Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File:                     iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier:          xfxT8/uhN9MpSCCvWELIWkdNrN4Mow6+WL5+VqeXFbE=
Subject key identifier:   25:22:B3:7C:57:E4:16:D8:72:7C:D3:05:68:9C:2B:5F:86:ED:A6:7D
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer:       /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number:          087D
Signing time:             Wed 18 Feb 2026 20:32:02 +0000
Manifest this update:     Wed 18 Feb 2026 20:32:02 +0000
Manifest next update:     Wed 25 Feb 2026 20:32:02 +0000
Files and hashes:         1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: j0nJWvwgRoaXhLYDkvP9uniHbdAtUKFwBOqYVi10kR4=)
                          2: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: cZ9m/zVPUzWXCdy2KYLSPYrFB4SD6fS0YfcWwI/XsN0=)
                          3: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: UedQXDqMzhnXkHxFyRy3Afeqd1BjfjsU/FT4F/0O0nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
        Validity
            Not Before: Feb 18 20:32:02 2026 GMT
            Not After : Feb 25 20:32:02 2026 GMT
        Subject: CN=699621c2-732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:a3:d5:7b:b1:c6:5c:99:c7:8b:c8:d2:63:
                    24:46:91:00:3b:97:cd:c2:45:28:58:e0:9a:08:70:
                    3d:76:de:0c:71:27:de:56:fa:0b:6c:cc:cc:fb:e5:
                    ef:ec:ec:08:58:8e:3b:57:e3:1c:56:0d:09:d2:bc:
                    df:58:34:da:12:67:1c:ca:ab:e6:e7:63:75:44:88:
                    6d:38:9e:aa:7d:61:76:e5:3c:27:f5:e7:da:d9:6d:
                    6b:e7:c5:3e:91:37:ab:d1:51:bd:55:9a:97:c7:e3:
                    73:0b:6e:04:6b:b5:b2:d5:b0:ee:ef:3c:52:e7:b0:
                    60:00:28:ac:de:cf:6e:60:bf:7b:57:2a:18:be:0e:
                    ad:e1:12:b7:02:b3:7f:b1:66:e6:f5:2b:d9:75:0f:
                    1a:e1:45:87:47:fd:51:a2:ab:50:04:d2:ef:e7:bc:
                    ac:ba:0b:3d:37:56:93:ac:01:89:a4:51:3c:e2:b8:
                    c2:93:7d:40:9c:1a:3b:f7:4c:e0:a7:b0:4c:f4:75:
                    cb:f0:33:6e:2d:60:36:9e:70:de:b7:b2:fb:d4:a7:
                    14:15:b4:77:97:b8:62:8d:92:b3:56:2d:fc:5b:51:
                    15:50:70:ee:e1:13:95:a9:eb:78:04:8e:f7:56:76:
                    9f:9c:59:8b:ac:93:b4:38:40:67:7d:44:50:31:dd:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:B3:7C:57:E4:16:D8:72:7C:D3:05:68:9C:2B:5F:86:ED:A6:7D
            X509v3 Authority Key Identifier:
                keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:40:6e:e3:0a:ce:02:92:b5:d6:bb:7b:c9:8f:a6:99:9c:dd:
         e2:70:01:ba:c4:51:5b:86:52:e1:06:2f:3f:65:85:e4:5a:7f:
         56:46:c9:cd:43:92:b1:80:ec:62:f4:6f:fe:1f:c6:41:d4:f1:
         0f:1b:81:3d:78:44:c5:ff:dc:97:61:40:ff:06:63:af:09:2e:
         be:26:03:5b:1b:57:87:81:91:37:0f:0c:79:49:d2:ad:1c:d9:
         a8:09:80:ff:26:c0:45:e3:b3:b6:0f:59:0d:05:7f:6d:f3:36:
         65:8a:8b:94:a0:47:7e:0e:57:d7:96:66:78:d6:f0:b1:d6:64:
         19:a1:e5:fd:a2:54:02:bc:e1:93:ff:57:2c:48:2c:13:b2:57:
         8b:a3:da:8f:04:ae:8a:bd:54:52:17:b1:3c:1f:23:3b:7f:5b:
         db:b9:09:b8:e0:0d:15:c4:f7:ef:59:4e:fc:e4:79:c9:61:ca:
         48:e4:13:c0:49:18:a7:21:e6:bd:44:8a:5f:a7:ea:27:00:d3:
         82:d0:da:16:d0:bb:cd:25:2c:46:c5:9c:f2:00:8f:cf:a9:f8:
         51:ec:a7:86:b8:aa:72:04:56:9b:b5:37:94:b9:83:a0:b1:74:
         6b:e4:f2:d5:7a:10:3c:a3:f9:4d:dc:07:91:8a:65:a0:90:9b:
         ff:57:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:47:11 2026 by rpki-client