Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
File:                     Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json)
Hash identifier:          Hn323LIktTz0PheW9Au4U1x/PUUq1F9Vn5bkq0sAv/c=
Subject key identifier:   90:BC:33:AE:45:7D:FE:9C:A5:66:51:94:04:00:39:2D:66:FD:A8:40
Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
Certificate issuer:       /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
Manifest number:          080A
Signing time:             Wed 18 Feb 2026 20:33:33 +0000
Manifest this update:     Wed 18 Feb 2026 20:33:33 +0000
Manifest next update:     Wed 25 Feb 2026 20:33:33 +0000
Files and hashes:         1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: pmNLzcR+KbHSCrvY9A3o0HG7lhDIf/NKR2/+dn/nNG0=)
                          2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: fxQZfbaLKR/d/fZu/fhyY8IFle3U5GHLuzj+qPAQsuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
        Validity
            Not Before: Feb 18 20:33:33 2026 GMT
            Not After : Feb 25 20:33:33 2026 GMT
        Subject: CN=6996221d-265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:97:d5:b2:8c:00:fc:72:b9:f5:cd:6d:37:
                    ae:ac:15:fc:b6:ca:f5:3c:0f:2c:0c:44:65:41:e5:
                    0e:c4:c9:1c:b9:72:68:94:43:22:66:d6:88:cd:5a:
                    78:54:c7:ee:da:08:36:0a:b0:02:7a:d7:81:24:9f:
                    7d:6e:51:e3:82:79:7a:3c:d7:94:48:f1:72:3b:c3:
                    54:a8:43:13:1d:76:fa:ee:71:ff:a1:72:93:c0:5b:
                    ec:99:28:79:d2:2e:18:e1:af:09:d3:61:4f:5d:33:
                    87:1b:49:dc:a3:65:1b:d9:bb:0c:eb:00:cd:65:e1:
                    06:69:e3:00:0a:b4:1b:9f:07:dd:55:e4:dd:98:2f:
                    93:96:bf:85:ba:22:c6:83:66:3e:11:d3:34:6a:a2:
                    5a:ce:31:62:85:1c:38:02:b9:a2:3b:2c:9e:58:df:
                    79:3f:68:17:df:82:7b:9e:59:11:f9:15:f9:40:cc:
                    d5:71:42:f3:4e:b7:85:20:f4:b6:23:12:54:2c:39:
                    c9:9d:ba:e2:1f:e3:32:a5:64:f1:66:87:fe:36:d5:
                    92:8d:a9:4a:e9:1b:e9:06:d6:fb:7e:f9:33:eb:b3:
                    27:58:9c:bc:a3:07:0f:b8:5d:03:74:d3:57:5a:24:
                    2b:4d:cb:c4:47:99:98:2d:1a:d7:d0:a1:7b:6f:a8:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:33:AE:45:7D:FE:9C:A5:66:51:94:04:00:39:2D:66:FD:A8:40
            X509v3 Authority Key Identifier:
                keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:07:a1:30:ff:cf:a3:cc:59:d4:ac:cc:88:76:fb:81:00:49:
         82:83:e1:57:2a:46:40:9e:ef:1d:a4:be:0a:85:e1:2d:b9:6d:
         4f:87:37:84:cd:98:eb:a9:e6:e0:f5:0d:0f:4b:00:bc:11:47:
         3d:a4:07:34:6d:ca:f2:c5:46:94:a6:cc:69:16:56:af:df:51:
         ef:aa:34:67:f5:53:3b:d2:9e:88:75:63:dd:c8:88:37:07:e6:
         59:f2:92:d0:45:55:d7:a5:fd:17:26:65:bd:d2:0a:1a:c8:3d:
         8a:50:fb:8b:4b:a8:c4:2d:f9:64:e7:04:14:ec:6e:f2:df:0c:
         82:f5:36:f2:3f:a4:28:f3:48:b2:ef:92:49:7b:67:db:59:6b:
         80:8c:e6:92:6d:e8:6c:80:14:ed:52:d8:3a:7b:3c:1c:09:47:
         db:b3:c5:6e:4c:4e:8d:0c:5c:10:0f:05:46:a5:a3:0c:6e:ed:
         00:f5:aa:84:e5:b4:cb:9c:9a:7c:a3:20:b1:f2:cc:8e:37:4d:
         11:47:fc:ed:f9:1f:81:d6:de:3b:10:3c:de:0a:a5:ed:1e:c5:
         ba:a8:64:5a:fc:1b:5e:5c:00:ce:33:30:08:da:88:6c:13:7a:
         f3:20:01:fb:6d:84:a9:93:93:2e:a0:aa:4a:05:30:2a:53:c3:
         76:56:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:01 2026 by rpki-client