Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          DIGGd7sgJ5GdztE9EwZpxIdpeCQd+7WgpWLaYmfKua8=
Subject key identifier:   06:21:42:88:EE:0F:71:AF:2A:41:36:EB:61:74:44:F2:F2:ED:B1:DF
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          06E3
Signing time:             Wed 18 Feb 2026 21:34:52 +0000
Manifest this update:     Wed 18 Feb 2026 21:34:52 +0000
Manifest next update:     Wed 25 Feb 2026 21:34:52 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: Kr0CfgAJpSoT2kApoXIf0cktVcGowW95DQKTwSt0z9M=)
                          2: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: qipSSQxMstcxImncv3ERN59dcwsMWAjm/3eIM/KsWS0=)
                          3: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: nj7j8A4vYzlgJNGbNAab7b1lizCiJYJdhRTV66PwbUM=)
                          4: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: TokMDzHDq6Nns4yUuIr21XNja5Ve6eX3eaNJF0dtVko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Feb 18 21:34:52 2026 GMT
            Not After : Feb 25 21:34:52 2026 GMT
        Subject: CN=6996307c-9e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:a9:46:e6:38:ae:e0:1d:05:e2:07:1b:7e:
                    c7:ae:30:a6:b7:62:10:78:98:f3:d9:31:df:c0:22:
                    29:e2:9d:d1:ba:a1:2a:c8:fe:3b:77:bc:31:c4:38:
                    ed:6f:87:8d:3c:a9:db:6f:f2:06:57:9d:ed:4f:89:
                    ab:71:e6:aa:79:fb:22:df:11:d2:cb:0e:62:80:c3:
                    c2:b2:66:8f:3d:00:08:22:13:ea:5d:aa:3b:ce:81:
                    57:a4:09:a3:5b:2a:7d:7d:df:72:1e:3b:55:2c:cf:
                    52:f0:75:6c:02:91:aa:38:ad:c8:90:ed:ad:29:c6:
                    d5:ad:75:73:a6:35:9d:ec:f4:f5:a1:b3:00:77:3f:
                    1a:ca:32:f9:bb:ea:24:74:b8:09:18:14:e1:10:10:
                    ba:fa:46:06:b9:77:22:4e:70:96:da:aa:a5:7b:e4:
                    34:9c:fb:d1:e7:22:2a:17:47:5e:30:17:4b:21:33:
                    89:41:66:2b:5b:92:b3:ea:94:24:82:24:56:e8:c6:
                    51:7c:27:50:90:bb:25:e5:76:f4:f9:5d:91:67:9d:
                    81:51:7c:19:fe:14:f2:ff:e8:f8:8a:95:f8:1e:96:
                    15:a4:96:d7:bc:2a:57:94:b3:b9:5b:e4:1c:d2:55:
                    37:e1:22:4f:f9:e4:7c:0a:ba:99:5e:61:78:44:59:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:42:88:EE:0F:71:AF:2A:41:36:EB:61:74:44:F2:F2:ED:B1:DF
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:a4:4d:51:2a:f7:df:74:f5:04:f6:45:2e:38:49:c5:1b:
         d3:ba:46:5e:e3:4d:a8:d7:6e:a7:e6:ad:9c:00:1a:f4:1b:60:
         48:22:8f:ec:9c:a7:ac:0c:bb:bb:42:20:8c:d9:03:83:7a:c5:
         02:e8:a0:5a:79:94:2d:6d:6d:43:8d:c5:15:b5:f7:22:2d:2a:
         34:99:f9:47:a6:d3:8e:7e:37:8d:e2:51:1f:2d:b9:2c:91:11:
         e4:ae:c3:7c:21:64:c7:f9:09:fe:3f:1b:89:4d:df:2d:92:a2:
         cc:26:f8:33:07:b4:90:05:ad:48:32:ed:a8:88:83:ea:04:77:
         73:85:78:e4:cd:56:12:96:c2:8e:ae:7a:1f:33:f5:d3:e3:84:
         69:41:10:34:a9:26:4c:85:96:16:20:80:99:9c:8a:86:5c:df:
         e4:cd:59:21:f7:63:e2:6f:1b:9b:8e:5f:4c:a0:12:96:13:47:
         37:9f:f2:73:dc:88:71:e5:e3:90:90:27:76:04:34:f4:4e:56:
         e6:01:3f:f0:0a:fe:0c:53:c0:9c:b0:cf:72:c0:96:a5:af:92:
         69:7d:47:ad:9e:ea:d2:c5:a3:67:de:8b:52:c3:b1:4a:87:86:
         12:84:46:89:f4:00:66:e6:46:92:f2:19:58:fc:e7:19:df:0d:
         2d:84:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:00 2026 by rpki-client