Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File:                     hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier:          E5dcgQ9XIAHh/cZHvXh1eb9o5vc9DfaOSvaWr8WpKDY=
Subject key identifier:   52:7F:DA:69:79:8B:B9:32:4B:4C:AC:50:87:35:BA:46:D2:41:6B:7F
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer:       /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number:          21
Signing time:             Thu 19 Feb 2026 07:05:51 +0000
Manifest this update:     Thu 19 Feb 2026 07:05:51 +0000
Manifest next update:     Thu 26 Feb 2026 07:05:51 +0000
Files and hashes:         1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: R2HQuNyiJL2XEImrBtEwaIGCb5iAc+anVdZnGGNAqpc=)
                          2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: cen/2QQHHB2Ce/BPby3zzwtq3/K2nBJUeNhySuETspw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
        Validity
            Not Before: Feb 19 07:05:51 2026 GMT
            Not After : Feb 26 07:05:51 2026 GMT
        Subject: CN=6996b64f-1c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:e1:6c:42:0d:69:5b:8e:49:df:c7:69:a4:
                    cf:71:3c:53:72:d3:a4:f0:6e:94:40:10:88:4d:1e:
                    c4:e3:c9:b4:58:36:1b:91:35:c8:e8:58:cd:b4:75:
                    3b:e0:0a:3a:e3:6c:c3:66:d9:fc:5b:bf:a4:00:5d:
                    4e:f7:87:03:3d:65:44:83:61:f5:71:a9:d4:c6:35:
                    be:82:2c:ba:82:56:33:84:50:19:4b:11:31:91:a1:
                    38:36:a5:33:df:cd:a0:28:d3:e2:d7:0d:a3:80:a7:
                    85:b9:5d:5e:73:69:2b:f1:5c:1c:3a:e9:17:c0:88:
                    9e:a5:66:69:f2:b9:49:d7:a7:fa:ca:a5:11:ae:09:
                    25:d3:47:b1:44:63:1d:b5:e0:fe:0e:0e:e1:9d:e6:
                    5e:d3:fd:45:12:1d:f0:e4:44:89:d1:e6:ee:77:ff:
                    8d:94:5c:81:f9:90:61:11:e6:c4:2b:64:ea:64:ed:
                    9b:5b:c8:0b:f4:65:9d:8c:e7:69:62:f8:12:36:0d:
                    be:4c:a5:f7:67:21:1d:a9:76:a9:91:56:f9:f1:7c:
                    e9:b3:0d:a2:dd:05:81:5e:03:f7:ed:76:aa:27:f0:
                    10:df:c8:af:6d:77:5c:13:37:82:8d:9d:1e:b3:60:
                    ee:cb:7f:37:27:1d:60:b7:7e:d4:d4:2e:94:66:50:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7F:DA:69:79:8B:B9:32:4B:4C:AC:50:87:35:BA:46:D2:41:6B:7F
            X509v3 Authority Key Identifier:
                keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:31:8f:05:bb:7a:85:85:de:de:39:2a:b1:65:8a:40:44:4f:
         c7:9c:8f:51:42:8a:8e:94:6e:aa:0f:48:ff:56:43:59:0c:ab:
         b0:f3:46:fe:18:9a:1d:fc:c7:fe:8e:ed:37:8c:08:a9:f9:4e:
         3e:14:1a:85:74:4c:20:3b:a6:bd:85:01:11:12:21:80:b8:4f:
         af:9f:d8:28:14:60:4f:ea:72:ff:36:7a:0a:cf:90:2a:91:be:
         15:1b:9e:f7:65:f6:ae:55:d0:29:a0:58:59:f1:28:4c:f8:a2:
         a4:c7:cb:b2:0a:2f:ac:b0:99:68:c4:e3:c1:3d:00:15:be:99:
         85:06:ed:ce:ce:e6:12:89:74:17:85:07:39:ca:06:5f:9d:c7:
         b7:b1:ad:65:5f:c7:9e:42:92:02:14:6c:4a:cf:ff:14:ac:64:
         31:11:ab:20:1d:53:66:4d:5a:ae:2d:39:15:7b:3b:b1:dc:5a:
         35:68:2f:79:0c:9d:db:ff:ae:8d:79:26:cc:7b:0a:da:89:d0:
         bc:00:1f:71:e3:ab:b5:7a:ec:37:90:5c:99:91:f7:87:d2:93:
         f2:8d:9b:14:58:e7:3e:44:dc:0c:e7:54:cb:6a:32:79:30:32:
         2e:64:0d:80:6a:94:5a:57:df:95:5a:ea:a5:72:b5:5c:62:ba:
         6a:3d:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:52 2026 by rpki-client