Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft
File:                     Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json)
Hash identifier:          rpV0cPQfDAaQjVj6/8rq/eaVVPEVeUutiQ1XmDy70Qo=
Subject key identifier:   11:15:AF:94:AF:F6:2A:EE:7C:71:B7:A3:A2:5C:ED:05:99:A9:FB:B1
Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8
Certificate issuer:       /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft
Manifest number:          35
Signing time:             Thu 19 Feb 2026 06:47:38 +0000
Manifest this update:     Thu 19 Feb 2026 06:47:37 +0000
Manifest next update:     Thu 26 Feb 2026 06:47:37 +0000
Files and hashes:         1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: P1ViwPqDa5Unkiz7TpfGJRub2GaRLPgyVRZ3yIn2olo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8
        Validity
            Not Before: Feb 19 06:47:37 2026 GMT
            Not After : Feb 26 06:47:37 2026 GMT
        Subject: CN=6996b20a-4256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:77:ba:15:fb:02:38:a0:7d:59:00:2a:dc:
                    e1:32:8f:c0:0a:3e:25:df:ab:5e:12:b3:9a:aa:7f:
                    01:27:53:8b:76:42:de:15:09:67:25:4a:6b:01:21:
                    cb:56:90:1c:d5:7f:2c:7c:44:46:09:6f:a3:1b:67:
                    69:e0:cf:d5:c8:ea:b6:7e:62:22:bf:fd:1e:ea:e9:
                    4a:bb:86:16:a5:80:4f:f7:7a:0b:bd:69:25:73:ef:
                    ba:20:42:c3:25:11:23:77:f9:c1:41:2a:04:80:a0:
                    34:b1:81:ec:d5:22:d0:c4:80:a8:bc:de:0d:4f:23:
                    c2:48:e8:3e:33:d1:24:c1:cf:d9:2b:e9:8c:30:d8:
                    a3:f1:10:db:e3:51:42:e7:30:ad:28:b7:a4:53:4f:
                    87:4d:f0:8f:04:ae:25:43:ac:be:f6:0b:0c:1e:60:
                    ba:6f:cf:11:80:b2:96:11:2f:65:53:b3:9c:4d:01:
                    43:47:3f:47:9e:9c:a0:77:76:5d:16:69:d5:15:4a:
                    f1:e6:08:04:2c:8f:3f:d2:94:15:cc:cf:c1:8e:ce:
                    d9:b3:c6:40:ff:2f:fd:22:e8:62:04:fa:a6:7d:d4:
                    ff:6c:1f:69:22:41:c2:d7:99:d6:38:69:81:60:0f:
                    27:1f:12:b9:99:34:67:29:a8:5b:79:72:2f:48:c7:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:AF:94:AF:F6:2A:EE:7C:71:B7:A3:A2:5C:ED:05:99:A9:FB:B1
            X509v3 Authority Key Identifier:
                keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:87:10:fe:27:56:32:83:03:2d:bb:4b:92:93:51:e5:e8:
         8f:ac:25:cf:1e:f6:45:df:e4:3e:56:77:54:49:c9:fb:f2:b5:
         34:db:9f:6d:a9:16:2f:27:c8:97:e0:32:27:7f:8c:1d:a7:bd:
         f5:eb:ab:1c:96:a0:61:21:bf:fa:8d:2a:90:2f:e1:6f:4b:b3:
         52:90:41:e9:1e:14:60:2a:14:c7:58:09:b1:2e:1e:58:b2:c4:
         73:48:00:16:86:b2:ed:8e:a2:a5:fc:3d:78:df:41:11:fe:49:
         f3:59:91:5d:02:98:09:67:fe:f4:4b:14:58:a7:b4:d3:fc:ef:
         81:04:e7:56:c8:7f:4a:ba:b1:ae:c6:7d:c3:92:1f:a9:f3:7b:
         50:21:c3:5a:e9:fe:5f:3f:a9:e7:b2:9b:69:5a:22:10:81:84:
         04:a4:4f:0f:45:2e:6b:9d:ae:e1:7d:5c:0c:7f:30:c6:c1:04:
         8c:ab:a6:80:86:fc:fb:d2:48:7a:b1:b7:a7:d5:8a:94:3f:1c:
         9a:ec:d6:71:b7:f8:45:ea:81:3d:54:b5:0c:e7:e1:5f:11:d5:
         36:7c:95:cf:b5:dc:52:d9:01:36:77:56:59:6a:e6:35:ad:75:
         ff:06:ac:89:bc:25:44:4e:d5:4d:1b:94:81:1c:d0:9d:a6:da:
         cc:1e:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:23 2026 by rpki-client