Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
File:                     kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json)
Hash identifier:          6ciKBgbBvZBaY2sLWFzR6QTU6hHGeCpb/guz6KUdVPg=
Subject key identifier:   6E:83:58:DB:61:A4:04:14:98:29:2F:F1:59:63:8D:B6:26:56:37:91
Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
Certificate issuer:       /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Certificate serial:       0C92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
Manifest number:          0C83
Signing time:             Wed 18 Feb 2026 18:13:38 +0000
Manifest this update:     Wed 18 Feb 2026 18:13:38 +0000
Manifest next update:     Wed 25 Feb 2026 18:13:38 +0000
Files and hashes:         1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: nk8fTWn+xVulaO5OjTGb4d1nVIotRP6a+0X0E4rNrzk=)
                          2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: ckq5cjCEQ/2WL7JkGpSyoM0Cdw/OAtqMQAwrig1lc1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl
                          rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
        Validity
            Not Before: Feb 18 18:13:38 2026 GMT
            Not After : Feb 25 18:13:38 2026 GMT
        Subject: CN=69960152-a12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:36:36:1d:34:69:02:27:97:ec:0d:81:32:
                    5e:fd:9f:67:19:ec:c8:31:79:71:c3:92:47:c4:c2:
                    af:03:eb:39:27:4f:c0:86:8f:ec:06:43:13:91:59:
                    c1:87:75:c2:5b:2c:d7:0f:9d:78:f3:8a:f4:30:1e:
                    13:e6:b9:c8:20:f1:d3:05:85:05:40:a6:3a:2d:84:
                    52:66:ed:c6:ed:03:b2:23:40:36:22:0c:22:f4:1e:
                    6c:41:06:17:dc:7b:0e:14:36:1f:8e:3a:a0:59:47:
                    5d:7a:e6:ca:83:39:bc:25:fa:ef:2f:e2:31:29:33:
                    91:ad:d4:84:66:b2:de:68:c3:9b:37:4a:47:6c:22:
                    22:1b:83:1b:bc:f9:fb:ab:63:da:fc:00:5d:df:ef:
                    4e:06:8b:18:73:f8:b1:9e:49:50:2f:ad:d0:b1:1a:
                    6c:b6:fa:ee:8f:5c:e2:c3:97:cd:27:f3:47:3e:b1:
                    ff:0a:07:9f:1c:d5:9a:53:e3:19:62:1b:f1:4f:22:
                    1e:de:9b:fc:75:25:d9:07:d6:68:54:55:d0:fc:a1:
                    dd:cc:76:a9:ef:4d:47:ea:c9:ac:6d:e2:85:ec:77:
                    36:6f:72:50:c9:3f:69:11:37:01:d6:73:be:c6:b6:
                    dd:cb:5a:d7:dd:c0:b4:b9:01:65:d9:61:f2:5b:a8:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:58:DB:61:A4:04:14:98:29:2F:F1:59:63:8D:B6:26:56:37:91
            X509v3 Authority Key Identifier:
                keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:29:88:72:c4:ff:d4:bd:21:0a:bf:51:fe:97:52:6c:67:
         86:6c:08:cb:5a:be:75:3c:2b:15:69:e3:1b:2f:83:13:bd:02:
         c6:24:3f:63:37:a7:96:e4:0d:36:59:9f:83:2e:f1:5f:86:22:
         43:0a:27:55:87:1e:53:53:d7:53:94:3e:96:85:f0:5d:06:a4:
         cc:3d:50:db:f6:0c:0e:3e:41:26:8a:f0:8d:b8:d0:a4:ce:5f:
         43:df:1a:44:46:3b:75:01:db:2d:b2:77:49:1c:f3:63:14:31:
         f1:58:03:43:6e:86:a3:11:13:91:17:f0:30:dc:82:d2:d1:8f:
         5b:7f:bb:29:10:57:79:bf:f6:66:cc:77:74:58:db:dc:41:54:
         03:ae:55:67:2c:86:18:bd:5c:d6:b1:db:7b:15:d0:d7:84:dc:
         58:5b:e1:e2:f3:c6:ef:67:62:ed:c8:95:75:54:14:bd:4b:ec:
         7a:bb:08:64:58:e9:04:d4:80:9a:76:43:3d:7b:0f:5d:d2:13:
         cc:7a:44:f3:b6:7c:7a:d7:59:f2:77:95:fa:fb:b9:3c:bd:03:
         ce:6d:12:89:53:70:ba:6c:d8:2f:97:d6:08:f2:80:db:bf:f9:
         35:7c:d1:96:1f:00:41:f7:25:2f:96:f0:89:b4:39:a0:e6:3c:
         cd:a8:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:04 2026 by rpki-client