Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
File:                     aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json)
Hash identifier:          26QZswvFD2VzxX5fGQWQZmagWn+JbQld4bd/bW8WIxQ=
Subject key identifier:   97:B2:21:D1:13:6B:25:99:C9:42:C5:13:72:E0:66:8F:D7:01:14:0F
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Certificate issuer:       /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
Manifest number:          08
Signing time:             Thu 19 Feb 2026 07:24:39 +0000
Manifest this update:     Thu 19 Feb 2026 07:24:38 +0000
Manifest next update:     Thu 26 Feb 2026 07:24:38 +0000
Files and hashes:         1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: GaCpblfglL956qFZoLtktVyFdU0flX4wEK8Yq0nTB+U=)
                          2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: tEgQGD303wd4wLHz36nCQCa5a3KwSI+T4puQSCCo+wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
                          rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
        Validity
            Not Before: Feb 19 07:24:38 2026 GMT
            Not After : Feb 26 07:24:38 2026 GMT
        Subject: CN=6996bab7-6c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:64:01:36:99:6a:20:83:1f:aa:cc:ef:2f:
                    09:ab:63:c2:cb:ba:a8:de:13:66:ed:65:85:3a:38:
                    45:02:97:f8:2d:cc:07:43:5b:95:cf:22:87:ab:15:
                    3c:50:e8:20:a0:08:23:d5:e0:72:c7:d6:84:26:b6:
                    fe:08:09:42:b2:e5:11:81:6d:9e:54:ea:31:5d:cf:
                    6a:1b:ab:2c:e0:af:95:fe:73:72:ea:ed:c5:1c:c3:
                    de:3f:e7:8a:d8:f0:67:67:8b:85:fc:f9:15:1b:d7:
                    99:91:b8:6c:2c:04:c1:ac:91:b5:fd:0b:ba:a3:64:
                    ea:8f:ef:88:13:13:a2:52:c4:c8:2e:b6:69:4c:d0:
                    98:df:73:e1:4a:1e:a3:5b:ea:38:4b:e4:f3:b4:e9:
                    6d:2b:bc:05:c9:50:3f:97:8d:3b:bc:f7:7f:1e:9b:
                    a6:5a:e7:9d:39:22:6c:f7:6b:6e:52:0d:a5:4b:f4:
                    d7:d1:f7:8e:7a:cb:b8:47:cc:fa:77:89:b2:5a:32:
                    f6:88:18:6f:ee:74:45:bd:c2:d1:0c:33:64:4d:a1:
                    94:e5:d3:2c:31:69:a2:69:7f:e3:40:4e:2f:c1:50:
                    93:cb:2c:ba:4a:c1:57:7d:c1:dd:74:10:92:93:65:
                    28:f4:39:60:e2:85:9a:50:5b:09:ad:0d:d1:68:1c:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:21:D1:13:6B:25:99:C9:42:C5:13:72:E0:66:8F:D7:01:14:0F
            X509v3 Authority Key Identifier:
                keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:23:a2:a9:08:4d:0c:ff:d5:7c:ac:86:52:1f:7a:0d:4a:
         0a:6a:f0:25:ec:ee:b2:57:34:20:cb:e7:94:dc:eb:9a:c4:0c:
         0f:8a:b3:74:7b:aa:19:eb:f8:a0:9c:67:67:4a:f1:5f:cf:e3:
         e3:e1:2a:70:af:36:e0:d4:93:73:62:77:67:45:e0:68:8a:10:
         93:8b:7f:58:93:42:b4:91:8a:8a:8b:fe:58:3a:0b:cc:ec:bf:
         6f:ba:33:24:06:4f:1c:38:49:dc:32:6d:a9:07:46:6d:13:2f:
         c6:83:49:fb:ac:e9:e6:ec:fa:f2:c4:28:97:fc:6e:29:73:f6:
         a5:0b:9e:b1:49:63:ef:58:fb:67:3d:23:b2:63:a5:82:4f:d9:
         18:e1:92:df:61:09:32:97:9e:24:2a:87:2c:2e:2f:a3:35:33:
         03:2a:23:60:56:bd:0d:3f:f0:f3:f2:bd:05:0f:fc:29:66:eb:
         d1:3b:e5:60:fd:fa:6d:fb:6c:0b:7c:66:25:37:55:6e:55:53:
         d3:db:9f:a8:d7:e1:6d:be:59:c0:46:6d:cf:ab:b9:d3:89:40:
         f3:89:ee:ba:22:e2:ac:3f:0f:1b:d4:6e:fa:d6:11:bb:7a:3d:
         90:fc:17:8b:aa:35:a9:dd:a0:d1:f1:32:60:de:7a:c5:d3:fb:
         d3:48:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:04 2026 by rpki-client