Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
File:                     otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json)
Hash identifier:          xg+0tYKMyba+rx+ElgQ4s0g27P9F0e78F49eFV45PHQ=
Subject key identifier:   02:2C:89:CF:18:96:2C:72:15:E4:92:ED:32:1A:90:C2:D8:07:C2:1D
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Certificate issuer:       /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial:       0864
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
Manifest number:          085C
Signing time:             Wed 18 Feb 2026 20:11:28 +0000
Manifest this update:     Wed 18 Feb 2026 20:11:28 +0000
Manifest next update:     Wed 25 Feb 2026 20:11:28 +0000
Files and hashes:         1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: 5bk9OZHdlJE6fo0S4jtjCu0JmGMo0qQsMJY6c32w38Q=)
                          2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
                          rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
        Validity
            Not Before: Feb 18 20:11:28 2026 GMT
            Not After : Feb 25 20:11:28 2026 GMT
        Subject: CN=69961cf0-0f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:30:47:d1:33:a7:a0:18:a2:a9:2f:ab:32:
                    42:7c:19:c3:7e:e9:66:eb:4d:37:63:8f:6d:e8:89:
                    69:26:ea:0f:7b:b5:e2:24:b1:24:78:86:6a:d6:9d:
                    cd:5f:e2:6f:86:87:0b:98:b5:94:fa:c9:55:a3:07:
                    0e:d9:f7:47:66:c7:66:c6:cb:68:8d:30:04:45:3c:
                    30:5b:61:dc:ec:ba:fd:d2:a2:5e:95:04:26:7a:d7:
                    c0:ca:ae:e5:e7:fd:8e:31:58:4f:30:bc:b6:a8:07:
                    e2:b6:b6:10:dc:1b:b2:a6:a7:7b:d1:c7:ce:82:3b:
                    ac:b6:12:1c:ae:a3:5f:2e:fc:b4:dc:ae:9d:d9:84:
                    ee:1f:d4:f0:24:a6:f2:41:15:1a:4f:18:14:aa:be:
                    ef:d2:54:45:8c:63:b2:bc:54:b6:7e:1c:4c:ce:c8:
                    83:1c:b1:93:65:df:7c:84:34:9e:34:ff:a0:be:ed:
                    52:ec:c5:4b:f8:b9:4d:5d:22:df:12:6e:c3:aa:f1:
                    36:a4:06:71:54:82:6f:c3:8d:4e:94:86:65:ed:a2:
                    1f:cc:64:ad:c1:75:66:6d:fb:7e:7b:28:92:c4:02:
                    80:4c:8a:cf:77:f0:70:14:dc:b5:c4:35:17:c2:ab:
                    da:83:07:2c:95:08:5c:93:b0:ab:2c:c2:77:53:50:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2C:89:CF:18:96:2C:72:15:E4:92:ED:32:1A:90:C2:D8:07:C2:1D
            X509v3 Authority Key Identifier:
                keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:84:aa:f3:cf:ca:31:84:86:5e:94:d9:31:c3:e2:29:21:1c:
         ae:ed:73:88:c0:8d:dd:c6:33:18:5c:be:73:cb:e7:40:1d:5c:
         f9:c4:a5:b9:73:8b:f1:a8:f5:38:d1:e3:70:4b:7e:95:08:8b:
         0a:79:f6:01:69:78:f0:04:93:61:9c:be:1c:7d:2a:ee:b4:fe:
         b3:d4:2d:34:d4:3f:bc:56:81:fc:c7:02:2c:83:5e:cb:69:80:
         b2:c8:1f:dc:e1:1c:4a:c8:6d:36:26:4b:d0:ff:bd:27:16:39:
         aa:6f:13:fd:6d:60:83:7b:95:40:5b:6a:f2:4b:39:c5:e2:d7:
         63:59:63:dc:e0:9a:48:49:84:db:63:25:c4:2f:da:ea:ef:5d:
         46:09:d3:10:dc:62:96:74:f2:37:1a:45:ff:75:10:12:64:ec:
         c4:22:20:a1:e2:f7:22:50:22:fa:c6:e2:5f:92:25:51:f0:cf:
         15:29:0a:ad:c7:cb:55:1c:13:6b:6d:d7:eb:6a:cb:28:93:10:
         0f:c3:95:61:fb:78:aa:49:20:cf:86:f9:7e:05:ed:7a:62:38:
         13:cf:86:50:95:ac:5c:da:e1:1f:e4:1c:f4:18:0e:8b:2f:04:
         94:20:fc:d6:65:95:0d:11:22:42:e6:53:e4:05:8b:54:d1:c5:
         59:46:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:30:32 2026 by rpki-client