Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File:                     lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier:          35d+22ew2J6VXTYb1bLgxTgDY+6FR94/YxT+NsjpKA8=
Subject key identifier:   C7:AD:88:F4:9F:12:3D:B3:3C:D7:40:AA:E4:01:7C:3A:34:BC:7B:D9
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer:       /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial:       066E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number:          0667
Signing time:             Wed 18 Feb 2026 21:56:12 +0000
Manifest this update:     Wed 18 Feb 2026 21:56:12 +0000
Manifest next update:     Wed 25 Feb 2026 21:56:12 +0000
Files and hashes:         1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: aAz2tvByBasGro114GgBzwyRCtHnCM4FXd80FCFCA4k=)
                          2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: Hu3KJZGMFU1oSrjsFOXx/j+TH9Vy+Garohr2Zg0l2Z0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
        Validity
            Not Before: Feb 18 21:56:12 2026 GMT
            Not After : Feb 25 21:56:12 2026 GMT
        Subject: CN=6996357c-7b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:e9:6b:52:3d:51:41:6f:de:8b:2a:11:73:
                    96:33:2c:f9:0c:1d:fd:92:78:ed:b9:fe:9c:82:19:
                    a5:94:97:a2:33:94:22:d2:f6:0c:39:55:65:13:30:
                    ef:ba:b2:25:01:94:78:22:de:9d:92:9b:40:f0:68:
                    e3:ce:e8:d5:53:c0:45:4e:65:ea:ca:0a:17:d1:af:
                    99:03:2b:c8:66:bf:c9:fb:64:0f:81:9d:cc:d6:e1:
                    0c:d9:fa:76:5d:d6:a1:44:24:75:96:65:d4:3f:5b:
                    f0:1b:9d:2b:1d:1c:0b:1b:64:1c:0d:13:d5:67:3f:
                    f3:6b:63:98:69:e5:cb:fb:3b:98:9c:da:48:73:2e:
                    4d:6a:4c:8a:cd:95:53:e8:7c:42:6b:4d:d7:5d:0f:
                    dd:9a:e0:a5:00:3d:33:50:e9:ed:cc:bd:03:3b:61:
                    56:7a:38:98:e0:3b:47:7f:b7:c5:3c:7d:1a:ec:6b:
                    c9:d7:69:e9:4b:50:8e:d4:db:13:da:d9:48:10:5f:
                    3e:1e:ec:ae:ef:2b:71:83:12:1a:fc:ce:d0:d8:9e:
                    7a:53:d0:7d:9a:5d:cb:d5:90:ba:fe:4d:b9:35:7f:
                    ac:74:c2:76:c0:79:72:30:f6:b8:13:fe:7f:76:71:
                    85:63:8c:5b:61:41:16:09:ea:d6:d5:53:ca:d5:45:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AD:88:F4:9F:12:3D:B3:3C:D7:40:AA:E4:01:7C:3A:34:BC:7B:D9
            X509v3 Authority Key Identifier:
                keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:e5:81:ba:a0:b8:0f:39:8f:b0:02:ae:c5:c2:61:13:27:
         98:a1:6d:6a:c1:90:7f:e0:fb:40:a0:2b:dc:07:3f:0c:d4:0a:
         f5:fa:15:a1:87:32:11:74:8b:34:bf:24:88:84:e2:97:3d:93:
         ab:de:4c:a6:d1:a4:e9:8a:4d:2d:5f:f6:00:10:3e:4b:a2:5a:
         b7:5f:12:dd:ea:58:ff:42:2d:37:67:8e:86:74:51:0a:d0:a6:
         ad:66:d7:bc:dc:c7:fd:c9:4a:14:27:90:25:3b:c7:ab:ec:0f:
         aa:2b:05:64:69:07:42:a4:92:e1:f0:6b:03:3f:9d:80:5e:89:
         7b:b2:ee:4d:e4:c7:ed:60:d7:2e:57:3d:df:5a:9c:99:66:1a:
         cf:a0:0b:00:78:18:42:13:6e:e1:83:77:e6:b4:7f:a5:65:df:
         6b:16:dd:0f:be:0e:c7:0e:3e:df:f0:f3:de:16:bf:e3:9c:78:
         7c:ae:f4:19:90:8b:2c:b8:ac:c0:62:98:a7:96:15:9a:e5:82:
         f5:10:21:44:25:6a:a7:97:d2:44:5d:c7:5b:de:05:8d:ae:34:
         56:12:89:52:5c:1c:01:4b:1f:b5:51:c1:33:ad:72:30:d0:fa:
         4c:e8:56:e6:ef:29:52:be:dd:fb:38:a3:77:a7:2f:f2:d0:0e:
         df:59:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:47 2026 by rpki-client