Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
File:                     iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json)
Hash identifier:          41oVXM+uYLiaKtExYoi97iKXvEZQaugxz23HWeRC+tY=
Subject key identifier:   CF:43:D9:25:95:BA:86:5A:E7:3F:15:2F:1D:C3:B5:B5:17:AE:F2:49
Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A
Certificate issuer:       /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
Manifest number:          0290
Signing time:             Thu 19 Feb 2026 00:44:13 +0000
Manifest this update:     Thu 19 Feb 2026 00:44:12 +0000
Manifest next update:     Thu 26 Feb 2026 00:44:12 +0000
Files and hashes:         1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: 0usJv4na6dxekHdX+WUzD+c1hsYLndGspD/Z3eRqq44=)
                          2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: Xm8YDhtFdsbSB/JaCf1eeLvxGvfVGvAsGyj9y3iXBIE=)
                          3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: meFnR87+GI3v6nomBtYeU7WZPVYP4nD3qbJitsfc+J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl
                          rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A
        Validity
            Not Before: Feb 19 00:44:12 2026 GMT
            Not After : Feb 26 00:44:12 2026 GMT
        Subject: CN=69965cdd-783a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:87:2a:a7:fc:10:7e:a9:db:b3:db:e6:44:
                    77:91:c6:c0:5c:cf:01:ca:bc:c9:4f:a8:04:57:cf:
                    d5:fc:4e:9f:4f:df:b4:12:3b:b5:13:7c:38:40:16:
                    f1:ac:28:98:b4:e9:ad:8f:d8:53:32:8b:15:86:a4:
                    e4:3b:5b:83:fe:7e:53:4c:ea:81:9d:8c:c7:86:22:
                    47:4f:0a:d0:51:0b:0c:20:85:44:4b:cf:04:0f:12:
                    56:b1:95:39:c0:48:88:50:2d:98:2a:e7:73:9b:0e:
                    8a:45:1e:9b:cc:26:fa:bb:2b:af:f9:e7:b7:33:44:
                    f2:67:a3:49:66:18:03:78:df:ef:6a:f6:c5:0e:f9:
                    3e:ef:ce:86:53:57:f2:7c:5b:8a:4f:2b:28:f7:17:
                    df:fb:a9:8b:ec:8b:b4:5f:ad:ab:ed:5a:0c:ad:39:
                    fb:ff:a5:94:2d:0d:99:df:85:22:b2:69:03:8b:22:
                    0d:87:30:e4:bf:67:f9:8d:82:76:d1:cf:54:84:ba:
                    22:80:7e:78:d9:b9:11:77:fc:68:e5:d1:d9:a3:cf:
                    b6:9f:56:08:87:39:f0:60:5e:89:2f:6c:f2:78:97:
                    89:e5:ed:1c:79:c3:bb:ad:ef:e0:07:70:35:66:08:
                    b0:07:fd:85:3f:37:0e:de:88:30:b7:77:72:1f:8b:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:43:D9:25:95:BA:86:5A:E7:3F:15:2F:1D:C3:B5:B5:17:AE:F2:49
            X509v3 Authority Key Identifier:
                keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:ca:3e:12:6b:8c:aa:f0:69:a7:78:f2:fc:0c:e7:6b:4f:
         5c:07:6d:b5:2d:3c:2f:dc:d2:12:5c:11:45:6b:ac:d8:61:2b:
         0a:fc:1b:df:b5:b6:66:9e:b3:c2:05:60:08:cc:7a:c0:a1:18:
         1e:51:8d:61:78:9f:77:d0:21:71:66:80:23:a0:bb:aa:7d:79:
         7d:14:52:f8:6f:a0:f3:a1:d4:f7:e5:e0:fd:d9:1a:4b:9b:94:
         2d:9a:4a:dd:e1:f1:b2:f5:92:a4:67:7c:cd:21:56:17:3f:a7:
         95:1f:3d:e0:eb:28:33:79:2a:fe:c4:ea:c0:95:22:53:f4:c0:
         de:97:71:58:d2:00:ab:97:cf:9b:e3:71:c9:fb:58:62:71:88:
         33:b5:96:10:98:8a:b2:18:8c:b9:fc:c2:3b:4f:05:99:2a:90:
         68:37:9a:38:4b:d1:9a:11:14:14:fc:67:99:c1:93:00:0d:bf:
         77:10:69:f2:19:f7:bc:82:e4:07:5f:8e:40:91:41:59:83:68:
         7d:ac:6e:36:25:68:53:0e:55:4f:87:04:57:a7:57:01:7f:5e:
         2e:49:30:13:ff:7d:4b:6e:b2:6f:5f:0d:a2:b6:b9:f1:be:76:
         92:35:95:28:ec:46:15:94:b0:3e:bb:eb:a0:dd:f6:94:31:07:
         31:0a:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:00:22 2026 by rpki-client