Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File:                     XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier:          iE/5zLdMtXVT99imlNjbWhc65ctheFxwBH0DEdzkwJE=
Subject key identifier:   B7:B6:A0:3A:05:8E:12:44:46:68:7A:71:BD:B4:EE:1C:98:81:0E:0B
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer:       /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number:          C7
Signing time:             Thu 19 Feb 2026 05:21:45 +0000
Manifest this update:     Thu 19 Feb 2026 05:21:45 +0000
Manifest next update:     Thu 26 Feb 2026 05:21:45 +0000
Files and hashes:         1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: R1YTyl6G+AWt06La7O3OPWT1+DaG+U57NRM73NbS8xg=)
                          2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: nY9SnH3XV0jBQtfc+UOqx27pO7JEzdlFPgYbBdgEcrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
        Validity
            Not Before: Feb 19 05:21:45 2026 GMT
            Not After : Feb 26 05:21:45 2026 GMT
        Subject: CN=69969de9-8dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:bf:d1:ad:f4:dc:75:45:6b:d6:5b:85:4e:
                    09:f9:98:90:8e:25:cc:90:12:f9:37:9c:2e:39:a5:
                    55:74:08:5d:54:9a:c6:6a:7c:b8:2c:54:4a:12:73:
                    9c:48:96:38:ed:56:22:dd:37:8d:22:75:94:5b:1e:
                    31:56:02:27:89:c6:23:9b:76:bb:21:18:69:46:c2:
                    65:51:12:e7:f9:02:73:00:45:9a:20:2d:c0:79:49:
                    5c:cd:60:fc:ff:49:88:98:85:7a:0c:0e:56:04:b1:
                    63:a9:42:79:5f:76:c8:5d:d3:83:c5:60:81:bf:ee:
                    bf:10:76:e4:af:ea:c0:9f:63:c8:e5:38:18:fc:26:
                    f3:28:8d:42:65:96:84:0f:0d:56:ec:ef:5b:1a:66:
                    c4:ab:34:57:bd:8c:63:16:f6:ee:82:de:ed:08:8c:
                    9e:02:c3:06:fa:1e:72:c6:05:0e:9f:61:4d:36:8e:
                    bd:2f:e7:af:60:dc:12:28:7b:31:3a:50:cf:e8:13:
                    54:7c:65:5d:79:46:a7:92:fc:cb:65:ad:57:c8:d3:
                    b3:81:e7:ab:3d:e1:52:f1:09:86:45:66:44:b3:b4:
                    5b:94:2a:f1:a7:f9:fc:0c:0e:89:8c:09:29:3a:49:
                    16:6a:0a:17:e6:f6:d0:f4:06:b1:f9:05:5f:17:c7:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B6:A0:3A:05:8E:12:44:46:68:7A:71:BD:B4:EE:1C:98:81:0E:0B
            X509v3 Authority Key Identifier:
                keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:db:51:a0:6c:61:38:30:fc:62:da:d9:e9:0c:5f:ec:60:
         c2:93:e1:40:56:49:cc:b6:b1:e7:67:bf:72:91:69:b1:09:69:
         f5:6a:d8:75:73:62:b1:7b:9d:31:c4:e3:72:37:d1:0d:9e:2a:
         8b:4f:89:32:9c:cc:e1:27:27:0c:f0:4d:c6:cd:3b:93:35:14:
         e3:28:f6:84:3d:8e:24:2f:9e:b1:5e:58:7f:70:93:91:cb:6a:
         34:07:5d:02:db:8e:ad:54:9b:04:98:c6:2e:47:c6:8c:79:db:
         89:19:d4:07:92:d0:a3:a1:62:8e:b8:d7:23:5d:ee:3c:8a:3c:
         3d:d1:80:81:07:4a:6c:81:93:c7:63:58:a7:34:09:a6:c5:35:
         73:10:fd:3b:b9:45:35:b6:1a:0f:7a:fa:cc:6d:50:b1:f4:c1:
         3e:a7:f6:63:2f:a2:e2:4c:bf:7d:a5:df:14:b2:c0:b4:01:5b:
         91:bb:f4:9e:f5:6e:c8:b6:ee:73:ab:9f:55:0a:ca:ea:a4:89:
         4d:6f:e3:58:2d:22:65:d2:c0:7e:d5:1b:88:53:7e:27:4c:c8:
         4c:63:d6:f4:cf:cb:0a:39:50:2d:02:34:8f:5b:3f:26:58:13:
         e1:94:19:8e:02:b2:b7:5c:20:0c:a9:2f:6d:fb:a2:6b:3a:05:
         b2:a5:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:25 2026 by rpki-client