Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File:                     PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier:          DRf4YWWWhKeMRpJSuFYy5gCx6tapR7t2K6N4R3C8qDQ=
Subject key identifier:   EE:B6:7F:E5:DB:CD:99:3D:06:6B:81:89:B0:9A:5A:4D:8E:0A:EA:A1
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer:       /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number:          038D
Signing time:             Thu 19 Feb 2026 00:00:33 +0000
Manifest this update:     Thu 19 Feb 2026 00:00:32 +0000
Manifest next update:     Thu 26 Feb 2026 00:00:32 +0000
Files and hashes:         1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: PthNg1IhLvLUrQO2vkOloS5toB2L8FLHLpBNn6vkmeA=)
                          2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: mhxb0LKcpUK4gl9y3ZBmyx0KvvyzzraBRVCT46qMSiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
                          rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
        Validity
            Not Before: Feb 19 00:00:32 2026 GMT
            Not After : Feb 26 00:00:32 2026 GMT
        Subject: CN=699652a1-49e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:7d:d6:38:fe:13:3f:ef:60:46:74:78:dc:
                    c2:f9:ca:f5:22:70:0e:d7:45:2a:0a:1a:01:38:9d:
                    10:a7:20:ec:c9:36:a8:46:26:1e:d8:a3:9a:fd:76:
                    32:75:8c:41:ac:85:60:1a:b7:4e:bc:ae:fd:dc:fe:
                    71:6b:5e:a9:ef:00:77:72:41:69:b9:17:15:50:15:
                    f1:1c:0b:cb:33:80:75:e7:12:ee:49:ed:41:c6:de:
                    75:25:21:1f:49:6e:cf:96:fe:ca:d5:04:3f:39:b6:
                    e4:7d:d4:12:7a:c0:89:fc:8b:ac:0c:8a:a1:64:db:
                    e9:91:6e:dd:73:51:f0:23:64:36:ef:bc:a8:a3:67:
                    25:8e:14:32:32:70:b1:59:d4:7a:0b:94:73:b6:91:
                    3a:6f:bc:18:19:e5:73:5b:34:f7:e0:24:c7:94:5e:
                    98:3e:38:c8:0d:58:6b:55:98:9f:0f:8d:f0:8a:39:
                    92:66:5f:ec:f7:40:18:02:c3:63:21:e0:96:8d:01:
                    bf:53:09:d1:b1:53:42:cb:8e:84:09:6f:f2:0f:02:
                    32:cd:17:bd:b9:0d:d0:d3:12:12:21:32:bc:aa:25:
                    70:08:46:57:76:53:12:ae:0d:83:fa:f7:b6:24:76:
                    9b:d7:2d:bf:77:37:80:3d:08:f4:bb:ea:0e:54:63:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B6:7F:E5:DB:CD:99:3D:06:6B:81:89:B0:9A:5A:4D:8E:0A:EA:A1
            X509v3 Authority Key Identifier:
                keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:30:8b:4b:e0:e6:89:a6:76:27:0f:3a:82:f8:13:5b:83:7f:
         f2:68:c7:63:3b:a0:8e:12:9c:82:b1:ea:32:47:0e:23:23:76:
         45:a6:1b:b1:bc:08:ee:2e:4f:ec:af:e3:e8:db:c3:87:c5:99:
         28:db:7f:a8:a3:9f:cc:35:e0:4d:30:d2:9b:b6:58:79:7d:70:
         93:cb:eb:9c:cb:0b:60:b5:77:61:11:2a:b0:33:3d:16:ad:52:
         c2:0a:22:dc:11:67:33:e6:df:c2:84:a5:25:56:71:00:fd:0f:
         6e:a5:16:a3:ca:68:d7:6b:84:56:b8:77:34:d2:0b:f4:f5:ca:
         91:1c:a6:db:de:ad:91:fd:21:5f:4c:5f:6b:e1:22:e0:d7:bf:
         6e:e9:39:40:b0:7a:21:1a:4d:05:ee:9a:8c:06:4a:cc:8f:49:
         fa:b3:fa:ef:80:53:87:63:8a:51:dd:18:17:22:eb:38:45:c4:
         97:58:af:b3:60:bc:04:25:ae:1f:1f:f7:d9:7e:68:d6:8c:bf:
         87:7b:86:1f:4b:f3:1f:34:2c:bc:99:3b:d8:4e:12:7e:6e:5a:
         96:d4:8c:dc:37:b2:dd:09:5a:2d:62:39:b8:cb:d6:f4:f0:de:
         07:c3:7c:24:7a:8b:dc:e6:0e:fb:0e:ea:15:82:9a:65:16:13:
         f0:9f:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:52 2026 by rpki-client