Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
File:                     IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft (raw, json)
Hash identifier:          1wGL33hsTelYraYLBVxsTS82gHsRKrJlt5h3O4bZkAg=
Subject key identifier:   72:17:DA:AD:A1:09:9A:2A:42:16:D6:E3:68:D2:76:80:A7:DD:16:4D
Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D
Certificate issuer:       /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
Certificate serial:       048F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
Manifest number:          0483
Signing time:             Wed 18 Feb 2026 23:19:12 +0000
Manifest this update:     Wed 18 Feb 2026 23:19:12 +0000
Manifest next update:     Wed 25 Feb 2026 23:19:12 +0000
Files and hashes:         1: IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl (hash: YN6Q7dq7tbG8N5Ft/x9ZaFhPFg9Ifn2THkyWwnJWTgE=)
                          2: E986DDEC979911ECB3B7CE39C4F9AE02.roa (hash: ciNIImuAbj1AO0K4GihG7jlhzLEKvAURaWl26eH889E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl
                          rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152DE4, serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
        Validity
            Not Before: Feb 18 23:19:12 2026 GMT
            Not After : Feb 25 23:19:12 2026 GMT
        Subject: CN=699648f0-3e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:6c:ac:4f:ec:03:d7:4f:82:3b:fa:17:55:
                    68:4c:a8:dd:d8:37:8a:16:e7:18:55:06:99:81:55:
                    76:07:14:52:6e:00:bd:80:60:5a:5f:4d:8c:1a:cb:
                    84:e8:a1:61:e1:1d:75:d3:17:a5:c3:e4:4e:51:26:
                    0a:10:00:d7:db:8c:8e:69:a4:aa:46:8b:e9:a9:e0:
                    25:d6:ba:10:3a:25:a3:d2:bb:94:25:5b:0d:01:7a:
                    11:fc:98:2e:2d:60:ad:65:4f:77:3f:1c:7d:c6:67:
                    45:7e:dc:68:1e:4d:50:22:f3:a0:e2:31:a5:54:73:
                    3b:e8:b7:3c:1b:a5:49:26:8c:ec:3d:26:c0:50:6c:
                    71:97:27:4f:be:b6:9e:25:dd:fe:b0:07:dc:b4:61:
                    db:b9:59:50:90:d0:ee:28:1b:f9:34:ce:ea:f4:0a:
                    ef:1c:c2:15:80:58:6f:5f:90:49:7e:c2:88:11:c3:
                    30:ee:e3:73:88:78:c1:ba:12:2d:8c:62:fc:11:2c:
                    01:d0:38:c3:8e:19:33:a0:fc:5a:cf:20:b2:df:d5:
                    76:c0:90:d1:e8:3d:54:d9:00:03:72:16:d5:2c:d0:
                    ed:de:3e:c2:95:65:03:3c:73:90:47:15:01:75:51:
                    72:7c:af:49:4b:44:34:c9:35:f9:ef:bf:9f:14:11:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:DA:AD:A1:09:9A:2A:42:16:D6:E3:68:D2:76:80:A7:DD:16:4D
            X509v3 Authority Key Identifier:
                keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:1a:58:5f:0a:4c:5e:81:2b:ec:90:95:d6:44:bf:89:35:
         43:9f:c5:04:bd:72:7d:30:61:77:36:e9:71:7f:05:5e:d1:97:
         70:2e:5f:57:34:99:1c:2b:ac:94:af:2d:f3:fc:cc:e9:95:6f:
         1e:1d:58:d6:c3:ed:84:99:25:1e:60:2d:7a:d0:a8:e0:3b:36:
         a2:be:9d:0a:4f:ea:4d:1a:19:b1:55:be:b6:1f:3c:eb:98:72:
         cc:ea:6c:4c:17:b9:0c:6d:30:09:9b:34:c1:70:2c:01:c9:48:
         7e:c6:e1:b3:02:4a:f1:a8:ce:8f:dc:80:f0:97:14:ca:18:bc:
         f1:0d:68:a0:d3:1b:82:e7:a3:fd:20:9f:e7:37:92:e1:ee:b6:
         13:a2:7e:88:03:31:8a:25:9a:6a:95:76:6e:e9:24:82:0b:8e:
         7d:98:38:ea:d4:ca:ad:0b:6c:e4:7b:d7:3a:f9:3b:9f:27:34:
         bb:f1:11:59:75:12:d2:36:fc:0d:c0:77:a8:75:9c:fb:13:cd:
         66:28:ea:2a:24:f4:c3:3a:f3:f8:e6:f2:6f:4c:9c:b2:76:00:
         1c:28:67:f1:2a:ea:62:eb:30:e2:0b:03:87:4c:48:13:eb:40:
         e9:69:60:79:87:e3:f5:61:f4:ca:4c:d2:9f:d9:57:39:33:a0:
         4c:4a:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:26:58 2026 by rpki-client