Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File:                     sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier:          2EF3IZzoHL3xDyobdHnUN/dsH48LEoLDUi6G33xhQes=
Subject key identifier:   AE:73:54:73:32:F4:A1:3D:66:6B:23:0B:D7:86:7D:62:59:0C:D7:3E
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer:       /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number:          28
Signing time:             Thu 19 Feb 2026 07:00:26 +0000
Manifest this update:     Thu 19 Feb 2026 07:00:25 +0000
Manifest next update:     Thu 26 Feb 2026 07:00:25 +0000
Files and hashes:         1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: ezqwmnvsj1+5U3u3VkqNKhZfQvG5vQF1MscW0L9eJi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
        Validity
            Not Before: Feb 19 07:00:25 2026 GMT
            Not After : Feb 26 07:00:25 2026 GMT
        Subject: CN=6996b50a-33b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:df:2a:e0:9f:93:6c:e5:a4:4c:ad:4b:ba:
                    49:cf:81:71:32:08:3d:9d:36:8f:92:25:47:3b:e7:
                    f3:e5:c2:f2:77:4f:8c:51:ad:be:fe:4d:13:59:3e:
                    5e:dd:75:f1:8a:73:46:4c:4d:09:6e:48:f2:0c:2d:
                    66:77:57:aa:3b:05:5a:3a:93:91:23:57:ce:a0:89:
                    88:3b:64:35:d7:5d:8b:7e:07:7a:d0:8d:90:57:f2:
                    88:0e:bd:f8:5c:8f:08:0e:3d:44:a8:7b:0f:15:85:
                    58:2b:03:1b:e6:5d:8f:1d:e6:fa:0a:9f:9c:da:62:
                    d3:7b:71:22:10:38:3c:83:99:ce:d8:55:0e:30:a3:
                    e0:b8:3d:e2:e9:7a:08:13:3a:05:b9:59:f9:41:96:
                    0a:86:7d:41:9f:93:8b:c0:d3:99:e5:2b:38:1e:5b:
                    e5:57:0a:09:86:32:ac:06:14:79:4d:f7:de:de:9d:
                    2b:aa:de:79:9c:0a:ec:8b:76:95:2d:e3:55:56:b2:
                    44:79:c3:a2:ed:8f:f8:af:f4:1e:bc:c9:b4:44:46:
                    ba:27:f7:f9:28:53:26:e6:54:b0:6d:75:5f:01:11:
                    0d:9e:8b:b7:57:6a:cb:a2:f1:9b:e6:c4:9b:83:0d:
                    3c:56:1d:43:ab:71:60:04:3b:2a:6c:3d:b1:e3:9c:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:54:73:32:F4:A1:3D:66:6B:23:0B:D7:86:7D:62:59:0C:D7:3E
            X509v3 Authority Key Identifier:
                keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:2f:ed:88:9f:39:76:e4:fa:04:3b:5d:0b:b0:55:79:77:
         75:30:9b:6d:23:3a:f3:1c:66:42:a4:9d:73:f6:f0:4c:c5:00:
         bd:c0:7b:ba:a1:6d:87:6f:89:30:7c:f9:26:83:9f:ef:91:57:
         59:aa:08:74:50:b3:12:3f:04:d7:6c:bf:78:9c:fb:6e:73:3c:
         d4:d0:e4:fc:e8:33:54:b8:a7:a9:4a:f4:77:7f:e3:51:38:17:
         36:ad:3b:6e:06:95:f0:8a:be:7b:15:78:52:38:26:7c:11:b2:
         83:a4:d5:85:86:61:aa:b5:ac:bc:fa:30:df:47:99:7b:16:c6:
         9a:80:19:fc:a7:fe:25:36:19:7c:86:9d:d5:13:71:b1:8b:48:
         fc:d4:75:06:c5:17:53:6a:a9:f0:c3:42:e5:5f:f1:3a:88:35:
         80:62:92:3b:2a:51:0b:41:ba:f1:b4:ea:c2:10:dc:00:6e:8d:
         68:b4:70:50:96:c5:3c:f1:6b:34:83:52:5c:93:73:24:08:63:
         d6:3c:49:f5:11:1d:f0:0f:58:13:b9:f1:75:d3:2f:5a:d4:80:
         c8:a3:6f:ec:ce:8e:a0:15:0e:68:e1:55:be:5e:25:37:6e:3a:
         63:d5:9f:53:7e:08:be:7e:ed:2e:fd:97:3e:45:54:35:f0:ec:
         f5:5e:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:59 2026 by rpki-client