Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
File:                     D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json)
Hash identifier:          js3ZWGNvV5GxjRsIYOh3D5ciWx0jWRF7119xl1l1at0=
Subject key identifier:   40:4E:0D:F5:F4:3F:B6:6D:DE:27:1E:4D:44:16:3C:61:82:F4:E7:3E
Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA
Certificate issuer:       /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
Certificate serial:       0A44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
Manifest number:          0A3D
Signing time:             Wed 18 Feb 2026 19:16:50 +0000
Manifest this update:     Wed 18 Feb 2026 19:16:50 +0000
Manifest next update:     Wed 25 Feb 2026 19:16:50 +0000
Files and hashes:         1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: uinzle17usUQ15JU5GGwBLiy9Hn5jD6fCoPzl9E63E0=)
                          2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ZlFR2HTwg3fDW4lClQanT4TaI4rdoCBr8+QBrXHDB9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl
                          rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA
        Validity
            Not Before: Feb 18 19:16:50 2026 GMT
            Not After : Feb 25 19:16:50 2026 GMT
        Subject: CN=69961022-a5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:de:45:33:11:8f:28:67:57:81:9a:cb:08:
                    78:37:ce:4e:78:7f:30:df:80:f3:d0:73:4a:4e:5b:
                    91:06:66:ee:e6:7f:f3:42:b6:c6:48:28:e5:41:03:
                    75:61:24:fa:12:7f:a2:60:63:c3:2e:4d:41:41:b9:
                    2d:5c:d0:f7:79:e7:6f:69:f9:fe:a4:65:b9:fd:7d:
                    a0:e5:eb:8f:f7:32:0c:a4:d3:10:4f:53:9b:52:3f:
                    c6:f7:d2:aa:4f:e7:88:44:8b:d5:93:ab:99:09:29:
                    fb:7c:97:d0:8d:39:db:6c:b5:3b:cc:09:56:be:cb:
                    38:8d:85:c0:91:43:a8:cf:fc:18:31:f3:16:01:f0:
                    6e:88:be:df:37:09:3d:66:36:9f:13:a9:d8:58:bd:
                    43:0c:dc:5a:f7:bb:c9:43:19:19:7b:37:97:a1:48:
                    20:83:44:59:b6:2e:ac:1b:87:0a:1b:00:a4:7b:87:
                    aa:70:83:0f:6f:17:33:3a:f6:7e:18:84:10:b0:c6:
                    c8:67:eb:09:ec:27:67:ce:ae:35:1d:e4:c3:6c:5d:
                    31:17:cb:73:85:4b:1a:24:88:51:21:e6:74:a7:2c:
                    d8:50:0d:df:de:f7:70:bd:fa:20:27:91:a9:7e:2d:
                    db:bf:33:df:9f:06:e0:3f:36:57:56:0f:6f:3e:7b:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:0D:F5:F4:3F:B6:6D:DE:27:1E:4D:44:16:3C:61:82:F4:E7:3E
            X509v3 Authority Key Identifier:
                keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:42:1e:89:98:44:27:e6:be:ac:23:e3:6a:da:01:51:34:
         65:ff:af:5f:a5:bb:94:6a:89:35:1c:b4:bf:0e:73:d4:d6:db:
         c9:ac:4b:f1:56:66:da:54:b0:15:dd:d3:1e:42:bf:c7:f9:3b:
         98:4c:ea:9e:1a:aa:eb:9b:d1:4e:0d:85:6d:4d:44:c8:dd:96:
         4a:ba:12:72:f3:50:b9:70:42:3e:9e:f8:a5:a3:16:25:70:62:
         8d:e0:b3:70:04:b2:c8:8a:06:4d:f8:ef:5d:4f:09:9e:d3:5c:
         d2:23:98:4e:16:0b:7c:91:47:e2:db:40:bc:c5:3a:71:90:61:
         94:55:41:81:a2:92:6c:41:e3:2a:42:2f:c1:ab:25:69:37:9e:
         7b:37:e6:49:cd:ab:20:9d:9c:06:9a:43:a5:e1:81:2f:71:ef:
         c8:2d:9c:b3:00:6b:96:89:42:25:cd:d7:f4:17:6c:80:35:8f:
         d5:a7:49:a3:b2:fe:27:d9:57:d2:fa:e9:59:02:e6:ed:d6:4a:
         3e:dc:b9:7b:71:f3:3e:7d:0e:28:40:1c:05:a5:59:b8:98:13:
         ee:2d:66:61:9d:04:11:36:bb:72:9f:ec:f0:3d:59:78:f6:74:
         56:10:44:ca:11:14:47:98:5c:aa:e9:36:0c:c8:b5:37:b0:b0:
         ba:22:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:37 2026 by rpki-client