Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File:                     KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier:          0ZazS4+a0TUkuozvImuOvRDPVTFUueABu+C2REoUm0g=
Subject key identifier:   11:AD:EA:02:0D:AB:9A:73:0A:1F:6C:12:10:8F:43:06:A9:5C:0E:58
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer:       /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial:       02ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number:          02E0
Signing time:             Thu 19 Feb 2026 00:32:59 +0000
Manifest this update:     Thu 19 Feb 2026 00:32:58 +0000
Manifest next update:     Thu 26 Feb 2026 00:32:58 +0000
Files and hashes:         1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: LPeIROO1F6+NnB0hkMPNMWZ0wML6xPkQS2t4CBhwpXg=)
                          2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: wYfrxBgpnREsPiR0qsIaHokVToTMzCIKH0+74g0LVvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
                          rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
        Validity
            Not Before: Feb 19 00:32:58 2026 GMT
            Not After : Feb 26 00:32:58 2026 GMT
        Subject: CN=69965a3a-8001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:0a:af:7e:71:3f:43:48:b6:00:5e:1d:68:
                    44:97:60:c8:0c:fe:55:42:2d:99:7f:c1:03:2e:76:
                    2b:d4:bb:34:07:c8:86:cf:ae:57:d6:15:81:41:8a:
                    f9:d5:86:f6:49:83:f3:95:6d:17:48:49:09:7f:39:
                    72:b9:71:9e:04:0a:8d:85:1d:f3:78:8a:9e:ae:99:
                    dc:68:5a:56:ef:de:9b:e1:71:f6:88:99:b3:c8:2d:
                    cd:0f:45:82:d0:f9:5b:3c:dc:4d:78:a4:98:d2:30:
                    12:80:7f:12:b2:06:5c:60:2f:41:db:de:1f:7b:3b:
                    8a:59:e1:18:ef:e7:97:af:37:c5:9f:17:8f:86:c5:
                    ab:1f:aa:57:04:f7:ac:fe:24:f3:a7:64:2f:a7:f6:
                    a1:86:ca:81:ee:df:ee:4e:38:0f:10:83:9c:b0:d9:
                    89:76:15:7b:d7:96:3d:58:8a:ae:45:e1:59:7e:ab:
                    b3:f9:2a:4e:80:af:f5:6c:09:59:e5:5b:a3:fb:94:
                    da:9a:0e:3e:7c:0a:ea:07:d9:00:2b:3b:19:db:22:
                    98:d1:43:6f:6f:92:04:87:d4:82:0d:05:ca:7f:f0:
                    fd:db:ae:c4:f5:0b:5a:3f:d0:39:92:82:42:dc:a3:
                    4d:de:bc:9f:75:29:27:93:33:62:03:4b:ef:28:71:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:EA:02:0D:AB:9A:73:0A:1F:6C:12:10:8F:43:06:A9:5C:0E:58
            X509v3 Authority Key Identifier:
                keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:ed:52:2f:6b:2c:d0:fa:89:70:bf:45:1b:3a:5b:d2:71:
         e3:bc:cf:d2:ba:26:1b:95:74:4e:26:5b:9a:96:de:8e:05:d9:
         b4:59:0a:0e:c0:e2:3b:c1:15:dd:56:5e:03:b4:9c:f3:d2:14:
         9e:68:47:3b:55:41:e9:49:36:74:f8:f3:1d:7d:12:ec:85:a6:
         91:af:4c:8a:c8:ca:91:62:9e:a7:d3:46:23:2a:b9:c4:14:fa:
         f3:31:3d:ee:25:56:56:cb:2d:5f:8d:6b:87:a6:21:b0:a5:f5:
         36:02:ea:ec:72:c2:ee:a8:76:81:41:26:7a:0b:0f:9b:c4:76:
         00:bb:0a:0d:8f:87:e4:40:3c:bf:cb:c0:be:14:5f:7a:00:79:
         6b:e5:b8:a5:73:65:e0:60:0d:59:bf:57:38:8c:da:40:e3:c8:
         b0:fd:70:f4:a3:41:57:f9:38:53:d5:b4:07:6f:d5:85:53:dd:
         e1:77:4d:af:9f:8b:e0:c9:d9:ab:c4:a5:d3:40:c8:5f:91:4d:
         c7:18:ae:13:25:40:34:d1:7f:84:1c:98:17:c5:e4:ff:fd:a0:
         f7:cc:7a:2f:e6:8f:28:99:1d:77:4e:95:54:8b:f3:2f:34:fd:
         7c:0b:9d:e4:8e:e8:79:62:da:85:06:b9:ad:40:10:26:2e:a8:
         96:f0:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:42 2026 by rpki-client