Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File:                     IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier:          6kf+tqoBSicqDbthlJiNNWALvBN91Nt6CpkabO2/xWA=
Subject key identifier:   CD:06:88:4C:41:43:74:B5:53:6E:F7:E7:5C:11:32:8E:3B:A9:47:F4
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer:       /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial:       0839
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number:          0831
Signing time:             Wed 18 Feb 2026 20:23:15 +0000
Manifest this update:     Wed 18 Feb 2026 20:23:15 +0000
Manifest next update:     Wed 25 Feb 2026 20:23:15 +0000
Files and hashes:         1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: LUjQvtkNVz8faL1OUmdE2C/TzOhjJw8b6VbXnr2mel8=)
                          2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: oMpLKQUcOC8WqmISS4A1OPHH2UOf6ZaqYA7SnJCtl6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
                          rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
        Validity
            Not Before: Feb 18 20:23:15 2026 GMT
            Not After : Feb 25 20:23:15 2026 GMT
        Subject: CN=69961fb3-9795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:46:5c:6d:bb:2a:4d:5b:77:00:1c:20:4b:
                    2f:4a:9d:d6:ef:4f:e9:eb:2e:83:bf:96:e2:ac:c1:
                    1a:4c:1c:e2:3f:16:da:19:2f:18:f4:7f:cf:3d:10:
                    ee:ae:2d:13:6f:d9:85:a9:11:ea:90:90:97:8f:51:
                    de:3e:fe:27:27:17:15:c2:fe:cc:35:7c:69:2e:b6:
                    6b:ed:0c:06:40:af:a5:e0:8c:eb:a1:b2:42:98:b9:
                    75:e6:01:89:78:2f:68:d0:49:e1:c8:e3:8b:2f:e5:
                    11:79:49:74:5b:2d:b9:7c:19:94:a7:e6:3b:5a:af:
                    12:9b:29:a9:e8:df:4c:1b:8b:58:34:79:0c:50:31:
                    e2:25:2e:b6:aa:c7:52:c2:86:25:2a:7b:66:a6:96:
                    25:b4:fb:38:c6:32:5f:f4:f7:fe:fa:fc:0e:70:6c:
                    ce:13:1c:89:6f:c1:b7:73:e5:67:d5:c4:19:a7:02:
                    d7:1c:ab:1e:92:be:d0:e1:cd:41:6b:e9:f8:58:8d:
                    48:69:ad:77:66:39:ac:dd:2c:d3:ab:32:a8:fe:07:
                    81:97:1a:13:46:88:82:ce:3c:7c:35:22:75:9c:aa:
                    3f:c9:38:c4:da:5e:db:96:2f:c1:9f:f3:96:7c:dd:
                    e2:06:05:85:21:ff:61:31:36:59:91:28:61:a9:c5:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:88:4C:41:43:74:B5:53:6E:F7:E7:5C:11:32:8E:3B:A9:47:F4
            X509v3 Authority Key Identifier:
                keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:f2:63:0c:9a:a0:86:f4:9d:0a:b4:af:24:72:2a:dc:43:
         df:25:f2:70:1f:35:ac:90:1f:f7:56:cd:d2:37:19:e9:5d:92:
         b4:56:88:bf:e5:0d:78:fc:b8:ce:c5:37:4a:61:2a:48:57:94:
         f3:82:eb:28:bc:d5:15:85:a4:28:2a:22:55:b6:5c:17:9d:d3:
         45:73:88:0a:b5:aa:28:04:e8:42:c2:3b:08:c0:06:fe:3a:4f:
         4c:89:6a:f1:eb:70:01:14:87:26:de:8b:e9:10:e7:e4:74:ed:
         9d:b6:82:e0:23:04:c7:42:2c:a7:74:c5:4e:77:d4:57:5e:fa:
         ad:32:4c:d9:90:10:d9:09:61:3a:a6:da:f0:e6:6e:3a:0c:d0:
         0e:48:1e:41:eb:a8:b0:ce:e7:28:ff:ac:27:17:c7:3f:53:a3:
         92:b7:50:3b:20:44:17:19:cf:04:ca:0a:d5:fc:98:84:cb:3c:
         2b:ce:7e:b2:4c:53:7e:83:82:f3:af:1e:7b:af:0a:4f:6c:24:
         67:93:3b:c9:1d:8b:8e:71:e2:a2:9c:49:f1:2a:13:5a:14:a0:
         ca:e0:a4:a1:63:9c:06:31:22:aa:5d:63:bc:a9:e0:73:82:91:
         5e:68:04:a1:1f:50:50:4d:9c:80:6e:41:46:88:42:94:29:49:
         bf:0e:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:04:13 2026 by rpki-client