Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File:                     pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier:          H+gcR/gWNY5Zw9sxqzfs3N8phdJEy7qkmfi6umL1/SQ=
Subject key identifier:   21:CF:75:C9:22:C6:76:DE:85:27:13:7B:52:6C:1F:E3:97:6E:7B:20
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer:       /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number:          05C7
Signing time:             Wed 18 Feb 2026 22:21:53 +0000
Manifest this update:     Wed 18 Feb 2026 22:21:53 +0000
Manifest next update:     Wed 25 Feb 2026 22:21:53 +0000
Files and hashes:         1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: iGZ4pigzvULicnrZ4ZWxpLt/WbK6zvu/TjvoX7dLbYs=)
                          2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
                          rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
        Validity
            Not Before: Feb 18 22:21:53 2026 GMT
            Not After : Feb 25 22:21:53 2026 GMT
        Subject: CN=69963b81-c25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:de:02:0e:75:42:e6:b0:df:3b:f6:30:60:
                    42:10:57:c5:82:de:24:79:05:af:37:c6:39:25:3d:
                    19:fa:7f:f5:c2:75:50:98:19:73:e9:b2:52:54:8d:
                    1d:3d:57:f3:51:9a:61:a5:77:99:c3:30:0b:52:5b:
                    72:f8:55:8b:8e:0c:92:aa:39:40:8b:d1:fc:3e:43:
                    13:56:2f:e0:5a:26:5d:e8:e6:44:2c:08:51:e7:ed:
                    b8:f5:04:5e:d4:ef:9b:8d:c4:59:aa:45:36:43:78:
                    4a:6f:fe:fa:12:ef:37:7e:ca:45:ee:fc:d8:81:09:
                    07:1d:c2:cc:c3:86:02:60:d4:66:89:58:85:98:f5:
                    b9:ce:4a:97:18:72:c7:d7:e6:2c:9f:69:18:10:3e:
                    74:08:36:8c:dd:25:6d:f1:df:aa:07:de:46:d1:93:
                    b4:ef:11:e3:14:fc:ca:a2:2e:bb:b2:13:5a:a7:e3:
                    bf:2b:9a:69:98:32:de:38:26:cf:f4:a9:01:a9:b5:
                    b9:dd:c6:51:df:aa:3e:9d:cb:1b:23:df:70:5a:dc:
                    9c:5b:e3:94:d1:3c:e3:e2:7f:26:2c:64:eb:e6:68:
                    7e:88:13:f5:ed:c3:c1:25:18:bc:91:60:00:5d:d8:
                    6a:9d:de:b4:bc:50:a5:6f:cd:ae:50:d5:f9:66:dc:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:75:C9:22:C6:76:DE:85:27:13:7B:52:6C:1F:E3:97:6E:7B:20
            X509v3 Authority Key Identifier:
                keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:99:65:3a:2e:12:49:3a:03:b2:d2:3c:e2:3a:0f:c0:72:86:
         3d:b2:ca:67:d1:d5:cb:93:4b:46:87:e1:60:25:5f:59:4d:91:
         52:94:3b:42:63:1f:bb:7f:1d:50:53:19:77:67:e9:ba:09:8d:
         f8:62:2b:47:b7:4f:a4:97:63:5c:50:ef:5f:92:35:d5:f4:53:
         21:be:78:e8:1c:45:eb:70:f6:50:e9:cf:82:68:5e:56:32:a4:
         fc:84:f2:ca:c0:85:8a:ae:5e:12:8c:9e:5d:72:0d:2f:b9:9b:
         92:c5:1c:b4:89:8a:30:fc:fb:f8:dd:d7:1b:63:db:ea:c8:86:
         cf:18:9e:03:c3:bd:ed:f8:01:52:9d:b9:cf:94:99:8b:34:bf:
         ec:38:cc:3e:18:df:53:76:50:8b:41:c3:e8:21:2d:63:04:a7:
         3b:29:d5:9e:58:af:03:f5:26:85:bc:86:9d:a3:fe:2d:12:e2:
         dc:a5:6c:43:2e:5a:60:6b:05:09:8c:fa:be:bf:8c:06:9e:fe:
         aa:6f:10:cb:a5:89:79:f3:69:3e:6d:6c:88:72:2c:22:2e:28:
         67:49:44:32:8f:5d:bf:de:a8:88:9f:70:19:61:e6:ca:f7:24:
         40:cf:15:60:20:b2:64:4c:e9:bb:b6:3d:97:f9:ac:46:d6:a0:
         0f:c1:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:30 2026 by rpki-client