Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
File:                     3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json)
Hash identifier:          OpYXXUfj3qC9QiTpWQtIWQJNzwPiaNtVBVHcBsxBweM=
Subject key identifier:   F9:20:2D:7D:6A:D7:2E:84:85:DC:82:69:B9:41:F4:B9:E7:E0:57:1F
Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA
Certificate issuer:       /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA
Certificate serial:       1D8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
Manifest number:          1D7F
Signing time:             Wed 18 Feb 2026 15:57:17 +0000
Manifest this update:     Wed 18 Feb 2026 15:57:17 +0000
Manifest next update:     Wed 25 Feb 2026 15:57:17 +0000
Files and hashes:         1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: ybfdKhWNkay9ZUMR9ui76CK4Zp2caTYMW2ipS8VIIRM=)
                          2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: 4tdhNCoXuQpi6+LVzEflBnVNgk5q7DhclUHPWv4LN4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl
                          rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7562 (0x1d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA
        Validity
            Not Before: Feb 18 15:57:17 2026 GMT
            Not After : Feb 25 15:57:17 2026 GMT
        Subject: CN=6995e15d-b88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b5:07:ac:7e:14:be:30:59:fb:fa:c9:ef:e0:
                    37:54:5a:f4:b1:97:b6:fc:7d:c6:4f:42:7d:32:e3:
                    27:fa:a4:0e:e3:04:13:88:54:c2:ad:b9:1c:cd:d7:
                    7c:52:dd:4e:0e:8b:2b:37:f1:59:68:f4:3a:f8:92:
                    48:5b:cf:d0:ea:77:84:1f:4e:5d:90:14:9a:a2:f2:
                    3c:87:ae:07:96:a4:74:99:e2:c3:9e:75:6c:03:8d:
                    73:c1:ac:1e:c6:5e:8e:00:9a:32:de:40:a0:4c:db:
                    23:c0:9a:99:9b:20:95:66:bf:6b:37:df:0d:83:f3:
                    36:32:7e:07:85:13:e5:e8:77:d7:dd:e1:c3:32:81:
                    1b:cc:56:6c:fc:73:f2:95:07:99:51:39:0f:93:9b:
                    fc:28:87:27:64:a3:cf:89:73:ff:3c:14:76:5c:a4:
                    f9:df:27:eb:35:e9:a7:bf:90:de:e3:cc:d1:26:17:
                    14:13:9b:48:06:74:8b:c3:18:e7:96:f8:8a:69:78:
                    6a:ab:34:2b:f3:e4:fe:a1:b9:1d:d1:18:ae:c1:74:
                    a1:7a:59:0b:87:10:af:a0:77:8d:57:59:c8:42:76:
                    5c:45:70:92:f5:0e:fe:cf:03:2b:b6:56:78:61:31:
                    e8:21:35:a5:be:48:fe:0c:09:41:3d:de:45:0c:45:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:2D:7D:6A:D7:2E:84:85:DC:82:69:B9:41:F4:B9:E7:E0:57:1F
            X509v3 Authority Key Identifier:
                keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:c2:4c:1a:2f:37:af:1e:73:f6:f5:ae:b8:9d:c7:fd:69:
         b7:a5:71:39:d1:c8:ed:63:6d:7f:30:ad:28:ca:eb:d8:30:1a:
         57:06:f1:38:b0:2c:de:1c:95:56:8f:f9:b5:62:75:bb:b1:d7:
         a4:d0:c1:04:7b:6c:f9:47:20:5e:b6:27:78:32:0a:b5:89:f6:
         cf:56:8c:ba:b9:91:27:3f:2d:24:c8:f0:d3:cc:6e:48:de:75:
         48:79:32:65:e7:ce:68:d1:2a:b9:e2:f5:b8:c1:ff:26:81:f0:
         b9:37:55:0c:2f:19:d5:e6:cd:ec:57:74:10:77:a5:8b:8e:3c:
         20:f3:ff:e1:db:a7:4d:33:4f:0d:ff:f0:9e:4b:d6:65:62:dc:
         fe:d0:d3:4c:68:b1:da:6a:4c:71:60:2e:99:ed:ea:fd:2f:03:
         55:f3:89:54:ca:d5:35:25:27:ad:e5:66:a3:cb:9b:5c:95:ec:
         0d:4e:35:57:0f:a6:c9:a3:3a:18:89:ef:cf:b8:6f:5f:d5:6e:
         fa:08:32:6c:95:86:71:30:c9:bd:52:4a:c2:06:95:27:ce:7f:
         d4:65:fb:7b:1d:40:92:68:8f:0c:1b:96:aa:a3:72:16:0a:8a:
         ac:90:6d:a5:b5:d7:b0:25:c3:39:1f:7a:78:c8:78:18:41:18:
         74:e5:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:39 2026 by rpki-client