Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
File:                     I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json)
Hash identifier:          lSrGjTV6iHALRgveo+r+44TldXqh81Ma8cKzB1H9GcA=
Subject key identifier:   3A:24:49:49:A7:FF:0E:FF:EF:AA:57:C5:59:29:BE:03:42:46:B9:CD
Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2
Certificate issuer:       /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
Manifest number:          064A
Signing time:             Wed 18 Feb 2026 22:02:58 +0000
Manifest this update:     Wed 18 Feb 2026 22:02:57 +0000
Manifest next update:     Wed 25 Feb 2026 22:02:57 +0000
Files and hashes:         1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: HzuXnvgyg4IHlJ02mfHcK9CBTIED0h2U7Px7CPDLx0o=)
                          2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl
                          rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2
        Validity
            Not Before: Feb 18 22:02:57 2026 GMT
            Not After : Feb 25 22:02:57 2026 GMT
        Subject: CN=69963712-0cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:bb:b7:75:23:28:03:c2:70:84:b5:0d:59:
                    9e:87:68:5c:9c:16:88:9c:0c:ce:8a:32:55:82:3a:
                    13:32:17:f0:14:ab:61:f6:8b:11:79:6a:0b:8e:ec:
                    0d:f0:02:a5:18:0e:df:86:d5:88:25:bc:2d:03:34:
                    00:4e:73:86:4e:49:df:f6:0d:27:3d:ac:cb:3b:df:
                    61:57:89:ab:29:82:40:cb:0d:ba:43:fa:dc:d2:70:
                    a0:81:d7:b2:fb:87:09:a4:12:a3:a4:61:5a:5b:ad:
                    8f:68:df:82:20:4f:42:c3:65:83:9a:6d:0d:ef:82:
                    0a:3b:41:fc:dc:3d:af:47:8b:2a:90:92:ba:35:81:
                    51:9c:08:31:71:6e:9b:cb:cd:6d:db:f5:9e:8f:bc:
                    8b:ef:32:d8:5b:d9:8c:75:89:31:18:76:c9:c0:e9:
                    a9:76:4a:95:e8:4e:76:4d:85:00:8b:e9:30:e3:5d:
                    1e:73:6a:f1:3a:31:92:b7:0c:5b:0a:37:47:97:e3:
                    59:14:63:d7:c1:1e:19:0d:a9:52:27:4b:c7:eb:a5:
                    10:45:1e:d2:67:22:a7:c9:4b:2c:b9:0e:ac:56:8c:
                    bd:9e:d1:63:14:08:b0:23:1f:05:41:37:b9:83:4f:
                    db:87:6d:5a:75:10:92:fe:b9:10:c1:12:f1:69:64:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:49:49:A7:FF:0E:FF:EF:AA:57:C5:59:29:BE:03:42:46:B9:CD
            X509v3 Authority Key Identifier:
                keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:e2:87:1b:ec:12:a6:2e:6c:41:d3:58:d9:83:a2:52:a3:
         1e:cb:4d:fd:3f:6c:0b:3c:67:75:0e:e0:87:39:5d:da:dd:a3:
         6a:59:6f:dc:34:bf:6e:f8:1c:ed:94:76:78:8f:c0:cc:96:9a:
         fc:c8:f5:9d:c4:64:00:61:c6:24:d1:aa:b9:bc:d8:d2:69:03:
         c9:e0:f9:57:ca:4d:49:82:57:eb:61:2e:7b:85:41:e7:2a:d1:
         70:f5:7c:9c:9b:a9:80:ba:94:d2:e1:28:56:af:f9:b6:a0:5e:
         42:42:32:ef:3e:fb:ce:cd:02:1c:9f:a3:b5:ff:4d:79:dc:a0:
         13:ae:c8:82:ba:fa:7d:29:2a:70:90:f3:aa:e1:4e:e7:82:41:
         a6:c0:ca:34:0f:1f:8b:f5:34:99:75:34:fe:ab:bc:5e:63:5b:
         05:0c:05:cb:64:76:c8:0a:b8:d1:df:1b:50:a0:db:90:73:a0:
         bd:3a:f0:7d:bb:b9:79:20:ac:3e:15:37:53:2b:3b:25:f7:5c:
         ff:ad:80:43:4e:e7:eb:9d:36:a7:7c:d6:a5:a2:42:5d:91:d7:
         75:90:47:59:91:f3:03:af:ee:8e:26:0a:9e:1e:99:f4:e6:35:
         9b:3e:24:cb:8f:ef:96:3e:1e:e7:e9:2c:a0:57:10:08:f4:ef:
         44:ec:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:38:05 2026 by rpki-client