Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
File:                     z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json)
Hash identifier:          yFiPyir8qZV5plxNXbap+TijvUtLEtwKAz4tmhPtbd8=
Subject key identifier:   3A:8B:46:38:A6:DB:29:68:C7:4F:33:90:E7:88:23:F2:5F:72:D5:1A
Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Certificate issuer:       /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
Certificate serial:       08F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
Manifest number:          08EA
Signing time:             Wed 18 Feb 2026 19:53:33 +0000
Manifest this update:     Wed 18 Feb 2026 19:53:33 +0000
Manifest next update:     Wed 25 Feb 2026 19:53:33 +0000
Files and hashes:         1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: Dclk1CuFDtnbqVwwSQ1ktfVVK+mK5OImI1qcxbYtvGQ=)
                          2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: G2foGf7uCgcEw+7JgUphjmWyB8lqa7VFa71ApGd5KNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
        Validity
            Not Before: Feb 18 19:53:33 2026 GMT
            Not After : Feb 25 19:53:33 2026 GMT
        Subject: CN=699618bd-1863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:6b:e9:ed:11:95:1f:8e:8e:58:c2:f5:18:
                    d1:8d:9c:d1:a1:92:87:e5:09:13:dc:9c:ba:32:21:
                    e7:ab:f4:75:78:f9:79:c8:47:56:37:e4:14:19:7c:
                    03:e7:10:c3:e7:d8:9e:e3:14:5c:77:93:af:86:d0:
                    32:07:b8:99:bf:fe:6b:ba:45:67:aa:39:fb:9c:8a:
                    e3:10:0e:ff:65:10:65:e8:b4:16:24:00:a4:d2:2f:
                    22:2b:e1:83:a1:1d:af:37:9f:76:31:8b:e2:36:1f:
                    a5:9d:7e:cc:ad:b1:9f:9a:65:95:01:66:21:a7:9e:
                    01:be:b2:e7:6e:9d:14:c9:3e:f0:1c:3c:45:c4:f3:
                    5c:5f:f9:cb:68:e8:05:6f:69:a0:cd:b1:ac:fa:a8:
                    c2:95:6c:ae:ac:4e:03:44:04:84:f3:7c:97:20:1e:
                    a5:6e:9a:90:2a:f5:b5:cf:30:c4:99:6e:20:cd:1c:
                    b8:b5:8c:96:98:6f:a2:2d:79:6d:ad:c0:d6:d0:f6:
                    fd:1c:ca:33:d1:19:c4:bc:b0:67:1b:39:95:6a:ed:
                    5a:b1:18:7e:70:43:90:10:51:9c:b7:8c:22:39:34:
                    ef:ba:f1:15:fa:b3:9d:14:4d:61:18:91:15:a5:c5:
                    43:65:61:4c:7f:fb:ce:11:d1:d1:d9:fd:ac:e7:35:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8B:46:38:A6:DB:29:68:C7:4F:33:90:E7:88:23:F2:5F:72:D5:1A
            X509v3 Authority Key Identifier:
                keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:3d:c9:87:80:32:48:bf:e2:90:81:67:6b:d6:be:01:5a:
         ab:1e:7c:a6:d6:d1:85:32:52:50:e6:51:4a:14:08:f5:0b:f7:
         51:98:40:ea:f7:f1:82:50:22:c9:23:67:53:f7:6b:3e:a0:94:
         d9:e9:cf:8c:08:55:ea:c1:f4:6c:ad:92:17:2d:6d:1d:16:06:
         c2:2f:01:55:27:74:be:d2:5f:b6:03:d9:ee:36:b5:f7:fb:9b:
         5a:d8:c2:3a:62:45:37:14:7b:1a:07:59:c1:77:65:ab:95:1d:
         79:06:0c:1c:3b:d2:41:82:c0:38:5c:16:5f:dd:4c:4f:d8:00:
         1b:73:85:31:55:43:d4:e8:6e:6d:70:33:fd:c7:63:25:7d:44:
         1c:ce:88:94:8e:d0:75:fa:a4:e8:e7:46:f0:06:fb:88:2b:11:
         90:da:e2:87:1d:00:b5:c0:62:ba:4d:76:82:3d:58:87:3f:8e:
         6e:bf:29:0b:2e:29:90:25:63:69:a4:0a:b0:98:7e:76:f5:41:
         59:75:a8:b8:e1:f0:ef:e7:c0:6b:dd:ae:64:7b:f0:ec:23:22:
         8c:22:bf:58:73:fd:23:a1:66:99:09:06:2e:b8:00:ac:7a:46:
         56:9e:bc:17:e8:ac:2c:fd:ec:9f:ca:86:67:03:58:a5:06:24:
         24:d3:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:10 2026 by rpki-client