Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
File:                     hCMykdLcashg9UvuzoHVSwNEA78.mft (raw, json)
Hash identifier:          9bX0/YIJK3/oVVD4s65AcyTECLkulnZtN09hvkJDM7w=
Subject key identifier:   F3:FF:80:4F:1A:A3:C2:83:37:7B:4F:D5:BB:38:61:13:4D:85:67:D4
Authority key identifier: 84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF
Certificate issuer:       /CN=A91CAA8A/serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
Manifest number:          14
Signing time:             Thu 19 Feb 2026 07:15:07 +0000
Manifest this update:     Thu 19 Feb 2026 07:15:06 +0000
Manifest next update:     Thu 26 Feb 2026 07:15:06 +0000
Files and hashes:         1: hCMykdLcashg9UvuzoHVSwNEA78.crl (hash: 2PgQ+Ys6ZOwgIfeCCuNFqi56n3K0Ztto2zwm5X0TF+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=84233291D2DC6AC860F54BEECE81D54B034403BF
        Validity
            Not Before: Feb 19 07:15:06 2026 GMT
            Not After : Feb 26 07:15:06 2026 GMT
        Subject: CN=6996b87b-ee6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:50:19:f6:b9:d9:d5:52:0e:e6:d7:94:3b:81:
                    a6:78:7b:f9:7c:10:2c:3f:86:5b:40:14:10:b8:a3:
                    6d:35:b7:92:54:b0:6f:0a:93:19:5e:64:91:60:ce:
                    63:34:03:1c:95:47:f6:4f:9f:2b:a1:f7:e3:3c:ba:
                    ef:1c:e7:cc:08:b7:bc:31:d6:ac:39:dd:c9:61:dd:
                    f5:6a:74:2c:96:d9:b4:a8:80:51:ea:96:f2:83:cf:
                    f3:6b:7b:0a:64:53:52:f0:1e:1d:53:cc:0e:88:46:
                    dd:9b:de:c4:00:ba:91:c1:73:e6:51:49:44:0c:4b:
                    1d:fd:0e:04:0c:bf:f8:0d:2b:f0:05:44:6e:b2:12:
                    c5:fa:1d:ea:db:09:46:3e:36:63:f2:97:fc:28:32:
                    37:c0:23:5a:ec:2a:60:40:59:fa:32:cf:e2:d4:d8:
                    d9:28:13:b3:f3:63:bb:c4:26:2c:1d:b5:7a:7a:fd:
                    e6:75:df:2e:6d:0d:0e:c8:57:20:f3:2d:b7:3f:6e:
                    fb:d2:f4:c4:8b:06:31:8f:ae:be:c0:16:eb:74:da:
                    af:2e:f8:71:c7:57:cf:17:ff:6b:f9:e9:3b:d9:6b:
                    fc:5a:db:39:03:f3:85:c7:12:38:11:d1:63:8c:d9:
                    54:57:e8:99:49:4b:62:67:8b:7f:df:ba:ce:fc:5d:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:80:4F:1A:A3:C2:83:37:7B:4F:D5:BB:38:61:13:4D:85:67:D4
            X509v3 Authority Key Identifier:
                keyid:84:23:32:91:D2:DC:6A:C8:60:F5:4B:EE:CE:81:D5:4B:03:44:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hCMykdLcashg9UvuzoHVSwNEA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/9F3E5516F2D111F0989AD8CE3C6F56BC/hCMykdLcashg9UvuzoHVSwNEA78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:09:ba:01:11:f0:05:00:fa:f2:db:b9:81:89:95:dc:f3:f7:
         14:fb:07:9e:aa:ff:7e:6d:63:4c:2f:23:c1:91:3b:e0:66:02:
         b2:0f:49:c8:66:64:70:8c:2f:a2:9a:c6:0e:76:3d:e8:24:cb:
         e6:28:f9:7e:04:bb:f0:7a:ad:8a:87:29:7b:34:ba:75:21:0c:
         20:e2:04:62:4b:05:40:2b:41:87:e5:f4:4e:6a:0f:70:1c:c8:
         8f:f6:8a:3f:2e:82:cd:09:9d:76:bf:ed:64:59:b8:24:79:1e:
         8a:11:11:b6:27:98:8a:68:00:9d:8a:c7:69:64:4c:c9:2c:88:
         25:39:21:5b:8e:db:38:49:4c:f7:1e:e1:19:f6:ca:65:05:59:
         f7:c6:e8:09:43:ca:fb:5e:c4:90:3f:b2:ea:74:1d:a3:8b:97:
         ad:e5:d9:d9:3a:fa:21:86:81:41:1d:a2:1e:b0:ce:6b:7d:6f:
         c5:fb:cc:01:6c:ee:6a:20:7b:87:9a:88:dc:11:f2:dd:a3:d4:
         a0:d0:fe:53:38:68:77:48:f1:c9:d2:32:61:2f:51:ab:9e:27:
         d1:5b:0f:fa:8a:3b:e6:f1:2e:97:f8:e2:e9:f7:64:1b:6a:bf:
         95:a1:bc:93:d1:c3:45:55:f0:3c:b8:a6:86:03:f1:9b:5e:b5:
         e3:cb:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:06 2026 by rpki-client