Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File:                     PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier:          xfrJjhroCx3E3iNNDK9CCpRZWyxoWnI7NOBe9G2W9EA=
Subject key identifier:   5B:1B:40:CD:69:48:42:23:8E:D5:8C:3A:EA:A2:DD:63:D7:8E:25:27
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer:       /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial:       08D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number:          08D0
Signing time:             Wed 18 Feb 2026 19:55:08 +0000
Manifest this update:     Wed 18 Feb 2026 19:55:08 +0000
Manifest next update:     Wed 25 Feb 2026 19:55:08 +0000
Files and hashes:         1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: /7FQUWX7z4IFJGoWR4NfWOENVHSqktko2OSkROosZPM=)
                          2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: YDlJJK3r3QY2jge7AOb3CYnCW+wC8nrMDrmyeODCDi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
                          rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
        Validity
            Not Before: Feb 18 19:55:08 2026 GMT
            Not After : Feb 25 19:55:08 2026 GMT
        Subject: CN=6996191c-2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:95:04:f5:4c:3c:f7:cb:40:d6:bc:19:5d:
                    b9:54:43:be:5e:53:76:30:06:40:bc:db:95:13:73:
                    0d:02:88:61:e3:94:92:b8:a9:24:00:fc:f3:b4:54:
                    b1:9b:38:e7:5d:8a:52:7f:9a:a3:8f:f1:89:ec:27:
                    86:40:96:c2:52:42:26:77:8c:3e:ce:5f:8a:fc:83:
                    b4:42:fb:68:1b:5f:59:05:78:93:fa:8f:cb:74:31:
                    34:fe:92:0d:94:ee:36:d6:15:74:77:7f:5f:02:0b:
                    e8:ed:08:42:9b:74:02:05:b9:80:df:93:33:ec:8a:
                    b6:a0:70:9b:86:9d:0f:4e:2f:af:49:40:d4:bb:e3:
                    13:01:ee:80:42:b7:59:11:b5:be:a1:3e:1d:df:bf:
                    b9:19:b5:a9:2c:92:64:db:cd:c9:b4:b9:b6:36:c6:
                    b0:e8:40:c9:79:63:c2:5d:00:d1:88:5d:cf:e6:a8:
                    b0:8e:b5:d8:44:38:36:b4:24:68:ba:60:cb:f7:97:
                    b1:97:3f:a8:73:6a:4c:14:5b:bb:90:5f:d3:cf:d0:
                    88:9d:f5:67:4b:49:63:6d:8a:ed:24:b5:57:11:68:
                    a7:49:7a:18:ae:13:ad:ba:4a:27:d9:3f:a3:d2:4e:
                    f9:a9:6a:24:95:f8:c2:93:2c:2d:34:e4:45:55:23:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1B:40:CD:69:48:42:23:8E:D5:8C:3A:EA:A2:DD:63:D7:8E:25:27
            X509v3 Authority Key Identifier:
                keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:88:fd:b3:4d:60:41:41:09:b0:f1:ed:b7:c2:80:f9:f2:19:
         9d:18:db:6d:50:1a:b0:ca:53:01:48:ac:8c:2d:08:60:6a:8c:
         3f:8b:4f:db:64:af:23:a1:01:14:d1:4f:e1:d4:fe:f8:80:4c:
         14:b5:14:7d:32:96:dc:d2:98:30:02:73:30:50:7f:6c:b9:7c:
         f4:c7:97:e7:f9:3f:be:57:97:5f:27:3c:f1:76:c3:36:98:5c:
         5f:7f:e9:8c:7c:89:15:27:09:ca:d5:30:4d:58:e6:75:6e:8e:
         34:77:c4:ac:8a:87:1d:f2:05:e0:96:37:4c:e2:55:86:3a:1e:
         5d:60:83:17:03:75:00:52:f9:93:29:e1:27:8e:84:bc:6e:b7:
         1d:75:22:f5:05:1c:e9:ca:d7:a2:b9:72:8e:94:b1:ef:55:e5:
         ed:88:5c:d7:10:ae:14:bb:f4:c4:c1:d2:f9:21:3d:74:b7:44:
         dc:89:cc:06:89:d1:eb:6a:e2:f3:12:74:ac:e4:16:03:22:5c:
         bf:28:8b:d1:34:dc:91:07:cf:af:6e:38:59:d0:6e:33:6e:39:
         dc:1d:52:7e:fe:aa:22:6b:86:bf:67:64:09:08:81:a7:be:46:
         92:b9:f8:90:50:3e:47:ee:f3:f4:5a:2a:4c:a1:50:0e:a7:9e:
         79:bf:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:56 2026 by rpki-client