Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File:                     o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier:          8iZati9eLARRr2SkvwQFXNh2EXiKrsXZtim/VpzLt+Y=
Subject key identifier:   66:17:55:7A:3A:8B:66:1D:A2:41:E6:FB:9E:5E:95:85:D2:8F:94:C8
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer:       /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial:       068D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number:          0663
Signing time:             Wed 18 Feb 2026 22:07:48 +0000
Manifest this update:     Wed 18 Feb 2026 22:07:47 +0000
Manifest next update:     Wed 25 Feb 2026 22:07:47 +0000
Files and hashes:         1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: AsV2xFO2z2RlbXqZBDoQ7LEsRo/MerYKNaAZirbuxb4=)
                          2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: hu2+qLAxtL25+jx2uf0y1VnIhzZpxlsSLOTl7IDraso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
                          rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
        Validity
            Not Before: Feb 18 22:07:47 2026 GMT
            Not After : Feb 25 22:07:47 2026 GMT
        Subject: CN=69963834-57c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:14:e2:bc:be:27:f0:a9:3b:ef:59:a0:89:
                    8e:8a:cb:64:0b:43:a2:92:80:d3:fd:aa:d5:98:90:
                    af:40:ff:9b:5d:6d:d1:e8:bc:36:97:7e:c3:76:f6:
                    13:88:cf:49:55:c6:3b:a8:b3:7b:c6:eb:34:de:72:
                    44:98:4a:b8:03:ec:a6:3a:40:ad:23:d9:24:ea:25:
                    c9:97:c5:7f:9b:4a:16:38:7b:02:7c:21:63:b5:83:
                    08:ae:eb:af:7f:bd:d1:32:f1:b5:13:54:82:f3:4d:
                    d5:e1:95:5d:1e:df:08:ee:e5:1b:5e:73:51:65:aa:
                    2b:4e:f7:19:fc:da:f9:b0:6b:1d:ff:9f:08:c8:28:
                    f1:ca:71:e0:d2:ab:6f:c0:c6:4d:3b:94:5b:dd:a2:
                    49:10:fe:da:17:b3:4b:38:41:81:b4:24:71:bc:d0:
                    a8:aa:56:6f:7d:59:10:71:22:cb:18:a0:70:12:2d:
                    a9:65:b4:6c:4f:55:92:b1:e2:52:3c:f2:56:36:93:
                    6f:e7:a1:c5:30:7b:d0:fb:af:d0:01:a1:b8:34:01:
                    b3:90:54:c3:a5:2d:e9:b1:5b:c5:46:36:73:b0:b8:
                    28:be:18:07:0d:0c:3b:b3:62:fb:36:f7:b7:15:55:
                    84:a3:06:54:f9:65:94:c6:75:09:6e:82:4c:68:18:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:55:7A:3A:8B:66:1D:A2:41:E6:FB:9E:5E:95:85:D2:8F:94:C8
            X509v3 Authority Key Identifier:
                keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:1b:6b:03:fd:39:ef:41:a1:4a:8e:77:50:91:7a:e3:41:
         59:c0:fd:5d:94:ee:49:80:5b:26:d0:71:90:01:1e:64:94:b6:
         5c:11:24:18:64:77:44:c3:6d:4a:2c:e8:e8:cb:f4:15:d6:56:
         ce:ea:84:63:99:11:6a:05:b9:c7:67:98:19:dc:2d:95:a4:8f:
         f7:97:15:1d:ba:04:63:78:8b:08:87:30:f8:45:74:c6:56:15:
         b8:38:e1:89:99:97:13:fe:72:e7:ce:b9:1b:00:f4:1c:87:8c:
         5a:ad:c8:77:61:c5:53:aa:25:f5:46:dc:bf:6a:36:d9:55:fe:
         a8:d7:62:fe:94:b9:60:13:dc:22:d6:da:85:10:8d:40:92:da:
         c5:dd:85:08:42:2f:6a:d9:92:90:df:12:c5:70:91:bc:88:16:
         a9:93:10:88:46:02:b2:d5:dc:11:23:5e:69:a5:6b:99:51:bb:
         fb:c5:3f:42:f8:3f:cf:5b:0c:0b:55:68:92:77:1f:92:99:e5:
         e6:1c:52:b8:e9:3f:16:5c:69:d3:15:3f:c9:1f:10:cc:72:f3:
         dd:9d:a0:70:3a:14:cf:88:21:7e:54:73:19:f4:85:8e:67:c6:
         d1:67:e3:54:3d:3f:d9:b6:61:18:04:c7:da:54:b5:0f:95:00:
         d9:44:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:48:08 2026 by rpki-client