Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          Wo8T7uwKnWlHF5VZlfXfK9Cyv2Ss9a5zcy2Lk+RcYQ0=
Subject key identifier:   B6:12:AC:B9:80:89:C4:FE:E4:18:75:01:23:65:7A:39:62:F0:F4:61
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          07D3
Signing time:             Wed 18 Feb 2026 20:46:01 +0000
Manifest this update:     Wed 18 Feb 2026 20:46:00 +0000
Manifest next update:     Wed 25 Feb 2026 20:46:00 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: 2gPlqjCtBGpXPFvZ/l+Z28kpNJcRtdhumEv+5k2E/fM=)
                          2: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: neek5srr+aWcWmnY+eA9qwIexbf1EgEc62zGldwiimQ=)
                          3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: XycQAAjR4EYRiIJrbriGrgbwnZEgUHk+CyGzEa7IeHA=)
                          4: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: dyvPcZxPt0csBuZZARHE9y3XiMCjfKdl2w86flcHLuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: Feb 18 20:46:00 2026 GMT
            Not After : Feb 25 20:46:00 2026 GMT
        Subject: CN=69962509-7d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:68:16:91:5e:1b:1f:36:a5:dc:96:c1:fd:
                    a5:0b:af:a6:52:2a:12:b9:db:9e:92:92:f6:7f:4c:
                    38:57:27:f0:e6:a9:b2:99:aa:bf:57:7b:2e:11:a7:
                    ef:bd:d8:06:21:fe:94:1b:93:07:88:a6:16:7a:5a:
                    65:c7:69:68:18:c1:e7:4f:5f:40:db:51:9f:d5:23:
                    94:d9:13:6f:1b:c7:4a:94:80:15:30:3f:ed:87:dd:
                    2a:2c:ee:02:0c:21:e4:d6:06:06:92:a5:ac:23:86:
                    d4:16:b6:42:18:01:fc:ba:f0:c9:88:45:bf:d5:11:
                    6b:df:b6:1d:93:49:bb:5d:a9:13:5c:c4:a0:be:47:
                    7d:cf:a4:a3:7c:93:5a:e7:c2:58:23:ee:4f:f1:9f:
                    d0:0c:5a:4c:42:a6:85:46:4c:b4:95:3f:00:e0:a2:
                    bb:6e:6e:53:3a:1d:89:81:ce:48:51:63:a3:1d:79:
                    f0:ef:55:4a:81:96:1d:ac:23:a1:75:9e:7e:9a:cd:
                    b8:0b:17:26:07:9b:01:ae:e1:46:49:b3:e6:55:b7:
                    66:79:d6:c1:6f:77:5a:3e:1f:cd:ea:a1:ea:3e:49:
                    5c:75:ca:b2:07:52:66:c8:21:b6:4b:11:a2:fb:31:
                    44:64:0b:3f:ba:d5:bb:33:39:d4:32:a3:12:b5:58:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:AC:B9:80:89:C4:FE:E4:18:75:01:23:65:7A:39:62:F0:F4:61
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:e2:81:98:00:2e:e8:45:4b:1a:a9:1a:34:d7:2f:51:dc:
         4c:42:6f:ee:00:c6:1e:16:d8:de:bd:bb:7f:df:c5:fb:f0:86:
         c1:92:46:41:d5:83:0f:ab:40:8a:32:df:fd:5d:d5:6d:f4:85:
         51:58:76:c5:0e:ed:1b:4a:f4:8d:d5:65:1e:17:d4:02:03:74:
         fa:42:05:00:46:e7:a4:fb:76:48:6d:c3:5e:3f:3f:cd:49:d8:
         40:32:42:1b:49:7e:e9:78:59:0f:5c:fb:5a:75:61:41:1b:8e:
         da:6a:4f:97:b1:01:63:fa:d2:11:f9:67:aa:5e:52:02:4f:9d:
         e6:5e:2e:dc:d5:93:4c:7e:b5:18:d8:1d:51:d6:2b:33:10:9d:
         ae:2c:dc:ae:00:21:e6:b0:17:ac:5f:7b:6b:10:94:0b:58:45:
         da:b2:0f:69:a0:31:01:00:a3:57:cc:45:f2:b4:fe:83:73:0f:
         36:c1:de:02:7f:43:c5:15:88:2b:85:02:26:13:0a:ec:52:53:
         4d:21:46:60:85:07:30:ee:5c:88:42:62:38:6e:e2:52:c2:ac:
         6f:3b:c4:76:d7:34:90:b5:a1:55:87:ed:04:43:d8:10:23:6f:
         94:4a:21:82:c6:c4:3c:b3:ed:31:9f:57:a5:54:22:cb:cc:8e:
         3d:d3:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:45 2026 by rpki-client