Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
File:                     3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json)
Hash identifier:          rWTA5FM41VQQqMycSnYu2LMcad7bZjOG7SZCu0Ruom8=
Subject key identifier:   1D:02:AD:25:B6:BE:F5:6B:AE:32:DD:E6:72:8A:75:0D:4C:AC:6A:D1
Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
Certificate issuer:       /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
Manifest number:          027E
Signing time:             Thu 19 Feb 2026 00:47:51 +0000
Manifest this update:     Thu 19 Feb 2026 00:47:50 +0000
Manifest next update:     Thu 26 Feb 2026 00:47:50 +0000
Files and hashes:         1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: eVZmueluVqa2ZdDVJM+PdfxTS1pvemhXnrlI7s/auUY=)
                          2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: trPFy8cNIA9S7clvvpkdsBeW04ltNQk0Oe0zQdGvyFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
                          rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
        Validity
            Not Before: Feb 19 00:47:50 2026 GMT
            Not After : Feb 26 00:47:50 2026 GMT
        Subject: CN=69965db6-8ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:33:97:87:b1:5b:76:44:57:25:65:4f:4e:
                    23:5d:c0:98:46:df:82:ed:c6:0c:e8:f3:1d:2d:e4:
                    cc:ff:a0:22:e6:f1:24:67:c3:db:d8:68:80:f1:32:
                    f4:e3:67:16:0e:a2:f7:d2:d1:6e:d1:c8:8e:d0:cb:
                    ef:4c:1e:6d:56:17:6c:02:ab:e0:b0:c2:1a:29:28:
                    40:c1:77:1a:24:63:d9:5c:eb:9b:a9:0b:4a:a8:08:
                    30:b6:03:32:ea:a2:6d:da:13:03:81:2d:2c:69:4a:
                    db:92:c1:90:01:64:3e:d2:a9:aa:c4:b1:06:ca:a5:
                    4c:41:cd:4d:50:f8:82:5b:10:82:f9:7d:78:68:85:
                    fd:8c:77:46:f8:da:68:b1:b7:5d:4c:02:01:80:30:
                    df:c7:69:b7:f3:ab:a0:23:3f:bb:67:8c:fb:33:11:
                    1b:0d:8a:70:1a:1f:e3:8a:79:51:83:2f:4c:37:d4:
                    87:48:2b:9d:31:b5:ac:89:07:1a:39:1d:73:88:66:
                    84:2b:c7:2c:ec:a8:ab:5b:7a:56:6c:56:a8:4c:9c:
                    33:ac:d8:85:25:8c:07:34:eb:b5:a3:90:0c:6a:89:
                    65:ef:e4:7c:ca:3f:db:c4:94:ef:a6:9a:f9:81:67:
                    0f:e0:9f:d4:dc:81:c2:09:6d:ab:ab:61:58:b5:95:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:AD:25:B6:BE:F5:6B:AE:32:DD:E6:72:8A:75:0D:4C:AC:6A:D1
            X509v3 Authority Key Identifier:
                keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:96:7b:4a:c0:40:ac:05:f5:04:d1:91:3d:9f:45:48:37:
         0d:39:84:39:88:7f:fe:1d:17:26:dc:41:d0:eb:c7:51:99:30:
         ea:c7:3d:e2:6f:24:0d:65:29:2c:9a:65:2d:eb:a9:04:93:7f:
         c8:9a:04:75:f5:f3:e8:99:88:67:7e:6a:02:f0:d5:1e:4e:da:
         89:61:f1:27:9b:25:0f:fd:7d:cf:cd:3e:81:a9:a5:1f:40:35:
         15:13:e7:42:6a:e4:79:fd:48:b4:03:db:5b:0e:7b:f0:3b:41:
         7d:05:ac:2c:d4:88:81:f1:38:3f:71:d7:b1:90:fd:a7:da:e9:
         44:3d:1e:1b:4f:af:03:6b:44:1c:90:5b:cb:5f:42:df:64:fd:
         69:13:1c:34:1c:bf:41:14:32:1f:e1:7d:b0:4e:59:41:f3:f5:
         81:f0:e4:b4:04:10:0d:a4:65:74:52:c9:e1:87:bf:cd:ba:9b:
         1e:f6:6f:3c:4a:c1:e7:d4:51:10:b0:d4:c0:54:e6:aa:6a:3c:
         2f:cc:fa:ef:25:d4:af:0b:e4:a0:b5:1b:07:2d:d3:b5:5d:d1:
         ab:93:6b:69:ad:2f:ef:c0:b3:37:d5:db:a8:6f:4d:47:97:2b:
         f0:fc:5a:59:b2:73:90:8f:e1:36:a2:9d:f3:af:85:81:9c:bc:
         db:b0:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:51 2026 by rpki-client