Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          JFUr840mGSbR/RBvi8eegtmfbutMByuazMYb8IGM8i0=
Subject key identifier:   28:06:D5:5B:D5:82:50:7F:15:7B:38:4D:E1:C1:46:CF:51:54:0D:04
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2D74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2D3D
Signing time:             Wed 18 Feb 2026 15:24:23 +0000
Manifest this update:     Wed 18 Feb 2026 15:24:23 +0000
Manifest next update:     Wed 25 Feb 2026 15:24:23 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: CFhBoMt8WKdQhiIFjp+NB2t8pNP0DjcZocIY2A5BN/w=)
                          2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: utIpka2m9g7rscMzHbDTXQACJUoOh2JMTGT7Uylt93Q=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: uoxhoDVDIdZeIGpmPVYh0+yT+vTsXXRnS1XpZHEpwfY=)
                          4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: wnP6JYClG7n+PNc2XDZbazMvuyyzMgyJZ4q4a/lxzfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11636 (0x2d74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Feb 18 15:24:23 2026 GMT
            Not After : Feb 25 15:24:23 2026 GMT
        Subject: CN=6995d9a7-e217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:cd:99:14:3c:37:5c:ce:09:c6:58:d9:3d:
                    a6:33:82:0d:5f:c3:64:cd:e9:da:82:72:8c:35:f2:
                    ab:bb:96:05:a3:c4:7a:67:d7:31:66:ae:2e:64:2c:
                    db:35:63:0e:43:52:ea:89:fa:5a:aa:f2:84:10:80:
                    c6:7f:43:5e:9b:54:e9:26:25:03:f4:17:17:24:03:
                    ae:6c:c9:9a:7f:53:47:70:9f:e6:d3:1c:0a:69:1e:
                    e4:ad:90:f4:91:34:c7:85:1c:09:cd:80:9b:3f:7b:
                    d2:ae:86:9a:4f:56:22:40:2d:f2:6b:62:99:93:02:
                    1c:3c:e9:8f:72:70:41:db:0f:32:b2:19:21:44:4d:
                    95:7d:3b:84:19:4f:43:bb:97:5c:f9:4f:b5:3a:31:
                    b1:51:7d:a9:4e:ba:16:8e:3f:5d:39:06:23:f0:05:
                    ea:8a:83:f6:ae:6f:44:15:42:96:2c:1a:43:68:2b:
                    30:3e:90:e4:9a:11:7c:be:eb:4f:51:51:49:55:60:
                    3d:ec:cc:6f:31:d3:5b:e5:d6:b8:cb:e8:f4:2f:15:
                    3e:cb:15:28:a0:a3:70:73:d1:60:de:86:11:22:a4:
                    e6:fd:e5:64:0e:7f:c1:4c:e4:c9:8f:62:82:1f:69:
                    d0:92:a8:9c:b7:d9:aa:11:3d:3d:eb:43:3e:15:91:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:D5:5B:D5:82:50:7F:15:7B:38:4D:E1:C1:46:CF:51:54:0D:04
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:40:00:2a:4d:d1:d8:cd:93:2e:d7:0d:ed:03:d4:b4:6c:ce:
         cf:37:32:05:c1:a3:d7:29:82:f8:28:af:da:41:0d:91:15:c7:
         5e:37:c6:f3:fb:77:a0:69:7f:3e:60:86:28:b7:9b:9f:11:7d:
         9c:92:2b:a6:9f:f7:88:5e:ef:b7:e4:0a:76:c8:59:1d:32:34:
         e2:48:e2:78:0a:92:9d:99:97:62:8f:1a:31:d3:ee:1a:c2:0a:
         8f:17:75:b5:9e:2d:40:3b:f0:33:2b:1f:24:68:61:43:8d:0e:
         45:13:9b:76:d2:ea:a6:7d:25:e5:d3:67:8a:a4:61:46:4e:7b:
         bb:9e:06:af:71:40:a7:b0:e3:61:6c:d4:c2:5a:21:f6:31:87:
         de:7d:3a:5e:d9:79:3f:84:e9:67:46:d1:ca:9b:9f:27:4b:87:
         4c:39:c3:59:44:87:86:f0:48:f0:54:e0:e7:0a:83:ed:f4:b4:
         72:6e:18:8e:fd:41:db:76:9f:ad:44:60:09:0e:fe:2e:49:a4:
         74:25:ec:78:c7:94:7d:08:4d:39:c1:af:92:0c:bc:b5:f3:da:
         a9:fd:0b:79:ac:83:83:f6:d5:dd:3f:44:00:f3:ba:ae:1c:8e:
         6e:6e:7e:4a:74:30:49:f7:d1:41:71:f7:96:86:14:ee:32:23:
         01:1d:f9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:41 2026 by rpki-client