Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
File:                     57DhU8QU0ThUitp16M0FzWk2cgY.mft (raw, json)
Hash identifier:          +ElYaxVecN7naplUprlSF6i4+iWBGo3ouEOkoXSPPEI=
Subject key identifier:   20:4B:AF:84:A6:E9:DC:2A:43:99:61:5F:D4:55:9C:BB:05:FF:42:36
Authority key identifier: E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06
Certificate issuer:       /CN=A91B42CA/serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
Certificate serial:       3512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
Manifest number:          5425
Signing time:             Wed 18 Feb 2026 14:59:01 +0000
Manifest this update:     Wed 18 Feb 2026 14:59:00 +0000
Manifest next update:     Wed 25 Feb 2026 14:59:00 +0000
Files and hashes:         1: 57DhU8QU0ThUitp16M0FzWk2cgY.crl (hash: lSY9wSix/aWOYMSiB4mGYD+MbtRnxuoZsQKoVjvQtgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=E7B0E153C414D138548ADA75E8CD05CD69367206
        Validity
            Not Before: Feb 18 14:59:00 2026 GMT
            Not After : Feb 25 14:59:00 2026 GMT
        Subject: CN=6995d3b4-b912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:d9:60:00:66:6f:78:ad:6c:e3:59:1c:1d:
                    4e:86:17:90:74:3d:bc:6a:6c:b4:ba:f9:67:1e:09:
                    39:86:fd:e9:85:24:66:85:e9:14:1c:e8:48:4f:68:
                    e4:b5:11:77:92:27:48:03:be:3c:91:9c:19:2e:33:
                    cc:65:cf:b9:e9:3e:c4:76:dd:47:46:b9:e4:53:4a:
                    40:cf:1c:4a:eb:f9:e0:5c:21:51:26:41:50:9f:bc:
                    35:12:df:21:9f:9f:22:93:8d:79:43:11:30:47:90:
                    3a:9b:2b:dd:44:fd:e7:b8:c1:c7:55:41:12:ad:13:
                    de:16:e6:c0:81:76:2e:dc:91:52:be:27:88:fa:36:
                    1d:de:13:85:a7:8a:bb:48:71:0d:b4:de:ba:d7:7f:
                    0c:d5:7d:82:38:60:b4:66:1e:e4:b1:48:3b:b5:2b:
                    87:03:ec:9b:7d:81:44:1b:87:e4:51:a9:fa:05:95:
                    f1:b4:db:7a:33:70:1a:ee:1d:51:8a:9f:1d:c9:98:
                    61:de:11:c6:ee:ad:c7:9c:1e:0d:59:4c:be:75:6d:
                    6c:c6:40:15:82:0d:b1:98:c4:e7:5d:a5:4e:a6:5c:
                    84:c7:33:54:3c:57:77:9a:44:d5:97:da:05:da:4c:
                    99:38:36:36:b4:4a:87:1d:ad:59:cc:05:dd:00:4c:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:AF:84:A6:E9:DC:2A:43:99:61:5F:D4:55:9C:BB:05:FF:42:36
            X509v3 Authority Key Identifier:
                keyid:E7:B0:E1:53:C4:14:D1:38:54:8A:DA:75:E8:CD:05:CD:69:36:72:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57DhU8QU0ThUitp16M0FzWk2cgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/57DhU8QU0ThUitp16M0FzWk2cgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1b:89:a1:4b:06:fe:7c:9a:64:a3:76:1a:ab:09:c9:8b:d3:
         c0:98:75:9c:99:c0:43:4f:b8:46:3e:76:ba:07:2a:40:1a:cf:
         1d:bd:c6:03:b5:f0:97:26:f2:cd:3c:a0:12:64:f9:2c:c5:00:
         e1:d8:08:35:1a:18:e3:ab:d7:b8:a4:e5:9c:b3:de:3b:50:53:
         f7:b6:a0:14:91:f2:0e:13:20:0a:ab:96:59:7d:b5:c2:8a:b8:
         72:32:00:e3:df:f3:67:95:6e:19:5b:fc:35:40:e1:a7:c2:d5:
         0e:dc:1c:93:8a:9b:bc:74:36:c2:ad:d0:4d:d5:cc:4d:da:0a:
         b0:46:37:3a:75:45:c6:a2:e0:00:c2:5c:75:13:0f:5e:96:05:
         a2:78:b2:fa:0d:ec:34:e4:fc:ab:bb:2e:2a:b0:df:9e:d8:fa:
         bc:09:3a:5f:84:aa:1b:c7:bc:1c:63:71:32:c3:af:2e:61:41:
         0c:86:96:e4:f9:ab:62:61:5c:0e:12:d7:d2:d4:20:67:65:d7:
         e0:3b:12:93:c0:89:05:ab:07:ef:60:bc:f1:a0:37:b5:03:53:
         c3:1d:7f:4f:ce:48:d9:02:10:52:5a:c3:a6:cc:2d:25:f2:a9:
         ab:ba:bb:4f:be:87:5e:d5:e5:55:26:e3:2e:df:40:8c:49:83:
         7b:41:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:57 2026 by rpki-client