Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File:                     p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier:          sMqUbcNB0DJhIk7fAFMRILMxP5GAUStAJDdxEYl9h8g=
Subject key identifier:   E6:95:3B:5B:7E:C7:97:82:79:8A:CA:DB:F3:1E:08:15:5B:BB:82:72
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer:       /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial:       0CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number:          0CA9
Signing time:             Wed 18 Feb 2026 18:07:05 +0000
Manifest this update:     Wed 18 Feb 2026 18:07:04 +0000
Manifest next update:     Wed 25 Feb 2026 18:07:04 +0000
Files and hashes:         1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: J1n5iIFSqJ+vMVPdq4cPuswtwceHIATwL4AqsCDkl/4=)
                          2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
                          rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
        Validity
            Not Before: Feb 18 18:07:04 2026 GMT
            Not After : Feb 25 18:07:04 2026 GMT
        Subject: CN=6995ffc9-9f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:d6:79:f3:b2:7b:99:bf:d6:db:5e:29:53:
                    6b:44:fd:40:23:b9:2e:ca:d4:6b:6d:18:05:e4:22:
                    7d:8f:ca:88:5a:9a:8e:66:6d:0e:62:62:fd:dd:62:
                    11:c5:e5:21:2f:42:db:05:d2:fe:f5:91:e0:2f:ff:
                    f4:ad:3a:11:03:fc:b1:ba:3a:8f:33:ba:cf:61:49:
                    0f:9d:91:00:95:d1:f1:f3:da:5e:99:1c:50:2b:9d:
                    e9:f1:80:98:a8:75:c7:a0:d8:d9:58:b8:b2:74:1b:
                    94:25:40:f3:b5:90:c2:ba:e7:fb:f8:7a:82:c0:85:
                    58:0f:70:2b:c8:b8:28:52:a6:4e:a3:2a:6e:21:cf:
                    bb:a8:b8:5e:a5:01:85:4c:f4:6c:80:d2:86:f6:50:
                    62:25:71:53:44:75:18:7b:04:16:ea:25:83:bc:b6:
                    ba:a3:a8:6a:39:02:3c:67:72:9c:5f:96:c9:67:4b:
                    7b:db:65:97:c8:8d:2a:65:67:f5:8b:b0:42:f3:ca:
                    49:ff:11:1e:01:85:ae:2e:4f:17:33:e7:7a:c4:d6:
                    93:07:42:f2:04:87:6b:6a:7a:4a:27:63:f5:61:cd:
                    d0:07:5c:d6:68:c2:58:48:a5:f0:14:04:c1:98:df:
                    cb:f4:3c:64:49:3f:be:52:c8:8c:c3:09:78:c5:5b:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:3B:5B:7E:C7:97:82:79:8A:CA:DB:F3:1E:08:15:5B:BB:82:72
            X509v3 Authority Key Identifier:
                keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:a9:51:92:ea:c9:32:58:0f:11:77:45:dd:11:6a:c7:df:
         50:0c:03:c7:b3:3d:ec:7c:08:5a:cb:fb:55:d7:12:5b:ee:47:
         80:a7:ca:df:5f:84:57:ea:0f:ec:64:df:51:a6:ef:93:33:0b:
         41:5c:c4:55:3e:c5:76:61:a3:49:a8:07:49:63:86:f0:af:be:
         ef:c5:b1:3f:a3:85:a9:0a:74:81:b1:b3:8c:5a:76:e8:d4:34:
         6a:ac:30:8f:a8:79:72:94:f7:e3:76:7c:80:72:e2:aa:d8:0c:
         11:bf:91:6c:75:25:56:d4:bb:0f:1d:6e:fb:44:82:5f:7e:63:
         32:fe:a7:fd:c5:0b:f2:81:b1:8e:2c:b4:eb:06:c6:83:0a:9a:
         f2:ff:68:bd:06:5e:cf:9a:e4:22:13:3b:f6:11:84:95:67:a6:
         b0:72:db:75:3a:63:73:7f:f2:9d:1e:fc:cd:62:49:68:06:5e:
         e5:8c:3b:c4:e5:4f:29:3a:11:f1:d0:87:78:e4:fe:3b:0c:75:
         fe:f5:fb:28:25:4f:e0:7a:44:50:ec:da:4f:a8:b4:0e:49:66:
         ec:ef:dd:70:41:b6:59:0e:d2:2e:23:e4:32:26:30:76:c6:fb:
         10:01:33:8d:34:2a:6f:b7:34:57:be:7b:fa:7e:bc:48:33:90:
         a1:68:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:45 2026 by rpki-client