Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
File:                     CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json)
Hash identifier:          yAATTpsMdg4jbVjYB3H2A7Hy0zh0m05/MgEp6ygVKoM=
Subject key identifier:   25:9C:FB:76:4B:D5:A7:79:7E:9E:8C:18:CE:03:0B:71:88:B3:70:69
Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
Certificate issuer:       /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
Manifest number:          0212
Signing time:             Thu 19 Feb 2026 01:39:28 +0000
Manifest this update:     Thu 19 Feb 2026 01:39:27 +0000
Manifest next update:     Thu 26 Feb 2026 01:39:27 +0000
Files and hashes:         1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: MLmqgI2sLBOOGYVDIWVcv9f8AFiLxiOvinGSFltGl98=)
                          2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: SAjkukJRb4ZF5aM/fUJAbMY1lnAEeXzzgnRTsvAlM7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
        Validity
            Not Before: Feb 19 01:39:27 2026 GMT
            Not After : Feb 26 01:39:27 2026 GMT
        Subject: CN=699669cf-0745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:d9:bf:1e:6b:24:32:2f:cb:a2:65:7c:e0:
                    b8:01:2e:14:21:2d:52:dc:22:92:c7:b9:2e:04:fa:
                    7f:35:84:c7:a5:e6:ad:f7:91:82:00:ec:d2:f4:3e:
                    a0:48:4b:db:c7:e1:8b:4b:4a:d2:99:8c:fd:93:41:
                    40:de:70:cd:f0:ab:2f:f9:08:a8:b2:82:1a:ba:3d:
                    0c:d7:e1:c6:b4:a1:87:20:35:d3:a0:b6:29:5d:77:
                    1d:18:78:2d:fa:6f:6e:7d:73:7c:c7:4d:1f:64:25:
                    ff:5e:9d:3a:4d:72:8f:5e:49:42:da:08:64:f7:5e:
                    0b:53:ba:5d:ba:41:ab:49:c9:56:d0:cf:b3:0e:0c:
                    2d:2d:3d:f6:45:45:b4:52:65:04:0a:61:b1:89:4e:
                    8e:51:1b:c6:f2:ae:81:6f:28:2b:28:e8:a7:f1:70:
                    81:57:65:91:44:90:95:65:6b:f6:97:33:7f:c8:1a:
                    8f:32:54:a3:42:68:be:6d:60:95:a4:ed:9d:51:14:
                    d3:6e:fc:2d:90:d3:3d:42:6e:a6:62:aa:90:45:47:
                    3e:6b:7f:14:9a:6a:70:21:01:43:04:c3:e2:8b:d6:
                    cb:36:ea:e1:14:ad:c1:d7:e2:b8:b4:42:32:ea:4c:
                    c9:9a:d8:4b:23:23:03:9d:bb:7c:fb:45:06:63:63:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:FB:76:4B:D5:A7:79:7E:9E:8C:18:CE:03:0B:71:88:B3:70:69
            X509v3 Authority Key Identifier:
                keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:55:fc:cf:b6:a3:9c:bb:4d:60:3c:53:94:e0:e1:26:9f:
         c0:e3:42:29:6b:64:48:ac:50:3d:66:ba:0c:f8:7a:71:af:49:
         d9:f4:b2:41:91:c6:c4:8c:27:9d:04:ad:b6:65:ce:02:2b:7b:
         4b:54:96:a1:e5:b5:c2:7c:2e:a9:de:7d:7c:a9:9f:17:8f:68:
         17:4d:49:fa:bf:e6:8a:b6:6e:59:c4:52:24:d6:5d:33:40:9e:
         a8:23:d8:d4:1e:5d:ff:57:d1:ec:b6:4d:61:90:cf:8f:19:5f:
         ef:d5:d4:eb:fc:55:16:c9:b8:4b:db:85:7d:45:a2:b9:bb:5b:
         d9:a2:3f:47:85:71:52:2e:4b:11:06:76:d3:15:fa:6e:12:d3:
         b8:d7:51:8c:37:a8:46:57:e7:ba:36:8d:14:6a:5e:2d:d9:96:
         b8:0a:94:9b:b6:66:96:50:5c:06:4a:1d:06:2c:b1:97:b4:57:
         72:ae:44:b4:db:43:a4:2a:b2:bb:91:d5:b1:c6:94:8f:fc:59:
         c1:98:fd:c7:01:63:1f:78:15:24:95:64:eb:34:2f:e1:69:cd:
         a6:76:33:47:d6:79:05:fe:6f:34:78:a1:6c:9d:8c:e6:f0:6e:
         0a:c3:85:ea:21:11:ff:3c:22:82:14:fa:bf:06:00:dd:64:a7:
         ba:1f:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:28:23 2026 by rpki-client