Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File:                     U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier:          ra0ZGk7Eha+sRQilCk8hTDhe9T/903w+N2FNE1xCMm0=
Subject key identifier:   4D:09:F1:B1:8D:BE:E1:A5:B3:31:15:AA:16:E6:80:EC:6A:1A:3F:CA
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer:       /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number:          0189
Signing time:             Thu 19 Feb 2026 03:04:37 +0000
Manifest this update:     Thu 19 Feb 2026 03:04:36 +0000
Manifest next update:     Thu 26 Feb 2026 03:04:36 +0000
Files and hashes:         1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: VdwOjpI7/A5UQ6pJDW6vu8Yybgp/7bRbE5xUjOc1utE=)
                          2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: BVkUXHmaunafReC96ZYpGOgVThUwi3Y9iPZ+tZjaqqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
        Validity
            Not Before: Feb 19 03:04:36 2026 GMT
            Not After : Feb 26 03:04:36 2026 GMT
        Subject: CN=69967dc5-308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:40:32:95:db:c2:65:25:58:ec:a6:fc:d7:1c:
                    82:1b:68:c1:bf:3c:17:ae:eb:1a:63:53:da:93:53:
                    67:3a:77:22:1c:c5:25:7f:04:78:80:ba:63:7f:3b:
                    09:95:f3:4a:f0:f7:2c:b1:a6:8c:33:68:d6:12:db:
                    f0:fc:25:5d:94:d0:38:d2:a0:53:a8:d9:41:71:a1:
                    ff:88:00:89:76:4c:bb:78:c8:57:ef:51:b4:b6:8e:
                    10:19:b6:9b:84:83:e4:08:4b:1b:cb:49:d3:c8:21:
                    12:fb:d6:b3:78:a0:6d:3f:93:44:85:2d:20:23:b8:
                    75:57:26:06:e3:38:df:35:8b:23:7c:33:38:17:e6:
                    d7:63:65:eb:63:a2:a7:1d:a3:98:9c:09:92:8f:76:
                    78:be:5a:ca:b3:0e:3e:63:31:e8:76:df:ad:cf:f9:
                    0d:e4:75:d6:d9:af:62:68:67:e8:a2:f9:ef:ea:3d:
                    49:ed:82:aa:d1:0e:9b:38:76:a4:86:5f:de:93:4b:
                    44:ea:42:64:aa:29:2c:ae:20:e6:6a:4e:1b:09:12:
                    52:ac:e0:56:f5:26:f9:a4:8d:c3:42:b3:73:9d:df:
                    cb:9f:37:76:a5:ca:b7:30:ae:d5:30:37:3e:16:3f:
                    98:40:dc:6a:75:cd:14:7f:c5:48:2a:34:45:81:ee:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:09:F1:B1:8D:BE:E1:A5:B3:31:15:AA:16:E6:80:EC:6A:1A:3F:CA
            X509v3 Authority Key Identifier:
                keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:87:00:6c:ab:72:3a:83:9d:c4:28:b4:e9:33:07:83:a6:78:
         a5:82:44:d7:6b:9c:f0:62:31:c4:ec:77:34:4c:a0:5b:c7:95:
         2e:3f:db:5f:4a:d9:6e:0a:b6:44:46:53:36:00:ba:43:d7:0e:
         4e:91:fd:ee:dd:e2:c7:00:b1:ce:9f:86:1a:18:45:59:56:4d:
         c5:90:cb:e6:a1:49:f6:3e:5f:27:d3:ce:40:36:55:da:c6:25:
         91:cb:41:e0:1a:fa:97:45:da:7a:dd:b5:46:76:67:ca:10:a6:
         44:68:67:48:60:12:39:7a:37:b6:16:df:a8:09:17:f8:b1:ee:
         27:02:03:12:6a:59:79:88:17:90:67:59:de:64:f7:d9:08:11:
         6e:ad:0b:6a:e8:e7:f7:50:e9:79:ff:26:d9:88:e1:a9:72:b8:
         18:0d:35:fc:99:56:d0:38:98:09:fa:a8:f3:e9:ae:70:65:6e:
         78:ac:02:6e:11:0f:be:2f:20:be:90:82:d0:ec:1a:d6:e8:ab:
         1f:fe:53:12:80:36:ef:3d:b2:58:aa:88:d3:e5:e9:16:d9:0b:
         35:12:24:b5:6e:af:e1:de:09:92:0a:35:bd:de:5d:e3:2e:b6:
         9f:16:04:e5:c7:f0:57:73:67:d7:34:2b:0c:cc:58:50:fb:a2:
         f8:33:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:59 2026 by rpki-client