Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
File:                     CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json)
Hash identifier:          ceTgGXlGNxqs3XnXg0a4dGwxlNIpDaogXanmUJlb3hk=
Subject key identifier:   00:5A:BB:1F:E8:87:D3:77:51:88:BD:F4:C7:5E:93:08:8A:EF:CC:44
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Certificate issuer:       /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial:       082A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
Manifest number:          1525
Signing time:             Wed 18 Feb 2026 17:44:51 +0000
Manifest this update:     Wed 18 Feb 2026 17:44:50 +0000
Manifest next update:     Wed 25 Feb 2026 17:44:50 +0000
Files and hashes:         1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: GmSx5N61THPynYzKlnfphqwVWvovcX8O9yBKfw+r2vk=)
                          2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: B2tDIxeYNCo5gTNbHXofF/quSOaekq5ljkbk6cQhp5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
        Validity
            Not Before: Feb 18 17:44:50 2026 GMT
            Not After : Feb 25 17:44:50 2026 GMT
        Subject: CN=6995fa92-c2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:02:42:14:84:18:b7:eb:16:06:49:10:2e:
                    86:53:43:12:d4:1e:6e:b1:59:ba:43:ff:59:7e:91:
                    29:de:13:00:79:bf:2a:aa:a6:9b:c3:60:cf:97:f9:
                    64:17:f1:ce:1c:ff:f4:14:2a:ec:65:95:c5:e0:14:
                    2f:6a:1e:12:5e:3b:33:f1:92:87:aa:88:03:d5:f1:
                    e3:26:e2:c3:50:28:ad:ed:31:c3:a8:48:da:b4:55:
                    a4:5e:dc:b0:1c:64:9a:55:bc:39:ec:da:8b:ff:1a:
                    3f:92:4a:7c:a0:46:42:98:a7:94:e9:b7:ce:7c:29:
                    b5:da:5a:45:f5:5f:45:9e:d2:ea:d2:4b:b5:cf:76:
                    72:73:ff:64:bd:b6:b4:77:92:a3:f7:93:66:1f:51:
                    0e:96:79:71:b7:c5:d9:be:6f:dd:66:cb:a2:ba:20:
                    91:1b:08:d5:a5:32:bc:fc:a1:0a:ae:3a:17:a8:4c:
                    dd:0d:7d:9a:f1:3b:7d:67:d0:36:e8:6f:ea:fa:8e:
                    15:ea:21:cb:21:8b:3e:51:97:d8:d7:22:41:d9:d8:
                    df:5a:c8:d6:75:71:a8:b6:93:8f:d9:26:27:12:0e:
                    01:b1:64:fd:76:27:0f:b3:21:1a:ab:b7:e3:e7:bc:
                    aa:14:a4:c3:3a:9d:47:3e:2c:39:3e:e6:a1:96:96:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:BB:1F:E8:87:D3:77:51:88:BD:F4:C7:5E:93:08:8A:EF:CC:44
            X509v3 Authority Key Identifier:
                keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:05:5d:b8:55:6d:a2:2b:1d:8a:6d:48:43:12:06:38:9a:bb:
         a8:a8:a0:0e:39:11:70:42:ba:d7:30:05:fd:74:a5:c1:4f:e0:
         e7:28:2e:e9:f3:4d:9a:0e:27:e5:c4:fa:61:49:cd:9d:99:f5:
         3f:f6:a5:14:3a:33:5b:ee:47:69:1b:fe:3c:30:1b:cc:67:70:
         a9:0d:46:a9:f7:fd:6b:06:41:d1:f0:98:73:7e:10:96:3e:5d:
         d5:a8:70:1d:a5:76:0a:20:1c:67:74:10:70:9d:c4:26:68:5b:
         50:9c:26:a4:5f:8d:5f:14:99:1d:77:d6:4f:ce:e1:6d:a1:d8:
         15:56:47:5a:c9:e5:b3:28:8c:34:9c:21:42:c5:a9:b2:d0:ba:
         3c:19:e2:39:57:8f:16:92:de:c5:7b:89:a8:d9:15:3b:c8:57:
         75:f9:a0:77:4c:a7:e4:31:01:02:fd:56:2d:39:32:df:ec:c2:
         ff:a2:4b:55:32:d6:49:9e:96:b9:fc:50:a1:f7:85:58:f0:99:
         de:b3:53:06:0a:e0:11:a6:60:b8:ca:84:a0:e1:26:2d:83:2a:
         4b:9a:56:2b:25:e1:77:2e:44:b8:be:ee:44:30:50:0d:51:e1:
         0b:f6:f7:e4:e6:df:70:02:15:b0:48:dd:b8:52:9c:91:5e:9e:
         d4:08:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:00 2026 by rpki-client