee:5a:ab:87:a9:e2:ea:c2:24:47:00:2a:dc:
                    86:6e:e3:33:be:07:0c:04:1e:f1:ca:39:eb:74:10:
                    37:0f:f9:17:14:65:9c:29:6c:4f:33:2e:77:71:a7:
                    6c:ab:b6:66:4b:ce:c1:41:26:b7:98:bc:fe:05:c6:
                    24:b9:bc:5b:d9:64:17:4f:20:46:56:dd:4a:a7:84:
                    01:97:82:9d:4d:8d:fb:0b:c4:1f:e8:dd:06:ff:da:
                    0c:d2:ca:bd:82:fa:d2:5f:d6:f7:ed:cd:24:6a:81:
                    73:9c:dc:d9:95:a5:d2:5d:dc:e7:40:b4:c2:1d:be:
                    53:40:6b:be:89:c3:17:e5:76:9a:3e:a6:90:4b:c6:
                    09:80:9d:2a:a3:f0:2d:2d:6d:0b:a2:a4:5e:8a:81:
                    4e:ec:2d:fe:60:16:53:02:54:0f:b8:84:30:88:e3:
                    48:97:eb:0c:dd:c9:76:80:1b:8b:95:1b:a2:b1:3f:
                    e5:0e:d6:45:9a:7a:0c:f5:00:30:ea:11:4e:8d:f5:
                    3c:f0:9c:87:7a:69:6e:ad:d0:ff:74:0c:ba:e7:19:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:49:94:23:9B:BC:44:72:F7:F9:DE:12:3C:14:FD:57:AD:34:AD:86
            X509v3 Authority Key Identifier:
                keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:78:37:e1:3c:59:db:26:1c:99:08:cb:1d:51:8e:b8:ed:
         95:d4:e7:fb:8b:5b:7a:a5:07:e9:68:71:5d:f6:e9:b7:fc:d6:
         f6:60:cf:27:ae:ed:d8:0d:2a:c2:57:91:f0:53:f1:b9:e5:f4:
         14:88:6d:ae:1e:3d:26:c8:47:2f:c8:f0:80:4e:4a:50:1b:71:
         23:68:aa:cb:19:9f:c9:c4:31:4a:2b:dd:fc:98:86:09:c2:15:
         48:50:f3:41:4e:63:85:cd:2b:54:c4:58:2b:34:34:03:9d:22:
         54:f7:d1:3f:3e:32:f2:02:d9:5c:95:e5:9b:16:d9:25:00:c4:
         58:91:5f:4c:9a:fb:18:0b:78:c0:b7:17:32:79:2a:ba:6e:53:
         4f:53:27:ac:7d:7b:eb:76:00:7f:03:f0:7b:5f:23:2a:75:cf:
         84:7d:42:53:4f:40:78:98:13:ac:26:33:81:d8:f5:f9:de:85:
         cd:86:af:34:25:4f:56:55:19:82:98:57:4c:ab:32:cd:d5:bd:
         e7:85:9d:2c:86:db:8d:e2:f9:57:66:a6:56:ce:4d:2f:63:63:
         2c:85:fe:66:5c:2b:8c:51:87:28:bd:88:26:3f:6e:78:d9:67:
         5c:8f:9c:c7:ec:e8:b7:8a:2f:17:53:48:4f:45:6b:81:d2:1f:
         71:da:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:02 2026 by rpki-client