Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File:                     thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier:          DiLOyPB7n0DqaWTnWLuRCFpfCxjWSBtYDLR5dADLxTw=
Subject key identifier:   CE:14:94:8F:47:D9:0B:9C:1B:32:B7:D8:7F:71:50:0C:E5:1E:3F:F2
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer:       /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial:       0426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number:          0421
Signing time:             Wed 18 Feb 2026 23:35:40 +0000
Manifest this update:     Wed 18 Feb 2026 23:35:39 +0000
Manifest next update:     Wed 25 Feb 2026 23:35:39 +0000
Files and hashes:         1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: urTkfXszqL9yMXCDt8C+WmRwf1zVwhsIjz5KivxZQ+8=)
                          2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: p2rd5X9PRaHj3dg5SJAK0M8GBgiGK7ul3HPfe5PMkz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
                          rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
        Validity
            Not Before: Feb 18 23:35:39 2026 GMT
            Not After : Feb 25 23:35:39 2026 GMT
        Subject: CN=69964ccc-9de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:9e:4d:06:f6:9f:3a:28:99:35:f7:c4:e3:
                    72:89:3e:5d:8d:41:1a:f3:be:4c:d9:ca:30:45:67:
                    78:45:c6:06:54:48:a6:eb:df:6e:93:16:f9:9c:e6:
                    2e:2b:cf:80:ab:af:1a:77:0b:68:8c:8c:d7:77:ea:
                    fe:6d:32:47:56:1a:ae:87:0d:ee:51:da:9e:27:9d:
                    fd:5a:a0:70:31:e0:48:6d:41:11:02:6e:5c:2a:99:
                    45:ea:22:36:7c:01:a8:ff:9f:0e:10:3a:22:ee:77:
                    8d:40:e0:00:48:28:52:c0:14:a1:de:2d:75:ae:0c:
                    1e:66:dd:e1:ea:08:8c:55:30:77:77:57:0b:cb:c6:
                    21:25:8b:bc:28:a1:46:f9:39:ee:d2:63:d7:17:8f:
                    88:1a:11:72:6a:32:dc:a3:b0:e8:3c:e2:99:6e:f3:
                    60:7f:45:dd:43:48:e6:7c:f8:86:bc:4d:55:1d:5f:
                    33:27:f6:f8:02:5e:a4:a8:02:64:e9:76:73:b1:c6:
                    d2:28:34:3c:f0:38:bf:95:cc:43:62:c7:43:39:9a:
                    59:7f:60:bf:1e:10:ae:76:8f:7b:e3:e5:08:54:2f:
                    7b:d8:13:d9:18:a0:7b:87:c9:e8:dd:2e:d9:b7:d1:
                    87:a1:49:be:08:75:f6:d4:99:23:73:f5:53:a6:f3:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:94:8F:47:D9:0B:9C:1B:32:B7:D8:7F:71:50:0C:E5:1E:3F:F2
            X509v3 Authority Key Identifier:
                keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:90:7d:bd:1f:08:6d:35:d1:ca:d6:20:24:e5:ce:1e:0f:59:
         88:21:45:46:c4:df:ba:d8:a9:a0:79:29:d0:87:c4:05:de:57:
         62:ca:ab:1f:78:ad:2c:e4:af:a5:24:df:5b:2c:85:fe:aa:49:
         bf:67:db:66:06:f4:22:9b:48:ba:7a:5f:34:73:6a:9a:8c:1f:
         5c:15:98:a6:61:be:ed:21:7b:66:a4:b8:a9:96:a1:e4:ff:99:
         20:fd:5e:8b:45:b6:cf:73:b3:d0:c0:42:25:e1:1c:dd:58:7e:
         d6:d7:01:27:61:a0:a1:bc:af:e5:41:19:0b:07:6c:e3:83:0b:
         49:2a:f1:9c:d3:ab:62:fc:5e:ae:19:61:9f:89:02:8e:17:48:
         da:25:f2:83:94:d0:4e:e3:4c:40:bc:0b:e7:6d:8a:c3:50:02:
         f0:59:7d:67:37:56:2e:cb:24:12:16:af:16:f4:3f:6e:0e:77:
         d0:44:38:53:35:e3:9e:57:50:de:64:52:e4:03:71:19:bf:07:
         7e:90:83:58:b6:ef:3e:7a:a3:b5:2d:bd:70:d4:c6:e9:e8:64:
         b1:7e:6f:53:07:ab:29:48:fc:dc:35:ef:e8:56:e7:5d:9e:cc:
         c9:ad:e1:b9:0c:0e:ae:cb:4c:49:af:ab:da:58:f7:57:24:49:
         32:a9:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:39:23 2026 by rpki-client