Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          Q4Z28508bJViPabHvBtMewFJTCXrv565KxDt3RX7zL0=
Subject key identifier:   8F:D1:AD:78:78:AE:29:14:13:20:44:7E:1C:CF:E0:45:44:17:B3:0F
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          0541
Signing time:             Wed 18 Feb 2026 22:50:12 +0000
Manifest this update:     Wed 18 Feb 2026 22:50:12 +0000
Manifest next update:     Wed 25 Feb 2026 22:50:12 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: iDvqRGCWLYnZzhwI25BOzayLo0WFrqO3IZgfRJc32oY=)
                          2: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: h3uFBbPJ0AuoIW5QK3aikk6YYruZ0svwOwDRKDt3+H0=)
                          3: EFFA034837D111EC9337B812C4F9AE02.roa (hash: EgHXrVwCROQ4rdO/esyQDYMTsfwXKaTv6q0mJCO748k=)
                          4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: KqP7Y44/c6GfoSzBZizkvlwfaAroN68G0mt7Xa/UUC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Feb 18 22:50:12 2026 GMT
            Not After : Feb 25 22:50:12 2026 GMT
        Subject: CN=69964224-43b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:a9:bd:a1:d5:e4:51:3e:df:78:64:56:10:
                    5b:05:3a:89:81:8c:76:1e:7b:95:e4:5c:65:03:7a:
                    fc:f3:c9:c4:c2:7a:91:e1:96:6f:f4:8a:bf:a7:0b:
                    99:e7:4e:99:3b:aa:ba:1b:77:5d:31:5d:da:0f:30:
                    a7:47:21:b8:dc:f4:a8:c8:a0:77:bb:59:1a:36:5e:
                    e6:9e:ce:bf:f9:2d:bc:f8:d9:02:51:ad:c4:48:4a:
                    93:38:cc:9a:32:75:69:c3:8b:17:bc:43:33:5e:0f:
                    5e:c2:1d:97:eb:47:c4:67:23:ed:e3:b0:50:a0:ca:
                    c2:66:45:c3:56:d7:bd:0a:ce:32:5a:32:1b:f3:9b:
                    b4:6b:3c:14:6e:78:3a:8b:40:c8:e9:da:02:e5:43:
                    6c:f3:dc:93:a5:5a:a3:be:4d:1e:7d:1b:4a:1d:e7:
                    c5:01:d4:44:fd:74:6d:b7:a2:6e:e7:73:42:1f:0f:
                    42:83:b9:ce:61:e3:1c:f1:93:8f:34:56:a0:e3:9d:
                    87:de:64:4e:a8:d0:37:2a:52:ef:6c:0a:80:73:34:
                    21:db:9b:c4:1d:cc:dc:ac:15:8e:f8:c3:8b:04:bd:
                    f1:1c:07:34:f7:96:4e:7e:14:a8:a3:f1:cc:77:b8:
                    7a:d2:7b:bf:d9:b4:91:ed:f0:21:75:e6:9f:15:15:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:AD:78:78:AE:29:14:13:20:44:7E:1C:CF:E0:45:44:17:B3:0F
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:03:86:78:8e:62:a0:80:31:33:72:62:91:35:79:59:06:a6:
         77:10:67:3e:ae:b9:75:e0:ce:fe:6d:b2:9b:a6:ce:5f:d5:f6:
         21:b4:65:58:fb:22:d9:b3:90:7a:93:ec:00:9e:18:87:14:f1:
         cd:e4:e5:d4:e1:39:ff:7f:bf:e0:a0:62:1d:1f:43:5e:4d:0e:
         e6:b7:09:82:50:ce:28:d7:a3:4b:1c:3f:25:d1:b8:da:df:f5:
         75:59:6c:73:84:57:a1:43:04:6a:3b:3c:43:fe:e3:38:dd:dc:
         4f:28:ff:90:80:76:94:45:af:4c:90:b0:1c:74:c1:cc:4e:ab:
         40:c8:de:41:5a:ae:75:35:bc:f2:10:ba:77:7e:28:99:c1:2a:
         dc:09:48:46:ca:4d:d3:a7:7d:6c:e7:79:fb:d6:5b:44:a7:02:
         da:a0:6d:57:a1:6c:16:8e:8b:d3:12:79:af:23:63:34:dd:7f:
         12:47:a0:3d:3b:59:48:44:60:0f:32:4f:55:48:75:1d:10:0e:
         7f:c3:f2:0e:97:3a:91:92:d0:a9:3e:b7:93:82:03:8a:42:37:
         b6:4a:8a:08:73:d6:16:9c:71:96:be:30:86:a4:f6:a9:86:42:
         d9:17:49:81:7b:12:d7:f2:70:d8:fa:56:d6:01:2d:8a:fe:8a:
         99:13:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:31 2026 by rpki-client