Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
File:                     ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json)
Hash identifier:          4QprW3VbIjDajFuR/5avC567GbHcb2g946JR8/u198c=
Subject key identifier:   4E:5A:37:04:2D:A2:59:D8:4F:18:F1:FD:F2:F3:BA:7D:6D:9D:54:76
Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Certificate issuer:       /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
Manifest number:          01BA
Signing time:             Thu 19 Feb 2026 02:29:42 +0000
Manifest this update:     Thu 19 Feb 2026 02:29:41 +0000
Manifest next update:     Thu 26 Feb 2026 02:29:41 +0000
Files and hashes:         1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: YzQRGrHi756HiCFJvWDAXLLk0ZZSppCTWX+Z63mLrNE=)
                          2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: OgtSGJ5OXdScPeyQQLIa+zffj6S5x6FMffLKFbYg9qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
                          rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
        Validity
            Not Before: Feb 19 02:29:41 2026 GMT
            Not After : Feb 26 02:29:41 2026 GMT
        Subject: CN=69967596-c0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:69:de:da:10:15:b5:45:64:4c:b9:85:f1:
                    c7:48:4a:06:f2:9a:00:0f:6e:cd:f7:cb:ab:7b:44:
                    b9:06:08:af:04:c4:5c:8f:8e:03:e7:f5:a2:89:e5:
                    b7:61:4d:b9:d8:42:fc:2f:76:71:81:bb:08:b5:fc:
                    eb:c7:f1:38:e2:c9:ad:04:17:1e:83:4d:63:17:39:
                    9c:da:5f:6e:0b:4a:87:4c:77:f9:77:ed:7b:0b:07:
                    5c:20:ac:59:ad:b3:43:20:85:d3:8e:ba:e5:48:94:
                    e5:bd:3d:bd:66:6b:fb:39:61:56:4e:3f:ff:52:01:
                    49:b7:f8:6d:d6:ee:24:3f:7f:80:29:5b:64:6a:6e:
                    cb:54:82:e5:32:a8:6a:0a:97:01:68:e7:d2:e1:2b:
                    b7:df:d7:69:85:64:60:e8:3b:9f:16:61:75:ce:89:
                    58:b0:ae:37:b7:27:a1:e2:f4:e2:7a:04:90:ff:b9:
                    18:2d:5f:fb:65:14:55:fd:63:c9:e6:fe:79:36:3d:
                    35:76:cc:e9:2e:66:b4:6a:45:d8:79:d4:63:c6:cf:
                    cf:46:87:c2:6f:cf:68:73:b6:51:9a:9e:a4:56:92:
                    b4:2c:1f:bb:fc:13:a3:60:6a:ac:f7:ec:69:8f:50:
                    61:95:07:96:3f:32:9f:bc:23:d1:18:ee:cf:2d:dc:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:37:04:2D:A2:59:D8:4F:18:F1:FD:F2:F3:BA:7D:6D:9D:54:76
            X509v3 Authority Key Identifier:
                keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:b5:b3:5a:9b:39:e3:67:7b:36:89:34:7c:f7:56:00:1e:
         09:37:f7:20:34:72:d4:27:61:f9:1d:47:c2:75:de:f6:03:6f:
         91:be:cc:8a:23:c5:75:fd:a2:d5:b0:ee:a5:92:f1:69:45:ca:
         9d:37:5f:3d:5a:62:4b:be:86:07:80:9d:8e:6f:f2:ea:b7:2d:
         66:43:c4:ea:b7:7d:c0:41:6c:73:39:e2:4f:65:1b:1e:b4:b6:
         5f:76:ae:b0:e4:a1:59:7e:81:4a:a0:c9:46:53:74:8b:dd:b4:
         61:66:00:8b:57:77:9f:28:63:bb:8f:30:f8:26:b0:82:47:70:
         37:bf:e6:99:d4:b6:26:4e:36:b7:a5:db:ce:df:fb:2c:a8:46:
         a5:61:19:88:4e:47:64:67:a5:19:d5:39:f8:8a:8d:25:25:fe:
         17:3b:b8:6e:b3:b4:0e:ba:de:47:7f:3b:f9:a7:4b:1f:95:7c:
         d8:ba:38:07:50:d3:6f:32:8e:e0:b4:74:a6:61:b5:5f:15:5c:
         58:2c:1c:40:1f:ff:5a:59:b3:e5:f8:c5:20:59:a7:1e:8a:26:
         0a:98:37:aa:bf:b8:71:b0:43:1d:47:ac:97:17:96:b3:a6:e3:
         6f:6f:8a:43:60:e1:d9:53:c7:7b:a4:d0:af:0e:07:3d:dc:72:
         d4:78:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:46 2026 by rpki-client