Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File:                     ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier:          zC5j4l5NJqfOmAmjrpGzLhlgl8nuM1Egc1hGkTb4QOc=
Subject key identifier:   01:56:38:16:27:E4:56:E4:EE:8E:73:49:7D:4A:4A:C8:3D:14:B8:02
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer:       /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number:          2A
Signing time:             Thu 19 Feb 2026 06:59:04 +0000
Manifest this update:     Thu 19 Feb 2026 06:59:03 +0000
Manifest next update:     Thu 26 Feb 2026 06:59:03 +0000
Files and hashes:         1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: 084YrAvG0KYk3z6DxqSjoCeHHiy961hu/z13aZp5WrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
        Validity
            Not Before: Feb 19 06:59:03 2026 GMT
            Not After : Feb 26 06:59:03 2026 GMT
        Subject: CN=6996b4b8-61dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:f2:58:ed:6c:99:b4:1f:76:a6:22:7d:f6:
                    a5:c2:46:af:64:96:cd:e7:12:38:83:89:bf:21:64:
                    50:ae:a1:52:db:5f:a9:be:43:6f:c9:ee:c4:66:10:
                    56:fa:18:74:30:b0:8d:35:6a:5d:c8:1d:36:aa:63:
                    4f:22:24:b6:aa:20:32:ba:b0:d9:6d:c9:e1:6b:d1:
                    d6:dc:b7:3f:67:e4:53:93:e6:a4:cd:2e:c8:ed:80:
                    96:7d:a9:a0:e9:11:a4:cd:39:45:17:44:b0:67:3d:
                    55:7e:f0:31:e9:81:03:52:d5:4e:fa:98:86:db:e7:
                    9f:4f:b5:ac:65:e1:44:48:a6:26:1c:5e:83:0e:e2:
                    34:ed:d0:cc:97:4f:61:3b:81:5c:3e:e4:17:70:43:
                    e6:0a:d5:5c:9f:0d:30:12:88:72:25:d1:34:26:e9:
                    79:6e:7e:7c:74:a3:de:b8:ea:bb:7a:a0:e9:c2:72:
                    da:47:62:d6:68:ac:4b:78:38:83:ba:ef:cb:85:a8:
                    12:4b:e1:c8:68:fa:fa:7b:54:a0:f3:67:17:df:3d:
                    cd:e3:8d:75:3f:d7:88:9e:a5:d7:3c:3e:21:1e:04:
                    58:d7:9f:23:d0:f5:ed:b8:54:6e:84:c8:36:c3:4d:
                    b5:9c:bf:bc:73:ff:a5:a1:9f:64:cb:82:cd:6c:79:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:38:16:27:E4:56:E4:EE:8E:73:49:7D:4A:4A:C8:3D:14:B8:02
            X509v3 Authority Key Identifier:
                keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:42:b3:47:ef:56:4c:1f:94:1f:59:ba:d3:a4:d8:00:eb:
         42:d8:86:d6:dd:a0:25:08:b1:0e:aa:22:08:f3:98:5f:12:1d:
         74:cd:2c:3b:c4:f6:25:7a:b6:09:f7:1a:8f:2d:76:4e:45:4c:
         d2:e6:53:08:ff:ea:19:ca:30:e7:23:13:d8:f2:1b:67:03:4f:
         05:e6:c6:fc:c0:84:91:78:26:14:d7:1c:f5:52:34:a9:31:e1:
         25:84:99:35:48:95:31:f3:45:07:67:d7:f5:df:c6:09:18:05:
         a0:8c:e5:cc:40:f2:dd:fe:f9:e3:39:5a:27:37:d4:8d:89:f6:
         97:88:9e:32:99:91:a8:58:32:3b:a1:e6:f5:0d:a5:22:ac:7b:
         12:64:df:de:6c:25:42:74:6e:64:c9:66:5e:85:5d:c9:e9:89:
         a5:ac:61:5c:b1:87:11:3e:9e:41:75:a7:e7:dc:2e:32:2b:5a:
         db:d9:e2:23:90:80:64:dd:f2:52:aa:07:1e:49:63:53:2b:78:
         ec:60:1f:d5:6f:32:d6:23:cc:84:cf:73:a9:c8:c3:61:c4:d1:
         dc:39:e5:6f:fc:24:aa:e4:75:f5:15:dc:c5:10:03:52:1f:b5:
         34:04:0b:e6:fd:87:af:bd:57:73:2b:4d:75:68:bc:32:ed:e4:
         8b:0d:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:40 2026 by rpki-client