Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File:                     ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier:          UxX/i9SBhNrpoEDq8LvmbqyxE93bTqy0xU2JSqUS61Y=
Subject key identifier:   DF:41:F0:88:C8:F5:57:D2:1C:02:AA:8C:5A:3E:A6:13:AC:67:C3:7F
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer:       /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number:          3D
Signing time:             Thu 19 Feb 2026 06:42:53 +0000
Manifest this update:     Thu 19 Feb 2026 06:42:52 +0000
Manifest next update:     Thu 26 Feb 2026 06:42:52 +0000
Files and hashes:         1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: UKNelbBem+Z7iQ5IBTzLp9SZPsibfaalUdtCXhsLuLs=)
                          2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: SAspQcE3UhYSAhZA4XCGUAey+9nDMAa3DYVzr1PGnog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
                          rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
        Validity
            Not Before: Feb 19 06:42:52 2026 GMT
            Not After : Feb 26 06:42:52 2026 GMT
        Subject: CN=6996b0ed-3c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:6c:f3:75:a9:3a:0e:80:13:96:87:dd:27:
                    b5:52:22:04:d5:13:ad:ef:11:06:58:b5:89:d3:18:
                    05:21:7f:6e:4a:66:55:bc:ad:72:c7:76:d5:c1:be:
                    6c:e9:33:e3:00:fe:33:d6:3c:e7:c7:33:48:ae:1c:
                    54:bf:44:75:70:ef:62:d8:ad:fa:6a:0c:c3:fa:d4:
                    4c:02:e0:80:b4:b1:b3:1c:97:5b:63:16:9e:7a:ee:
                    ce:43:e8:86:68:15:07:ae:85:ce:55:b5:f6:0b:2c:
                    52:a3:44:44:f7:63:4a:41:ad:88:16:06:b8:ff:61:
                    ea:b9:1f:b0:e7:e6:0d:a1:cb:a2:62:e9:a5:81:78:
                    5f:d5:5f:fa:99:d4:40:cb:b4:67:8e:91:76:94:c4:
                    95:66:ec:37:a8:4a:b0:cc:a8:ff:aa:87:9a:0f:19:
                    e5:3a:99:27:23:c9:74:7d:54:f7:a5:ba:5e:18:2c:
                    4e:89:1b:45:c7:b6:2c:17:bc:11:c5:92:21:17:ac:
                    2e:ea:fa:45:77:70:cc:c0:47:98:71:d0:1e:cd:f2:
                    0e:bc:66:29:57:fc:77:c1:8e:e0:e3:32:33:90:a5:
                    5f:0a:85:85:a3:ef:9a:1f:6c:98:9f:ee:f3:c1:b0:
                    fc:88:33:6a:05:0f:99:28:ba:13:40:bf:91:8a:06:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:41:F0:88:C8:F5:57:D2:1C:02:AA:8C:5A:3E:A6:13:AC:67:C3:7F
            X509v3 Authority Key Identifier:
                keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:87:74:ff:2b:3c:42:45:ab:c8:27:d5:bb:36:52:1d:2d:00:
         fc:62:27:20:14:51:99:fd:34:0e:47:37:79:9f:f4:ea:7a:72:
         0c:02:b6:86:7f:d0:f4:d2:06:9c:ae:fe:6b:34:a8:d5:e8:d2:
         6f:24:f5:ea:40:ff:18:aa:dd:90:f2:d9:7e:19:50:87:4c:b9:
         38:8f:1e:8e:41:53:55:81:0a:bd:3a:b0:db:7c:4c:ff:fc:99:
         10:2a:8d:9c:0e:95:c0:db:fd:69:99:ce:e3:0d:9c:9a:ed:ea:
         2c:8b:01:66:74:a5:74:e0:36:77:c0:93:b5:b7:5e:c5:99:f2:
         85:2b:4f:da:b7:bd:82:f7:4f:e3:6b:ac:bd:ca:15:c6:70:0e:
         a6:da:6d:da:6d:df:fe:f3:15:31:be:81:13:1a:20:47:67:47:
         83:93:80:d2:46:0b:72:2d:61:fa:db:48:a9:c7:a7:94:4f:c5:
         1e:2a:cd:16:be:e4:0c:e5:37:bc:f3:43:c4:17:ea:de:79:e0:
         d3:da:77:2c:0f:cd:89:55:55:2d:65:74:b6:93:44:f1:1a:fa:
         f9:a1:e0:9a:7b:05:1c:fe:e5:ab:66:12:6c:fa:a9:28:e3:31:
         9a:79:29:de:3d:d9:f7:74:0c:e1:0b:c5:94:0d:9d:65:7d:53:
         3a:30:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:35:35 2026 by rpki-client