Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
File:                     XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json)
Hash identifier:          TVAU1UsMpdYmssHTdMf1ZT4i4BD1oOW6KX5Agj1HtsQ=
Subject key identifier:   75:83:C5:2B:AD:7B:2C:92:BC:5F:85:B4:4E:2C:42:2B:C3:0E:99:34
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Certificate issuer:       /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
Manifest number:          3F
Signing time:             Thu 19 Feb 2026 06:41:29 +0000
Manifest this update:     Thu 19 Feb 2026 06:41:28 +0000
Manifest next update:     Thu 26 Feb 2026 06:41:28 +0000
Files and hashes:         1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: TKkg5ka+VRZ/rxnVNsB4g/ofdSvQBQxCyzDgvkg8brw=)
                          2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: KRwjwSWWBywAGAbXEKvDlNQZp8JppNvRq0fzU/i7zgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
                          rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
        Validity
            Not Before: Feb 19 06:41:28 2026 GMT
            Not After : Feb 26 06:41:28 2026 GMT
        Subject: CN=6996b099-c324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:40:e1:2b:3b:71:06:58:24:40:ea:83:f1:
                    a7:60:9d:f6:f3:af:a6:e1:db:b2:99:91:8f:10:78:
                    c4:4d:ca:e5:35:45:3f:f7:4a:9b:fd:bf:6b:38:d6:
                    de:67:a0:cc:26:21:c8:8c:4c:5e:8f:e0:7d:7f:07:
                    40:70:8b:72:1a:1e:40:b5:ef:7e:85:d9:78:cc:1a:
                    68:6b:f0:09:3f:07:0c:fb:a2:41:3a:59:85:ef:29:
                    21:71:1b:70:19:1b:72:5d:cb:5b:4a:0e:da:cc:16:
                    e9:60:20:f2:5c:17:10:35:84:4b:99:e7:8a:13:b8:
                    93:94:63:07:7d:58:79:c4:48:16:c2:40:44:ec:ab:
                    4c:67:0e:0e:46:36:ff:c6:2e:02:dc:61:99:96:1e:
                    3b:dd:7a:98:5e:be:33:5f:c9:18:15:a8:07:d5:c4:
                    75:c8:df:14:a7:ec:6b:f3:8b:37:a0:64:0a:f6:7f:
                    ad:1e:ac:76:e2:3e:9d:f2:db:e0:5f:61:f1:de:53:
                    37:84:53:65:1a:63:93:f0:0a:6b:fd:fe:45:da:42:
                    ad:40:12:3b:b7:bd:5a:ff:e8:3c:49:7e:a3:e3:3d:
                    89:b8:c7:4f:3c:7d:b0:9f:7a:9f:26:84:25:74:a9:
                    e3:d1:8f:44:26:bb:3b:f7:5e:b7:5d:90:b7:a2:45:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:C5:2B:AD:7B:2C:92:BC:5F:85:B4:4E:2C:42:2B:C3:0E:99:34
            X509v3 Authority Key Identifier:
                keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:50:25:1a:1a:0f:48:4c:b0:14:ed:21:61:74:2d:78:27:
         ab:33:63:9f:21:71:b1:f7:b7:55:45:81:a8:d9:f8:d3:33:93:
         aa:d8:c4:47:79:55:45:1e:30:56:8a:9b:e3:b3:21:96:6a:61:
         86:4c:d4:57:89:d3:8b:90:11:5b:e0:cf:15:2e:a0:1d:2a:7b:
         3e:6f:10:a6:79:75:66:45:64:e9:b2:50:24:df:75:fb:03:55:
         6c:e5:3d:78:e7:b0:5c:6b:7f:0d:5b:e2:0f:e7:5c:b3:bc:01:
         66:45:a2:c4:bd:80:ad:82:2b:0e:7e:c8:12:6f:0f:4f:b7:82:
         b3:22:0e:b0:38:cb:92:ec:7f:41:6e:8a:fa:8c:1c:73:39:02:
         c1:d7:70:19:54:af:7b:cf:74:29:aa:d6:02:d5:c1:1a:44:c4:
         69:80:0f:ea:8e:e1:1e:3d:f2:7e:21:2c:68:2d:c2:2c:5d:0e:
         68:8f:52:80:94:3f:df:fe:32:4f:f1:f5:7c:44:da:63:e9:e5:
         e7:a4:8c:a0:7e:39:77:f5:03:02:12:a4:9b:38:37:ba:d4:98:
         ee:b6:09:95:c6:08:6f:b4:b4:cc:70:15:1a:5c:0f:a7:2c:51:
         59:c3:04:4a:a9:ac:ef:29:31:ba:53:38:31:13:e3:96:71:6e:
         39:4b:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:39 2026 by rpki-client