Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File:                     HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier:          LMGKZ7/X4G9IDwtqv1OIRPL5rYX+0AJHeMn4m9Sa8I0=
Subject key identifier:   71:6D:73:B6:01:5D:EB:91:67:1D:AE:08:A8:6D:30:E6:F6:89:50:C1
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer:       /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial:       0ADC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number:          0AD2
Signing time:             Wed 18 Feb 2026 19:02:31 +0000
Manifest this update:     Wed 18 Feb 2026 19:02:31 +0000
Manifest next update:     Wed 25 Feb 2026 19:02:31 +0000
Files and hashes:         1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: FYEP+1oVTNaDWYReKI1tdnp4EC5TleFXcxqZ9AwxQPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
        Validity
            Not Before: Feb 18 19:02:31 2026 GMT
            Not After : Feb 25 19:02:31 2026 GMT
        Subject: CN=69960cc7-0776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:ab:8b:64:e2:ef:5f:b8:4b:3f:11:93:0b:
                    86:b3:85:a7:e3:16:d4:cc:97:96:d5:40:5c:d4:86:
                    b6:33:88:1d:b3:b5:c0:dc:b3:e4:44:a8:3e:8b:1f:
                    c4:4a:ba:db:18:d4:b0:3b:c0:fd:1a:67:c7:38:b2:
                    06:87:41:09:d3:d5:ba:29:6b:51:22:83:98:0f:07:
                    7b:4b:0b:aa:97:f6:c1:e8:88:f5:f1:72:c7:ef:52:
                    0f:49:e6:f8:64:a8:2a:6a:1e:e6:2a:e6:68:e0:ba:
                    7f:89:4a:9b:38:a7:2f:9b:f3:de:ce:4c:d1:9c:46:
                    e4:a3:83:a5:9a:77:e3:98:85:c1:ad:f9:c5:7e:24:
                    5e:51:51:85:2a:c5:31:84:f3:45:42:ad:21:31:62:
                    ab:8d:a8:72:b7:10:24:51:1d:4c:b3:3d:ad:95:52:
                    c9:cb:24:17:36:b9:9d:8f:70:79:f5:35:82:41:a1:
                    14:04:e0:bd:8c:f1:5e:cd:4f:e0:00:6b:af:fc:cf:
                    45:10:be:ba:12:5b:38:ab:b4:a2:49:80:15:82:f5:
                    01:ea:06:c4:e2:13:4f:fd:e0:5e:f7:c2:e3:ac:c7:
                    87:dd:70:02:87:a6:81:ff:68:7b:19:ab:21:a1:1c:
                    5a:5e:cb:9d:93:88:5b:de:f3:42:23:19:10:ca:46:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:73:B6:01:5D:EB:91:67:1D:AE:08:A8:6D:30:E6:F6:89:50:C1
            X509v3 Authority Key Identifier:
                keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:90:e4:3e:da:d7:0d:78:29:d6:de:32:1c:15:9c:17:29:bb:
         67:b9:65:72:88:f4:60:96:22:eb:d6:c6:af:65:b0:e7:49:15:
         7b:65:c7:a4:1b:38:a5:b1:46:dd:f6:d9:97:c9:f0:70:37:63:
         54:0e:0d:dc:fa:76:a8:5d:ca:a9:3c:f0:17:0d:81:f8:26:7a:
         e8:c7:d1:82:96:7e:29:88:3e:ac:b8:f2:42:6a:af:35:b1:97:
         cc:f6:47:7b:4a:4f:70:15:74:fc:aa:14:10:c0:96:48:e8:00:
         a4:18:7c:14:fa:54:31:d5:eb:fc:b4:67:bb:ac:87:c2:be:96:
         1e:db:aa:c0:5f:57:2a:b0:af:bd:ad:0d:27:90:c3:46:62:ac:
         da:96:44:ce:6d:d9:4c:b4:37:da:45:d9:20:e0:33:69:37:b1:
         30:5b:d1:75:d1:7e:7d:aa:b5:76:06:73:19:bd:23:9b:19:72:
         88:2b:2f:f6:86:37:f3:46:9d:85:43:23:70:61:d5:8e:d3:e2:
         80:6e:81:2a:4c:b1:6c:89:37:57:84:ca:c4:47:91:ac:26:0d:
         48:98:dd:46:c0:2d:85:f7:a9:75:7a:1d:ce:3c:74:d3:fd:7f:
         78:98:df:fc:9f:14:f9:08:47:88:54:4f:df:aa:c6:26:7f:16:
         b9:0e:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:31 2026 by rpki-client