Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
File:                     _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json)
Hash identifier:          CrHEs5M7PVJXZ6l3DltLn5EkUuPYypGL9S0pWZC18BY=
Subject key identifier:   CB:BC:67:F4:59:85:C0:6E:AA:51:A4:C9:DA:16:11:E8:F5:6E:66:3D
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Certificate issuer:       /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial:       3553
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
Manifest number:          3533
Signing time:             Wed 18 Feb 2026 14:57:13 +0000
Manifest this update:     Wed 18 Feb 2026 14:57:12 +0000
Manifest next update:     Wed 25 Feb 2026 14:57:12 +0000
Files and hashes:         1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: lrD8LYgOGRoQbYoSiI+0Ngaz456k+rS2aNLtKbnfXW4=)
                          2: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: uAMH22czrWhCVXR1Yh4Gb924YIN0PWuUVG5CCQ0T0QI=)
                          3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ=)
                          4: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: kxrZR2YgejKdZw2KSRqTPBaBWQsbx9P5F4vQ2qVIgKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13651 (0x3553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
        Validity
            Not Before: Feb 18 14:57:12 2026 GMT
            Not After : Feb 25 14:57:12 2026 GMT
        Subject: CN=6995d349-9e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:d2:22:9c:51:80:47:0c:8c:d7:b0:24:9d:
                    1d:f4:a3:75:8c:13:f4:8c:8f:0c:53:c8:cb:9c:7a:
                    ca:19:9e:41:ad:6e:b8:2f:6e:e3:09:75:c0:0a:72:
                    3c:bd:46:95:b0:0c:c4:48:68:5d:bd:aa:20:9d:30:
                    6c:8a:d6:4e:de:46:eb:89:8a:ac:72:63:d1:86:fe:
                    82:34:66:ad:d8:fe:d3:ba:02:71:88:75:be:04:35:
                    17:fa:b7:93:bf:f0:11:67:a6:ef:75:51:97:2e:8d:
                    3a:06:93:72:37:4f:b1:21:86:e0:f7:04:ab:c4:26:
                    ba:c0:e8:e1:19:5f:5e:56:78:56:7b:f9:52:4c:b8:
                    2b:ad:97:12:8f:e4:d2:5c:d0:a9:05:e9:93:d3:9d:
                    02:f7:cd:a5:c6:41:0a:0a:a1:b5:95:1f:3f:4a:99:
                    d5:ec:c2:46:de:57:c8:ff:d6:e6:42:29:91:7a:7e:
                    73:6c:f5:ff:32:da:82:e7:b7:6f:da:8a:9e:09:02:
                    3d:f8:f6:ed:b7:20:21:cd:b0:74:1a:d7:90:0a:6c:
                    45:73:7f:93:f3:b5:6a:e0:27:ed:d1:3e:9f:01:d4:
                    a7:76:4e:79:8b:75:e2:d3:48:dd:9b:07:92:69:d6:
                    81:28:8c:55:80:31:af:c2:39:30:8b:d5:02:70:69:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BC:67:F4:59:85:C0:6E:AA:51:A4:C9:DA:16:11:E8:F5:6E:66:3D
            X509v3 Authority Key Identifier:
                keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9c:64:48:1f:c2:7f:28:25:d1:64:5d:d0:53:c0:da:4b:76:
         a0:1e:ff:5c:ce:76:30:01:dc:97:ca:08:1d:da:88:89:4b:18:
         d6:94:79:00:c7:03:c5:4f:9d:a7:69:eb:a0:d9:54:9b:86:3b:
         e9:7f:ab:07:04:7d:7d:80:5a:d5:6e:f4:0c:65:ac:88:41:cb:
         aa:a7:77:e8:65:f4:9a:18:53:08:ce:c1:d5:8e:5e:da:29:f3:
         51:5c:67:f4:20:de:3a:54:7c:3a:49:e4:ff:06:39:68:0f:f6:
         0c:30:0e:f6:f6:4c:5e:20:d0:d8:e9:2f:f1:76:01:08:46:99:
         97:29:f2:34:e8:fc:cf:a2:bd:5d:27:90:66:70:c4:e7:86:4b:
         a0:ec:30:3b:70:28:6a:75:a3:da:73:49:9b:19:3a:1c:4b:be:
         61:a6:4d:59:ef:7a:5b:11:fe:1e:3c:63:1b:d3:30:16:ef:98:
         c2:11:1b:e0:98:3f:57:21:bc:f7:ec:66:6a:d9:7f:05:4d:d4:
         b6:88:e0:6f:a9:d0:a9:b6:aa:aa:f2:bd:01:08:28:10:19:95:
         01:42:8d:ae:7a:8e:02:f5:f6:43:2a:50:58:ec:c8:34:5b:13:
         73:a0:16:c0:1c:e4:66:6e:2f:9e:a0:5d:7b:0e:db:85:cd:16:
         bc:b4:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:15 2026 by rpki-client