Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
File:                     rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json)
Hash identifier:          l/4BxCTN5NBqS8dpZuvLqc2fL0SSwC2REZMSkbZD9MY=
Subject key identifier:   FE:DE:2B:5A:75:0F:BB:40:1B:97:54:18:70:1F:E3:A9:F5:47:4A:C7
Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B
Certificate issuer:       /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
Manifest number:          45
Signing time:             Thu 19 Feb 2026 06:37:59 +0000
Manifest this update:     Thu 19 Feb 2026 06:37:58 +0000
Manifest next update:     Thu 26 Feb 2026 06:37:58 +0000
Files and hashes:         1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: kL1SbifSXW3pFhmc3OYJknuVWFvF3mM8pwVzpyX+z/0=)
                          2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: GetDT8ar6UQGvcmvjsGOW3aX6ZiD1t+5sWscwddFzJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl
                          rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B
        Validity
            Not Before: Feb 19 06:37:58 2026 GMT
            Not After : Feb 26 06:37:58 2026 GMT
        Subject: CN=6996afc7-20bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:e1:ac:56:b9:ff:5c:19:1f:d9:6f:bb:17:
                    0f:dd:86:b6:7f:8f:45:4f:3b:60:36:dd:6d:e1:a9:
                    fc:b2:e1:b0:37:5a:9d:80:03:b0:67:e3:35:91:82:
                    34:68:a3:85:3f:94:d9:d0:9b:1b:1e:50:e4:39:3c:
                    8d:2c:ff:17:34:a2:fa:07:72:83:81:fd:25:1a:c5:
                    e8:d9:f4:84:5b:39:77:37:6d:9b:b0:07:31:bc:5f:
                    12:82:92:ca:c6:35:ae:e7:0a:61:67:2a:19:c0:c1:
                    06:89:0c:01:95:4e:af:6b:ba:05:51:be:e9:bd:c2:
                    a4:62:ec:d4:f6:a6:0c:53:dc:6e:eb:8e:88:a4:33:
                    75:e6:f6:cd:3b:42:ee:d8:73:e0:e6:5f:87:15:a5:
                    de:7f:6f:f3:bc:bd:32:37:e4:b2:74:c5:91:9f:85:
                    5b:36:46:d9:a1:39:78:23:bd:88:e4:3f:a5:8e:0d:
                    99:60:49:f2:5c:24:eb:c6:09:e0:92:38:f9:02:a4:
                    7a:4a:a3:fc:e5:8a:92:25:5f:c4:9f:79:ec:fc:5a:
                    23:fa:8c:b5:e2:c9:b3:90:31:3f:5f:81:aa:1f:da:
                    da:e5:97:e2:f2:a6:42:8c:9c:23:b3:0e:4c:bb:ee:
                    06:8f:62:84:02:45:07:d0:60:cd:61:e7:03:ce:4a:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:2B:5A:75:0F:BB:40:1B:97:54:18:70:1F:E3:A9:F5:47:4A:C7
            X509v3 Authority Key Identifier:
                keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:db:17:bb:a5:f4:3a:fe:4c:23:38:f7:56:4c:03:a3:bc:40:
         4f:96:2e:cd:de:26:5a:b9:9d:09:eb:c7:fa:5f:4f:db:fd:ec:
         92:db:91:43:c8:8e:18:99:71:1c:29:b0:70:c5:70:d4:83:14:
         ce:2a:a8:5d:d5:b6:d9:3e:ae:51:07:10:56:4c:b8:d4:d7:36:
         d8:85:e3:b6:a1:21:25:08:83:e0:75:cf:4a:72:4e:01:5a:68:
         e2:55:aa:b2:3f:3f:a6:24:2d:54:40:45:da:44:46:ff:76:6c:
         d6:95:56:fa:35:33:5e:aa:fc:95:56:6b:d4:b5:63:f8:ff:88:
         06:4a:e8:11:85:7f:42:62:b8:8c:4a:d2:d3:67:2c:10:73:34:
         8c:73:17:b3:59:14:b8:fd:51:e0:b8:b3:26:7e:e1:ec:10:24:
         3e:b0:31:46:23:9c:fb:16:16:67:b1:09:5e:68:32:da:95:38:
         34:64:56:55:93:59:11:45:d9:20:4e:df:34:fb:63:2c:47:d7:
         74:98:9c:47:91:f3:8c:c0:ca:82:64:9a:0a:19:52:99:90:cc:
         a2:2e:98:28:94:5c:d9:bf:89:bb:a5:b4:fb:7a:05:ce:67:8c:
         4d:53:e3:af:ee:e4:f0:73:5b:3b:24:39:fb:1f:a4:98:3a:fe:
         75:24:7d:0d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB
NzE2M0Y3QjAeFw0yNjAyMTkwNjM3NThaFw0yNjAyMjYwNjM3NThaMBgxFjAUBgNV
BAMMDTY5OTZhZmM3LTIwYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1wOGsVrn/XBkf2W+7Fw/dhrZ/j0VPO2A23W3hqfyy4bA3Wp2AA7Bn4zWRgjRo
o4U/lNnQmxseUOQ5PI0s/xc0ovoHcoOB/SUaxejZ9IRbOXc3bZuwBzG8XxKCksrG
Na7nCmFnKhnAwQaJDAGVTq9rugVRvum9wqRi7NT2pgxT3G7rjoikM3Xm9s07Qu7Y
c+DmX4cVpd5/b/O8vTI35LJ0xZGfhVs2RtmhOXgjvYjkP6WODZlgSfJcJOvGCeCS
OPkCpHpKo/zlipIlX8Sfeez8WiP6jLXiybOQMT9fgaof2trll+LypkKMnCOzDky7
7gaPYoQCRQfQYM1h5wPOSrf9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/t4rWnUP
u0Abl1QYcB/jqfVHSscwHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx
NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq
bEZUOHdGbXBVeWFjV1Azcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALrbF7ul9Dr+TCM491ZMA6O8QE+WLs3eJlq5nQnrx/pfT9v97JLbkUPI
jhiZcRwpsHDFcNSDFM4qqF3Vttk+rlEHEFZMuNTXNtiF47ahISUIg+B1z0pyTgFa
aOJVqrI/P6YkLVRARdpERv92bNaVVvo1M16q/JVWa9S1Y/j/iAZK6BGFf0JiuIxK
0tNnLBBzNIxzF7NZFLj9UeC4syZ+4ewQJD6wMUYjnPsWFmexCV5oMtqVODRkVlWT
WRFF2SBO3zT7YyxH13SYnEeR84zAyoJkmgoZUpmQzKIumCiUXNm/ibultPt6Bc5n
jE1T46/u5PBzWzskOfsfpJg6/nUkfQ0=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:52:37 2026 by rpki-client