Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File:                     grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier:          gZc2DiQSo0nUJ8nG/toK1YpucIOZb0BKg9NGfUsCpOU=
Subject key identifier:   71:72:88:D1:DF:88:98:A8:5B:94:B7:1D:74:E3:40:D2:59:F5:0F:3F
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number:          0133
Signing time:             Thu 19 Feb 2026 03:56:32 +0000
Manifest this update:     Thu 19 Feb 2026 03:56:31 +0000
Manifest next update:     Thu 26 Feb 2026 03:56:31 +0000
Files and hashes:         1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: lTnc3Dw3ExaJDUUm8Ct2bbScIkzb1DKrNA4RYJ1/LEc=)
                          2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Feb 19 03:56:31 2026 GMT
            Not After : Feb 26 03:56:31 2026 GMT
        Subject: CN=699689f0-054e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:cf:e5:db:a1:c7:3e:d8:50:c4:1e:4f:43:
                    d3:77:42:03:05:02:96:47:6b:2f:1a:2a:23:f8:75:
                    eb:0d:1d:c3:22:2c:85:47:99:50:a6:ba:18:86:6e:
                    5e:34:b3:8e:12:63:bf:41:7a:cb:dc:52:5e:72:f0:
                    13:74:5e:d6:dd:f5:f9:88:88:a9:5e:47:9a:d4:75:
                    a2:09:6e:a7:b7:dc:00:5c:15:57:11:a2:e4:bb:ec:
                    fc:69:7d:e6:43:20:5a:74:bd:b0:0b:3b:c8:c5:39:
                    f8:a0:1d:b7:52:c5:62:28:40:65:e6:3e:ab:7d:0d:
                    d8:17:60:f5:c5:98:05:72:8d:bb:7e:83:c4:3a:1b:
                    6d:a5:ef:44:5d:ff:c0:68:63:80:22:96:74:00:a0:
                    6b:b1:10:5e:70:f5:d6:3b:6c:f6:04:64:85:dd:99:
                    18:b9:e8:f8:8d:6f:4c:24:d8:7c:17:74:ca:98:89:
                    7f:68:b1:19:c0:fd:fd:3d:e8:6f:72:bb:a1:83:f0:
                    06:87:e9:1c:b1:39:a2:c1:56:7a:a4:28:e5:c5:71:
                    eb:d1:a8:56:b8:94:42:d0:63:34:fa:e7:f2:20:9b:
                    87:6c:0a:9b:db:7d:de:85:11:45:f0:05:ac:ad:46:
                    b7:99:8b:2a:2e:00:c9:6c:e0:c5:99:8f:db:ca:26:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:88:D1:DF:88:98:A8:5B:94:B7:1D:74:E3:40:D2:59:F5:0F:3F
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:87:0e:bc:af:f2:5b:2f:47:e0:fc:4f:68:f0:54:db:ab:
         4a:7f:2f:92:60:b7:37:36:29:ea:65:0e:f3:24:d8:67:02:05:
         c4:c4:8c:9b:0c:99:f8:83:03:81:65:5f:48:22:d9:a8:ed:93:
         b0:40:7c:78:12:64:a3:ad:b7:8c:d2:81:70:d6:6d:39:50:84:
         e2:67:84:b2:5a:0e:eb:98:56:af:d0:3d:09:f9:e5:ff:5d:6d:
         7d:fc:34:81:1c:40:21:1e:8f:6a:c1:25:eb:64:89:da:77:8e:
         76:4d:e4:8b:6d:73:68:71:9b:8f:1e:0a:5b:09:fc:77:a3:85:
         ac:ce:39:b5:c8:a1:d4:6b:e4:5d:17:d2:a7:15:f1:fa:7a:27:
         a1:fe:28:7c:ce:bc:dc:a7:8b:af:48:d8:d7:70:8a:60:50:af:
         58:2a:fb:8c:52:c3:7b:a3:5f:e3:21:11:61:92:91:49:a3:13:
         e2:57:e6:b7:e7:ba:97:21:ca:bf:07:e5:28:8d:7f:b4:fa:69:
         f5:38:cc:4c:20:76:a9:9d:ac:0a:38:07:3f:fc:f7:fe:15:27:
         68:a9:08:0f:58:97:f3:e4:76:ba:f4:e2:ff:49:26:5d:73:99:
         bb:2d:5f:2c:50:4a:66:61:0b:fa:9a:0b:74:85:7b:e1:f7:87:
         46:02:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:36 2026 by rpki-client