Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
File:                     ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json)
Hash identifier:          sejbPTra/sMzIaBeAS2hWVyO5dQXgCU0zlYDNmNWdGg=
Subject key identifier:   2C:32:8E:65:7A:41:D3:7D:7F:E3:69:0C:3A:9F:B2:23:8B:59:8F:8E
Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01
Certificate issuer:       /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
Manifest number:          0236
Signing time:             Thu 19 Feb 2026 01:19:42 +0000
Manifest this update:     Thu 19 Feb 2026 01:19:42 +0000
Manifest next update:     Thu 26 Feb 2026 01:19:42 +0000
Files and hashes:         1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: GSeuKIKY6Cx4RVE04s7x73/DoaHuiwvr6VBakOn0vTc=)
                          2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: vOOxk/wACi5vye03Jp84UhlJ9c1XFIWjF9wuLbozYvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl
                          rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001
        Validity
            Not Before: Feb 19 01:19:42 2026 GMT
            Not After : Feb 26 01:19:42 2026 GMT
        Subject: CN=6996652e-a56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:3c:43:86:c9:fc:92:bf:57:55:8e:a2:20:
                    47:fa:74:9a:55:11:b7:34:a7:79:93:22:f6:14:af:
                    8c:3e:8f:38:67:54:f7:ad:77:a3:df:b8:a7:fa:ac:
                    cb:7e:dd:76:5f:f4:8d:27:97:c0:b9:22:32:7d:eb:
                    d4:42:50:88:3b:88:cb:ce:48:fc:b9:1e:60:76:81:
                    47:81:ab:df:d5:1b:b6:c4:d4:6b:f0:b2:52:c2:11:
                    81:37:b0:2c:b3:12:26:4b:5c:aa:d9:17:c9:08:6b:
                    d4:cb:48:88:5b:1c:21:7d:a7:73:0c:8b:ea:50:4b:
                    19:79:85:cc:ad:79:95:f6:eb:05:53:e4:13:23:10:
                    39:5d:ee:76:26:b0:e6:28:11:44:8d:60:00:af:1f:
                    64:0d:50:76:e2:1b:0f:0c:db:f3:c7:ac:12:c8:7d:
                    57:63:a3:d9:01:8b:45:47:9a:6f:0b:11:7e:50:1a:
                    ff:2d:a9:cc:45:34:17:41:46:6e:5e:03:5f:ac:99:
                    84:ce:f2:ef:77:95:b0:5c:f3:3c:9a:f6:32:4c:2f:
                    8c:54:2e:65:55:ef:1b:6c:3e:70:4a:54:f8:8a:a6:
                    4a:81:2e:1f:70:02:27:1e:ad:64:91:bd:ae:6e:1b:
                    94:b6:d5:a0:3b:ab:3c:8c:e6:da:67:f2:52:8e:2c:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:32:8E:65:7A:41:D3:7D:7F:E3:69:0C:3A:9F:B2:23:8B:59:8F:8E
            X509v3 Authority Key Identifier:
                keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:6d:c0:f0:ae:4e:65:8c:38:aa:4b:44:38:ed:8a:72:f4:
         de:7e:b5:1e:bf:1a:2f:39:f2:84:d9:84:e2:7f:5c:15:aa:e1:
         eb:b0:aa:fd:6f:6e:88:35:26:85:89:66:ce:7c:66:49:c6:6d:
         f0:d2:33:65:6b:d0:03:ac:f9:28:6f:b6:01:2e:88:60:08:bc:
         3a:aa:ed:93:ed:48:35:ef:4c:76:29:0a:5b:a8:f0:71:46:7d:
         bb:c0:4e:a9:85:e4:32:33:02:25:a9:01:b0:b0:e1:97:dc:51:
         dd:dd:f8:d3:6e:c7:3b:b9:88:8b:a9:5f:12:83:e6:be:be:4a:
         5d:4f:7c:a0:af:55:4c:be:57:79:cc:17:9a:50:cb:46:d2:58:
         f9:5e:d6:f7:2a:5f:7e:64:b2:3a:c8:d6:f9:f0:88:f3:a5:cd:
         34:47:68:14:b2:aa:ad:ed:45:f8:c9:c1:2c:7e:53:e7:b3:54:
         80:76:aa:31:49:d0:2e:1d:3e:7d:2b:e3:20:40:90:4c:5e:17:
         b7:32:ea:ee:6b:a5:b6:9d:b2:3f:d0:39:4c:16:8c:f6:f3:0f:
         15:ac:17:9a:73:5c:33:0c:05:49:bd:7b:e8:3b:ec:2c:97:59:
         10:f1:8d:f7:a6:e4:fd:15:e3:08:f2:2e:88:a1:73:d0:aa:22:
         48:9d:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:48 2026 by rpki-client