Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
File:                     CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft (raw, json)
Hash identifier:          izv88qf0JMwsd0+CCoy6Q+MWK/ehRqGRl+J1kz9QlRs=
Subject key identifier:   9D:4D:53:C4:CD:22:74:14:E0:B7:CB:E9:FF:9C:71:22:A5:2A:6F:86
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Certificate issuer:       /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
Manifest number:          0119
Signing time:             Thu 19 Feb 2026 04:14:18 +0000
Manifest this update:     Thu 19 Feb 2026 04:14:17 +0000
Manifest next update:     Thu 26 Feb 2026 04:14:17 +0000
Files and hashes:         1: CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl (hash: 1LMQt0w0Yudb6BtVU8Im/j07WkicGnBBFBrcOVZpfM4=)
                          2: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (hash: ssSab392rUEklfenSvYRYq8TUWajk4XJZygnBh6m+8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
                          rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
        Validity
            Not Before: Feb 19 04:14:17 2026 GMT
            Not After : Feb 26 04:14:17 2026 GMT
        Subject: CN=69968e19-3503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:d7:01:2e:b7:bb:99:82:e3:bb:74:c6:d5:
                    40:08:30:a8:b5:0f:6b:38:36:f6:0d:18:f2:86:f4:
                    b4:4c:9d:52:e9:4c:fd:29:3b:d5:a4:8a:04:16:81:
                    a7:38:12:77:18:75:b8:8f:54:e5:34:5e:51:8a:f5:
                    58:ac:39:a8:c1:0b:bc:4d:33:df:25:46:55:4e:be:
                    24:40:4d:67:66:f9:80:ee:cd:86:2c:ca:73:5f:8c:
                    80:81:c9:28:8c:e4:77:6d:05:02:76:c3:e8:11:87:
                    45:c6:b7:51:b7:8f:d2:41:50:6e:fa:28:b4:be:b3:
                    35:5e:e1:a3:c0:b0:66:b6:a2:dd:e0:dd:d4:fe:4a:
                    bd:45:55:8d:97:1c:24:c1:4a:e0:36:fb:15:6c:41:
                    ac:a8:b7:67:c0:ff:a6:9f:17:f9:b8:e8:a1:24:91:
                    b5:54:44:41:2d:14:6b:ad:11:38:05:81:1a:c7:00:
                    97:20:79:ad:df:be:fa:36:30:7e:18:46:05:39:5b:
                    70:6a:46:e6:df:d2:ad:09:7a:7d:a9:1a:95:ba:ee:
                    b8:47:08:00:c4:1d:aa:dc:0d:48:ea:22:8a:4f:3d:
                    48:7c:d7:7c:b0:e7:6d:f8:d0:e9:42:d5:fa:9c:54:
                    c5:d6:6a:4b:fe:ef:d3:27:79:fa:2f:ea:e3:06:a3:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:53:C4:CD:22:74:14:E0:B7:CB:E9:FF:9C:71:22:A5:2A:6F:86
            X509v3 Authority Key Identifier:
                keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:81:3e:e1:20:f2:4b:cb:08:90:d9:4a:e2:42:d9:28:96:
         87:59:f5:16:46:db:2d:cb:51:65:7c:7a:7a:66:cd:58:bf:cf:
         f6:b1:a6:ec:bb:79:75:98:f3:62:a8:df:46:b3:aa:6a:65:07:
         f5:09:79:6f:7f:5e:62:d5:6c:ca:ce:25:31:dd:b2:e0:42:9b:
         f9:d1:aa:69:fe:eb:90:33:24:f1:51:c5:6c:d4:47:76:d0:05:
         51:95:30:2c:19:ea:24:84:ff:98:08:d2:d8:87:c7:fe:7c:40:
         70:b4:a3:8b:93:08:90:b9:35:3c:ab:c8:f8:18:6c:65:99:00:
         ee:32:3e:6b:bf:c5:32:87:fe:c0:5e:8c:c9:69:ce:6d:c0:c2:
         34:89:91:a5:20:df:bb:2c:c0:fe:49:17:bc:95:fc:9a:4d:47:
         44:ec:2f:d9:35:b5:0c:17:c9:ca:8e:7a:1b:f4:b3:af:33:6b:
         15:5e:fa:82:68:fd:3b:28:87:a8:d5:cf:dd:17:cd:aa:a8:5e:
         f2:08:dc:2b:0a:4a:9b:13:e7:5e:d0:24:af:35:f4:6c:10:5b:
         f3:b7:b0:ee:9b:e1:31:c2:c4:cd:2a:0e:fb:52:07:bc:43:ba:
         d4:9d:01:f8:d0:30:d8:d0:89:81:10:1c:87:0c:c2:b4:4f:9d:
         d2:6a:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:55:40 2026 by rpki-client