Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
File:                     Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json)
Hash identifier:          zssJaXJ2SZJZIs1xKgsQexBkyyBibesTObktoS1jwW8=
Subject key identifier:   5B:F4:9E:D6:47:0D:57:42:3A:48:42:06:38:1F:9B:F6:EE:CC:07:D1
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Certificate issuer:       /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
Manifest number:          01A5
Signing time:             Thu 19 Feb 2026 02:41:40 +0000
Manifest this update:     Thu 19 Feb 2026 02:41:39 +0000
Manifest next update:     Thu 26 Feb 2026 02:41:39 +0000
Files and hashes:         1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: TzrDJgNheoaqPzyEzd7srSWMQY2Idhz8Pf0zTFNVrj0=)
                          2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
                          rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
        Validity
            Not Before: Feb 19 02:41:39 2026 GMT
            Not After : Feb 26 02:41:39 2026 GMT
        Subject: CN=69967864-a425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:54:95:68:47:89:af:68:c3:8c:8f:72:e5:
                    9b:ff:f7:ca:bb:a4:f2:1d:c0:72:c4:63:94:14:3c:
                    35:54:12:00:ff:92:59:eb:d1:fb:6a:83:aa:3e:17:
                    30:e5:08:1e:76:41:e7:eb:25:1a:d2:79:17:94:cc:
                    fd:28:f7:1c:ad:8b:5c:33:c1:b2:22:b6:04:14:eb:
                    34:eb:9d:5b:bb:af:22:f0:3b:7a:4c:82:c7:f2:95:
                    3d:08:32:a5:f3:42:fd:69:8c:3b:3d:9a:94:4c:f9:
                    cd:a0:42:2b:c9:db:14:39:8f:0f:91:62:1c:56:4f:
                    9a:8c:da:90:b1:02:36:1d:73:08:bf:90:70:3d:2a:
                    09:86:ba:1b:1f:5e:a1:6c:5b:da:45:71:58:8b:32:
                    0c:98:9e:41:46:6a:e7:96:8e:3e:e0:87:52:82:60:
                    a9:33:7f:48:f8:08:aa:00:4c:91:bd:26:2d:48:c8:
                    e4:13:e4:8d:26:0d:24:86:df:c6:b1:44:67:21:c7:
                    98:ca:f6:47:f7:94:d4:80:b4:53:8b:34:a1:b5:af:
                    e4:87:a2:a4:78:9e:d4:fe:b9:eb:3b:78:26:47:57:
                    c0:3c:1f:c6:b6:6b:5d:c1:6f:8b:92:f3:d9:4f:ed:
                    ae:6d:80:f4:de:50:4d:27:1b:b4:d7:48:7a:2e:16:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:9E:D6:47:0D:57:42:3A:48:42:06:38:1F:9B:F6:EE:CC:07:D1
            X509v3 Authority Key Identifier:
                keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:c5:c9:d8:61:88:9c:1b:94:da:5b:d0:33:90:ca:18:58:
         10:88:20:7e:c0:a5:f9:b7:2c:d5:52:7b:b1:b0:e2:dd:10:f3:
         56:1d:7f:59:f4:bb:50:89:07:c0:7b:a6:67:9f:1b:94:07:16:
         cb:eb:99:cd:b0:57:31:1c:7a:6e:df:b4:76:a8:e9:5a:04:39:
         8d:c0:55:b9:05:de:20:75:32:d1:7a:e6:db:78:53:e5:d8:f9:
         40:44:20:5f:5a:51:15:73:00:64:28:bf:03:28:50:e0:3d:9e:
         5f:c2:e6:05:fb:91:02:80:de:28:45:d0:b5:cf:34:41:5e:4d:
         f8:19:a9:66:b2:7e:ed:12:d1:b3:0d:27:84:10:be:ad:54:78:
         ff:50:4c:36:f0:48:ff:67:a2:79:f9:9f:1d:a6:7f:e3:4f:03:
         8c:22:0d:9c:62:5c:f8:9c:bc:7a:33:0a:e0:36:f0:cc:db:ee:
         b1:35:29:5e:89:58:47:c1:d8:1f:3b:28:de:58:6a:b5:22:e8:
         07:22:04:4f:6a:6f:e4:f2:31:19:e8:31:26:6c:57:9c:57:86:
         49:a1:46:ce:11:e1:e6:80:25:06:a1:c4:6f:c1:4a:db:e8:57:
         77:8f:5f:3b:d8:22:ec:c3:1e:3d:1d:88:2c:3c:d1:34:1e:43:
         af:27:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:36 2026 by rpki-client