Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
File:                     hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json)
Hash identifier:          BFbdWlZskX7r/rfkatfCoXH0TQ/qO9z93cI2ocTfr6k=
Subject key identifier:   16:22:C2:F7:FC:51:E1:0B:15:BB:78:2C:EB:62:A0:57:78:29:58:EF
Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
Certificate issuer:       /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
Manifest number:          06DE
Signing time:             Wed 18 Feb 2026 21:33:04 +0000
Manifest this update:     Wed 18 Feb 2026 21:33:03 +0000
Manifest next update:     Wed 25 Feb 2026 21:33:03 +0000
Files and hashes:         1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: KxfY3MnQlx+q9rLVQu1OfS1Qte6Y3gXEHttRY3Vweko=)
                          2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
                          rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
        Validity
            Not Before: Feb 18 21:33:03 2026 GMT
            Not After : Feb 25 21:33:03 2026 GMT
        Subject: CN=69963010-0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:eb:67:7d:7a:85:81:d9:d3:4e:21:d4:61:
                    16:9b:a4:71:09:c1:b0:68:70:f8:e7:69:32:40:b2:
                    0a:56:3b:8c:b0:1a:13:49:65:7a:6d:0c:24:57:0d:
                    3e:cb:15:da:c5:3d:72:99:4c:8b:50:c7:47:9f:eb:
                    fc:7a:9a:4c:22:18:a2:df:12:e1:95:87:72:db:68:
                    5b:14:76:18:77:67:d0:ad:37:74:be:21:1a:32:07:
                    17:14:d2:39:79:7d:cf:eb:41:cf:be:24:58:87:33:
                    b7:30:dc:05:3b:c6:69:e7:0d:9a:4b:12:72:c5:ac:
                    f1:ff:eb:4e:f9:0e:c3:36:c3:7d:dd:25:a9:c9:13:
                    34:43:44:3c:4a:d2:01:67:11:3b:67:86:72:c9:5a:
                    64:94:fa:d7:73:81:41:75:7e:77:a9:b3:57:98:ab:
                    e2:53:e6:f7:bb:ac:29:09:04:05:db:2a:5c:03:0f:
                    d6:37:2d:43:45:93:77:6d:67:da:17:3f:c7:37:43:
                    2a:03:3f:2b:90:43:8f:f1:50:f1:69:81:35:08:bf:
                    9d:d1:49:6b:1c:cf:f7:53:aa:13:7d:8e:69:83:8c:
                    b5:59:87:6b:d6:05:83:0f:1d:24:cd:6f:7c:98:b8:
                    ec:80:87:1e:53:b2:53:3c:a9:19:df:90:0f:38:02:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:C2:F7:FC:51:E1:0B:15:BB:78:2C:EB:62:A0:57:78:29:58:EF
            X509v3 Authority Key Identifier:
                keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:6a:36:37:22:cf:b9:44:7e:fb:88:3b:9e:ad:9b:10:00:
         cf:bb:8c:2c:3d:c7:97:7f:3d:2a:03:7a:a8:41:cf:01:21:e6:
         24:16:96:66:76:d1:a0:b7:0f:84:30:54:de:39:fc:85:a4:a4:
         48:cd:0a:12:0f:9d:d6:cd:1a:18:86:54:d2:07:a5:70:90:a9:
         76:2f:cf:e4:64:36:46:d1:60:1c:47:3e:03:e7:78:46:3c:47:
         a5:08:6c:b9:ec:c8:a9:66:56:68:d9:78:6a:16:5b:ac:ae:50:
         4a:8a:08:84:87:31:72:aa:8f:89:71:74:c2:ab:54:79:d3:5d:
         78:4a:c4:67:2a:24:1c:9a:0f:60:54:29:57:f6:50:1c:d8:03:
         2b:e2:6a:e1:6a:09:be:15:14:9a:e4:37:ec:3f:19:6e:fc:e1:
         f9:a9:ee:d8:96:39:93:ac:5c:13:f4:6e:9e:29:91:76:14:90:
         24:6f:12:89:57:f8:cb:81:23:1b:fc:5f:b3:d9:7f:01:49:a2:
         97:6b:b3:32:b7:dd:c3:b9:6f:57:3a:07:5b:4e:66:6e:dc:a6:
         b2:4e:c0:d9:23:9f:56:18:fe:1f:c8:ab:6d:34:c7:dc:78:9f:
         66:f3:57:86:b7:4f:fe:e9:9c:08:da:9b:1a:f2:65:cd:b5:63:
         1c:86:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:59 2026 by rpki-client