Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File:                     4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier:          jFsJtxOtZwFVkmNyYKEgRGPF5QKM6264zt9EuHHH5e0=
Subject key identifier:   9D:4B:50:56:3F:05:35:3E:49:F0:3F:BF:F0:34:52:44:09:57:5C:B7
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer:       /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial:       0D7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number:          0D6D
Signing time:             Wed 18 Feb 2026 17:40:36 +0000
Manifest this update:     Wed 18 Feb 2026 17:40:35 +0000
Manifest next update:     Wed 25 Feb 2026 17:40:35 +0000
Files and hashes:         1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: 8faVdWG9vNT1TzyXKm1ZH6Q/AdPlwT62GvOoNPSa2UQ=)
                          2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 8PBc7rJDdj900RPfyfsyZOspVRuDEqIjR6MwkbVEKO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
        Validity
            Not Before: Feb 18 17:40:35 2026 GMT
            Not After : Feb 25 17:40:35 2026 GMT
        Subject: CN=6995f994-5ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:fc:ef:99:25:bd:2a:82:ae:77:c9:6f:fc:
                    fc:7a:fa:7a:b7:17:07:43:78:84:72:55:12:dc:a2:
                    5d:8e:ee:da:6b:cf:50:93:7a:04:5f:ee:e7:65:36:
                    5d:96:66:53:85:9d:a8:7c:7e:83:08:de:49:d9:a7:
                    15:bd:7b:29:fe:b3:d5:49:e1:32:e7:ea:74:7a:b0:
                    31:34:e5:b0:7c:58:59:00:2e:39:8a:dc:68:cb:9a:
                    d7:ce:80:dc:14:fb:cf:34:8b:5c:b3:d0:bf:0c:df:
                    17:5f:e8:ca:2b:f0:25:62:f7:01:ce:77:19:ef:47:
                    b5:c1:89:78:a6:ba:ff:3e:0d:84:63:09:49:e1:91:
                    cc:9f:42:2f:ec:2f:26:d7:91:3a:4b:62:31:35:2e:
                    51:d2:39:9d:58:01:cf:95:2c:37:29:fd:27:18:03:
                    ec:a0:fa:33:52:26:0f:ec:a7:ab:69:7b:22:86:a1:
                    84:0f:4f:93:59:4a:b9:1b:f4:48:9f:83:12:84:5b:
                    07:ca:9d:c0:cc:fe:03:7a:fa:c4:9e:80:aa:58:bd:
                    32:57:c9:b6:4e:d5:31:03:25:1e:7b:a9:f5:51:06:
                    cf:04:37:99:e4:6f:fa:0e:5d:fb:d5:98:34:05:4f:
                    23:2d:85:37:48:c7:22:80:d7:5b:d0:83:79:62:38:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4B:50:56:3F:05:35:3E:49:F0:3F:BF:F0:34:52:44:09:57:5C:B7
            X509v3 Authority Key Identifier:
                keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:da:94:21:0f:db:5c:fd:b7:d4:26:13:3e:71:7a:1c:9f:67:
         87:8e:c8:16:ac:a5:a6:f5:ff:04:c2:c9:c4:5a:97:c2:0b:4b:
         a5:3e:09:0b:35:d2:38:dc:54:5a:95:03:3a:c3:68:67:5f:6b:
         20:0b:fd:30:c5:3a:4e:69:8b:55:39:fa:08:d2:6c:6c:7e:87:
         c8:00:e9:78:f1:67:f3:f6:99:a3:a6:20:b1:d2:8b:a5:69:10:
         5d:24:d6:7b:dd:32:55:28:bb:60:cb:4f:aa:c7:bd:bb:3f:ca:
         1e:86:0d:28:b5:dc:6f:d2:85:23:58:88:3e:9f:cf:7b:a8:aa:
         ea:cb:e9:37:63:8c:de:f1:46:e5:7b:ee:1c:d3:79:ae:5e:1d:
         6a:4c:3e:b4:fc:36:e1:fb:31:18:07:73:da:96:a9:45:a5:88:
         c4:55:c4:47:64:3e:1a:cf:a4:98:fa:27:43:93:80:87:3a:8d:
         7d:e1:21:59:3b:ee:4f:ef:7b:f3:a3:ce:ca:7f:41:3c:8d:2f:
         af:4d:d0:58:b1:19:a1:d3:c3:65:a8:c6:63:56:6d:54:30:07:
         61:a8:dc:0d:b1:b1:01:7a:25:86:85:a3:24:a4:8f:48:dd:9e:
         94:60:82:65:fa:d5:14:5b:df:ea:a5:8f:11:a3:19:06:47:2f:
         4d:98:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:52 2026 by rpki-client