Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft
File:                     LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft (raw, json)
Hash identifier:          Ss6BD3s1aRDiJAp11wXVbtzB8+ejPPECJ92uUX3yAmk=
Subject key identifier:   9C:C2:CB:BA:60:80:A1:56:E6:37:8C:59:63:5B:6A:7E:8F:6E:E5:64
Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7
Certificate issuer:       /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7
Certificate serial:       02BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft
Manifest number:          02B9
Signing time:             Thu 19 Feb 2026 00:37:06 +0000
Manifest this update:     Thu 19 Feb 2026 00:37:06 +0000
Manifest next update:     Thu 26 Feb 2026 00:37:06 +0000
Files and hashes:         1: LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl (hash: N+RnxWkk0OWjnrCzIOuwIS2YprutTmxzW7YXm7jPT/k=)
                          2: 49CEB44A28D111EDB364C870C4F9AE02.roa (hash: v8A7o/rziUd18ChafwKVVQdaKCqkH9AmkhbIbCG9hCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl
                          rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7
        Validity
            Not Before: Feb 19 00:37:06 2026 GMT
            Not After : Feb 26 00:37:06 2026 GMT
        Subject: CN=69965b32-5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:b0:15:60:2d:02:fa:4a:36:d2:f0:cd:20:
                    3b:7a:f0:27:3c:25:65:f1:23:c9:cb:e2:42:0d:c8:
                    28:7d:26:d2:20:60:cb:8c:9c:b1:b7:27:d0:00:82:
                    3a:e0:9a:b3:cc:7f:79:9c:f2:04:15:9e:8c:35:c2:
                    5a:2b:95:bb:cf:a3:ae:e6:0e:a2:72:7d:30:07:97:
                    27:f7:8f:ab:4f:8f:24:b3:d7:c2:a1:a3:b9:f0:9c:
                    2e:c5:76:b9:95:b5:83:25:3e:f6:c8:6d:f1:cc:c7:
                    42:cb:d3:72:1a:98:ea:ba:24:e6:aa:f0:5d:b1:e3:
                    12:01:ce:3f:42:02:9e:e0:c3:85:b0:20:f2:8a:f1:
                    21:b6:5b:e9:01:f8:82:70:21:ff:61:60:d2:66:95:
                    87:1d:59:8b:6a:5c:56:5e:4f:7d:25:83:98:5c:68:
                    01:4a:d0:52:3a:bb:d7:ab:3d:a9:cd:24:98:a2:94:
                    ac:06:69:73:d2:9f:91:8a:aa:23:1d:97:1f:05:71:
                    8a:5e:c6:2d:b9:e5:57:8a:f9:82:4b:50:9f:cb:50:
                    93:ce:ed:cd:75:55:1e:26:5d:e8:3a:75:ae:fd:f4:
                    65:07:7c:4a:46:0e:ba:d8:b5:b9:33:08:91:4b:06:
                    d8:7b:c5:f2:10:31:1e:85:1a:44:9b:84:5d:9f:72:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:CB:BA:60:80:A1:56:E6:37:8C:59:63:5B:6A:7E:8F:6E:E5:64
            X509v3 Authority Key Identifier:
                keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:b4:d9:51:44:ff:88:c5:73:40:ee:f2:53:f4:9c:38:45:
         89:cb:dd:45:70:c7:1e:5e:62:f8:7b:3f:93:15:1c:13:ef:ae:
         b5:f8:dd:a9:3f:82:b3:71:6e:48:a9:b3:f7:71:fe:05:0f:09:
         a9:39:99:0e:0d:b9:6c:cc:ff:2d:14:d5:7f:e7:dc:2f:3c:93:
         df:b8:b1:7d:63:c9:98:78:e1:8f:a2:05:df:63:bb:99:b8:84:
         5f:73:8f:75:56:1a:ec:2d:b3:71:01:7b:3d:8a:4c:83:2a:b7:
         30:64:66:84:48:a5:56:31:d9:53:53:19:7e:42:b4:b9:eb:98:
         b7:4f:32:02:1a:b5:f8:d5:a2:4e:40:9a:d0:2f:84:e2:45:eb:
         b0:f7:26:0f:ed:aa:c8:0f:d8:47:4f:1e:30:5c:40:11:01:de:
         10:2c:5a:cc:9b:33:66:3e:fe:36:4e:b5:da:1f:16:97:b5:a3:
         c0:80:58:2c:b9:d7:82:75:6e:74:9c:bb:6f:60:be:69:ad:48:
         61:0e:8e:24:f6:fe:74:e6:cb:e9:e2:db:a2:d0:2e:e8:df:49:
         0e:27:85:0c:7b:eb:e7:cf:e0:c2:c7:2a:51:2e:b9:bf:1f:0c:
         eb:6e:49:d2:ef:db:57:cd:03:e8:c6:93:4f:b6:e4:24:28:76:
         47:ba:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:48 2026 by rpki-client