Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          nD7kO/3tIuulcVm5P28LDFb6RINJNqVvAwYEepSpkaQ=
Subject key identifier:   20:B3:FA:69:9B:38:F5:2A:E8:9C:96:04:2B:CC:97:E5:5E:54:42:71
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          0821
Signing time:             Wed 18 Feb 2026 20:26:10 +0000
Manifest this update:     Wed 18 Feb 2026 20:26:09 +0000
Manifest next update:     Wed 25 Feb 2026 20:26:09 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: FY5dLJ390tXhygOJDRMha6OZ/3qRXuMuNBRFkncGqcU=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Feb 18 20:26:09 2026 GMT
            Not After : Feb 25 20:26:09 2026 GMT
        Subject: CN=69962062-6691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:39:1c:42:e1:90:e3:33:1b:89:88:88:0f:
                    c0:08:6a:85:3f:c4:ab:31:19:ac:d8:99:f3:3b:2b:
                    9d:d3:51:f2:66:15:d4:d1:3c:de:a8:c2:69:f5:4d:
                    8b:e1:7c:83:9c:99:0e:24:55:0d:e9:9c:7d:82:0d:
                    11:99:49:c2:07:6c:b3:04:d6:27:33:2b:46:77:95:
                    73:5d:a3:19:6c:d0:6a:d2:c3:d9:03:8a:f3:8f:71:
                    95:7a:a5:a5:6a:f4:28:b0:48:0c:5e:9f:ef:aa:77:
                    90:51:f9:50:4d:b7:63:70:4f:3c:f0:0d:7b:f9:e0:
                    e3:4b:02:a1:b8:0f:1f:57:e2:7a:42:61:5c:b8:a9:
                    d9:3b:f5:62:c6:dd:62:9b:57:17:02:f9:e4:b3:6c:
                    39:bf:2a:e4:aa:2b:b2:f8:b5:df:23:cc:74:2d:4b:
                    8d:45:ea:d4:6d:87:cc:3a:88:b7:ac:24:a2:8e:d4:
                    6c:55:c7:9c:5e:e8:14:67:d6:7e:ef:1d:ff:92:c9:
                    48:98:df:83:ab:1b:ef:23:26:b6:aa:c7:4b:70:ac:
                    65:06:57:4f:d0:4e:71:a3:75:f8:94:e1:e7:9b:4e:
                    90:d8:18:51:2a:1c:30:38:cc:b9:cd:ce:4f:a0:69:
                    c2:53:26:9f:74:af:a4:1d:dc:4e:03:77:d6:ee:83:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B3:FA:69:9B:38:F5:2A:E8:9C:96:04:2B:CC:97:E5:5E:54:42:71
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:cb:15:0c:39:3e:9b:0e:00:8b:d4:07:00:d6:0a:95:22:
         4c:75:e2:83:64:7a:b0:da:b6:45:85:14:ad:06:57:62:da:a9:
         6f:0a:f9:b1:8f:ed:8f:65:f8:25:22:e1:d3:be:26:45:56:18:
         b7:fb:ed:82:97:01:aa:bd:6f:0b:94:ea:a2:ad:b2:ef:73:73:
         fe:52:55:29:81:98:00:e9:0d:82:fb:e7:08:f9:99:ec:76:7b:
         65:cf:56:68:48:8f:17:29:ca:d4:8c:ad:49:ee:62:9a:f7:df:
         6b:23:3a:16:b6:75:4f:ab:a1:b4:9b:c2:71:45:e8:97:b4:3f:
         16:ad:55:69:6c:71:7c:c9:20:86:85:08:78:df:a8:a9:4d:76:
         4d:f7:19:b6:c8:4b:86:b5:c8:da:42:45:fd:a4:96:2b:78:4a:
         00:bb:3a:80:d6:26:4d:d0:29:b0:4a:d6:df:2b:27:d1:e0:c5:
         d1:94:8b:90:00:0f:32:d6:c1:27:96:12:a8:09:0b:92:ab:a5:
         c1:1b:1e:7c:81:39:19:ee:24:26:ae:46:20:34:1e:d7:c5:8e:
         e8:f9:a0:a3:d4:af:7b:18:8c:e5:ea:f0:ea:ad:af:06:4c:27:
         a8:c2:ee:1c:e1:ef:40:1d:a2:e4:78:09:13:bf:f4:09:0d:08:
         c1:9f:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:24 2026 by rpki-client