Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          emvHmubuGRnDP2wjGfVJX9ouRp2+j/6PFMW92dJSbns=
Subject key identifier:   F6:AD:C3:BE:4A:41:27:6D:12:B2:57:17:75:10:8D:76:FC:03:4C:D7
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          CD
Signing time:             Thu 19 Feb 2026 05:10:35 +0000
Manifest this update:     Thu 19 Feb 2026 05:10:35 +0000
Manifest next update:     Thu 26 Feb 2026 05:10:35 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: MQz7uOHL6IBPd1e3Z1B3KSO9ApHe03GhMqrrtnoG8o4=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: AKbst0tc9sdS9wF8FkNfPqOOi8NP7HSeWWwqA1873bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Feb 19 05:10:35 2026 GMT
            Not After : Feb 26 05:10:35 2026 GMT
        Subject: CN=69969b4b-8a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:37:3f:06:07:77:67:56:ae:5e:05:f4:63:
                    f3:18:84:89:ca:f5:b8:4e:4d:25:9f:65:37:dd:7b:
                    00:3e:2d:b9:55:1e:1c:09:1a:14:b2:b2:c0:bc:ad:
                    d4:ec:79:4e:32:4e:66:59:2a:31:a3:51:84:06:2d:
                    08:14:da:3b:08:9d:91:18:e4:82:ab:c8:d3:47:7d:
                    92:a0:81:5f:3e:d0:eb:70:38:75:75:c7:96:93:cb:
                    96:c2:cf:95:f5:ea:2f:66:cc:ed:c3:16:5a:b9:df:
                    69:11:e3:f3:f3:14:96:a7:61:ae:cc:8e:4c:f6:e2:
                    29:ff:01:0d:ff:35:b6:07:c2:ea:43:79:36:76:47:
                    9e:a9:16:ae:d7:7f:c9:d8:2c:5e:90:ce:77:46:f8:
                    03:22:47:50:e9:68:8d:01:f2:56:52:17:04:2c:a0:
                    35:6a:d4:57:d2:ec:b3:cb:90:82:92:42:03:14:67:
                    fa:ef:80:5a:ac:5f:4f:42:6b:24:06:02:56:ba:fe:
                    cf:1a:93:75:cc:3e:e0:73:40:3a:ed:06:74:62:ad:
                    bf:22:78:d4:91:b1:08:9a:7f:08:01:64:d3:94:08:
                    7f:36:07:90:ee:90:28:a9:64:98:a1:66:18:91:58:
                    e6:85:1c:5c:a8:c6:2c:51:fd:28:ea:f4:72:fd:2c:
                    1f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:C3:BE:4A:41:27:6D:12:B2:57:17:75:10:8D:76:FC:03:4C:D7
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:a4:40:e5:67:46:c9:b2:1a:66:6c:23:ad:ec:52:cb:de:
         e0:7f:30:9b:d6:ba:45:1f:74:1e:fc:a3:04:eb:58:01:53:c1:
         1c:81:40:a3:18:90:58:4a:99:0c:38:90:e0:32:ec:43:b4:d9:
         67:9f:b5:a3:9c:38:e4:da:91:72:56:b1:dd:83:bd:6f:9e:c0:
         b4:74:40:b4:c8:e1:72:03:37:c1:26:50:c9:df:02:33:8a:ce:
         08:27:67:4a:c8:45:29:a5:ac:e7:b7:b5:ac:c8:85:1e:45:1b:
         44:74:f7:ec:3d:e9:55:8a:15:2f:b1:1f:c7:4b:72:f3:d4:29:
         a9:1e:2d:1b:da:30:87:01:e5:fb:c0:f1:ac:ca:86:a6:46:cd:
         80:c4:7a:15:9f:a4:e2:ff:c3:b7:92:96:f9:a6:8d:07:69:87:
         65:ab:ff:e0:7e:71:75:4c:8e:b4:34:d9:56:b8:e0:1c:aa:35:
         f0:1c:a1:f4:36:9a:da:34:8a:b3:d1:49:cc:56:53:38:4b:74:
         a0:95:2e:99:82:f5:14:0a:67:fa:bc:12:07:39:63:f5:bd:16:
         b1:2b:9b:b5:3c:7f:c1:ce:08:d5:26:fb:8b:63:15:2f:b2:76:
         10:61:73:f6:50:bc:e0:66:73:fb:db:19:87:a8:79:60:f3:58:
         52:32:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:32:02 2026 by rpki-client