Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft
File:                     17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json)
Hash identifier:          nTf2H8XRXZlTV4tO7V5poIgeoSt3NE7moR+fqbnTsBk=
Subject key identifier:   C8:AB:2E:8D:BC:FB:A5:E8:AE:27:7F:15:FF:40:6D:5C:77:AB:8D:97
Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE
Certificate issuer:       /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft
Manifest number:          04
Signing time:             Thu 19 Feb 2026 07:27:05 +0000
Manifest this update:     Thu 19 Feb 2026 07:27:04 +0000
Manifest next update:     Thu 26 Feb 2026 07:27:04 +0000
Files and hashes:         1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: etzUKjt+NKvfZJXzpArnRb+54fKt+pnBWGNfdqyUvUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl
                          rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE
        Validity
            Not Before: Feb 19 07:27:04 2026 GMT
            Not After : Feb 26 07:27:04 2026 GMT
        Subject: CN=6996bb48-ac07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:a7:0e:23:78:35:01:04:53:ef:a4:31:99:
                    e6:85:41:36:fa:7d:98:7b:12:02:dc:d9:65:5e:2a:
                    0b:40:e8:98:bf:d0:24:0c:3f:36:03:9d:86:ca:ff:
                    63:0b:58:26:1d:80:3c:fd:ff:f0:c9:39:1f:1f:06:
                    b9:cd:83:14:4a:e1:af:24:34:a0:1a:cd:6b:b7:e6:
                    a6:d7:2e:d6:c7:f3:c5:62:65:49:ae:00:b6:d0:d0:
                    27:a6:71:b8:98:cc:35:8b:7f:54:a3:64:85:90:47:
                    0e:80:7b:9b:d9:8f:87:fb:0d:b3:88:8a:62:4a:62:
                    c9:12:a9:c2:cc:db:f2:7e:89:0a:30:69:a0:89:77:
                    5b:e5:25:cc:13:ba:72:7c:3d:06:ed:ce:46:d4:6d:
                    8b:3e:ad:88:bf:65:72:de:c3:1d:ad:5e:cf:73:a2:
                    d9:e9:33:bb:3c:ab:1c:c8:71:69:0d:4d:d5:61:5b:
                    36:ea:d7:86:08:c3:b0:90:30:60:6d:60:2d:3e:ec:
                    72:99:85:2d:9e:d9:db:cf:0d:fb:0a:98:81:52:f3:
                    39:be:92:aa:cf:6f:cd:69:f5:64:83:3a:47:e0:a5:
                    a9:f1:44:be:2b:fc:a3:f1:59:21:06:a2:7f:ae:81:
                    af:50:91:99:35:80:ee:e5:b0:65:4d:5d:bc:be:22:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:2E:8D:BC:FB:A5:E8:AE:27:7F:15:FF:40:6D:5C:77:AB:8D:97
            X509v3 Authority Key Identifier:
                keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:79:bf:77:07:24:1a:2a:da:f2:12:44:35:0f:de:f0:cd:
         5c:24:5f:8f:8d:f4:92:58:f8:9b:ff:4a:91:74:5d:65:ff:5d:
         bb:38:a5:f7:c3:88:94:f9:4f:74:52:0f:16:ba:23:65:56:e3:
         ea:f9:54:df:6f:db:6e:8b:88:14:c2:49:81:b0:cc:09:f6:27:
         1e:fc:03:43:b6:2a:37:7c:cf:f2:68:c5:6e:f4:2f:5f:14:ff:
         bf:f9:67:67:69:f3:50:db:18:4a:4e:46:65:a2:84:da:57:5d:
         1d:8c:15:8f:ac:94:60:b8:c4:76:cb:32:11:3d:06:d1:b8:24:
         9f:4e:ce:62:17:53:c3:d0:0c:0b:49:a7:1c:e6:4b:10:a1:43:
         e7:fa:7d:58:51:9f:a1:a4:27:71:7e:9d:1e:a0:08:9e:cc:25:
         92:ba:9f:74:1e:65:92:ae:f5:bd:8f:2f:e5:a4:49:65:16:5c:
         bc:59:c3:1f:9b:ab:ae:ca:c6:14:03:89:c6:e1:19:0f:ed:60:
         23:6d:c1:5b:0a:3f:7f:0c:a5:59:04:bf:bf:9d:ec:da:5e:91:
         c4:2c:cf:d1:ee:eb:73:43:59:9a:de:56:0d:28:46:f6:e7:1f:
         ef:f1:8a:2f:2f:9f:d8:71:56:0e:d7:85:bc:df:e0:ce:a0:12:
         75:17:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:05 2026 by rpki-client