Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
File:                     d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json)
Hash identifier:          DMKSt329iCjYVTsms2gZfYSaW4OC8ok1jyBASnRy2U0=
Subject key identifier:   8A:CC:F8:36:AC:DE:37:3C:6B:6C:DD:86:07:94:5E:61:79:9A:8D:F3
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Certificate issuer:       /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial:       0547
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
Manifest number:          0539
Signing time:             Wed 18 Feb 2026 22:47:54 +0000
Manifest this update:     Wed 18 Feb 2026 22:47:53 +0000
Manifest next update:     Wed 25 Feb 2026 22:47:53 +0000
Files and hashes:         1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: v9XmceYG5PE4gvKl0De6RoPQS+UCRFkWZ4PlslkbzOM=)
                          2: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: qFVJr2n2NykDjsNkjh3gL0I4ElRrTaR+KqOIhATefiY=)
                          3: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: 9WThl3Ll0sjbhCIKX3FXdpzp7nW9BOJ33snoZ0J6eKg=)
                          4: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: 9H79gXHSwUdpcvM5+oXzZJV/1PlUxOkSuGSAKDEy/aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
        Validity
            Not Before: Feb 18 22:47:53 2026 GMT
            Not After : Feb 25 22:47:53 2026 GMT
        Subject: CN=6996419a-3ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:d0:ef:ff:f5:12:a0:54:e6:03:1d:67:83:
                    a6:16:01:76:a3:d9:e9:17:de:78:ae:86:d0:47:b4:
                    60:23:88:41:a4:2f:17:6b:b5:b2:48:2e:98:a9:be:
                    ad:3b:bb:6d:5d:27:69:a5:80:33:23:1a:fc:6c:b5:
                    aa:7c:cf:6e:4b:1c:cf:19:4e:52:27:90:bc:36:53:
                    61:3a:1e:38:e7:cd:40:88:ab:78:89:4a:d0:7c:b9:
                    e8:f3:ee:cb:60:e1:09:6c:a5:18:90:1a:35:94:04:
                    f0:b4:16:42:66:e2:ba:5d:bc:70:e8:8c:7b:fc:58:
                    f0:ae:6b:91:4d:d1:d1:62:03:db:22:5a:b0:cd:6e:
                    5f:10:3c:85:e8:f1:f3:3c:bc:7f:90:7e:82:c2:26:
                    2c:50:b0:57:50:48:51:65:07:68:5c:2d:a1:f0:50:
                    d3:5c:c4:a5:d9:95:bf:cb:e6:c7:66:b4:11:49:0a:
                    73:c2:a5:96:8c:b8:f1:b7:3c:05:a5:35:57:0e:c5:
                    8b:ae:bd:0b:a9:24:36:8b:e9:a1:d9:4c:11:3e:4f:
                    f7:5d:0a:b6:66:44:b9:ca:01:63:55:b2:00:d0:a6:
                    e9:f8:e9:9d:8f:43:91:d1:9a:b2:33:12:7e:05:4b:
                    4b:2f:56:b0:07:a2:c4:25:93:4f:cc:d2:ac:ca:7e:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CC:F8:36:AC:DE:37:3C:6B:6C:DD:86:07:94:5E:61:79:9A:8D:F3
            X509v3 Authority Key Identifier:
                keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:e6:97:04:f1:cd:3f:7b:cc:27:cd:18:f1:a0:70:81:5a:
         64:93:93:d5:bf:be:e2:53:26:34:b7:db:e8:1d:70:0b:e3:95:
         dd:ab:97:da:98:5d:e4:3c:57:ec:b8:db:05:bd:22:16:95:91:
         8e:48:fd:b3:26:0c:b6:86:04:cf:bc:be:30:20:22:f7:63:67:
         9a:df:fa:87:1e:29:74:a2:df:4a:59:aa:f3:f9:89:c6:f0:9f:
         a3:d1:ae:46:7b:6f:54:18:c5:4e:78:d6:c0:7e:bc:c1:a4:3e:
         f6:75:57:f3:0a:37:6f:60:5d:40:56:51:9b:63:b0:58:44:e8:
         23:14:c6:0c:28:28:59:85:d5:9c:05:07:cc:f2:68:8b:38:a8:
         a4:75:06:ec:b6:45:27:71:18:6a:99:f2:dd:e2:61:a2:13:01:
         68:60:af:d3:90:4a:ba:e8:2e:b1:b6:c6:44:53:58:67:b5:b8:
         2f:f5:6c:fb:25:11:5d:3b:36:1f:fa:fc:cd:1b:1a:2d:38:3a:
         3b:5e:85:dd:dd:64:4a:cd:fe:5e:68:87:87:2d:7d:23:86:84:
         61:eb:4d:92:46:79:b3:da:7f:53:c7:4f:ea:9a:bc:60:46:e7:
         86:82:14:f7:48:ad:b3:d0:0a:36:3a:4c:8d:5e:34:4f:21:fc:
         6b:c3:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:57 2026 by rpki-client