Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File:                     XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier:          W7oMXl8wb9GloZb+1j0C9cSwY1DvkANRx3fppL2IKTQ=
Subject key identifier:   74:88:E7:79:95:84:29:A8:24:C9:D4:18:5D:B8:77:75:38:3F:5F:B9
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number:          0871
Signing time:             Wed 18 Feb 2026 20:08:03 +0000
Manifest this update:     Wed 18 Feb 2026 20:08:03 +0000
Manifest next update:     Wed 25 Feb 2026 20:08:03 +0000
Files and hashes:         1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: XJe02MEw5MEIy+wqoifyc8AfC0S97O7O4/CBRTe+n/4=)
                          2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: TEdKwP64TuQMUa2RFZqVEQD/HQzdAAlp9eIMPDVHh5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Feb 18 20:08:03 2026 GMT
            Not After : Feb 25 20:08:03 2026 GMT
        Subject: CN=69961c23-0b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:00:d3:e8:cf:08:01:ab:52:a3:67:04:fb:
                    f8:81:c9:c9:4c:cd:21:a5:77:c2:01:95:59:a6:6e:
                    16:e4:e4:22:2a:bd:f4:cd:cc:5e:7f:56:1d:ea:48:
                    bd:a6:4a:a8:0e:ae:c6:46:a0:02:0b:ee:c3:c3:df:
                    23:ed:e7:04:4a:33:3a:71:80:ab:e2:81:7e:84:47:
                    05:d2:99:28:c3:ee:82:8b:6f:07:b1:d8:1c:f1:f7:
                    49:d7:de:73:c7:e0:d9:dd:61:1a:7b:5f:9a:ef:af:
                    90:2f:65:18:8f:b1:db:0b:93:a2:f0:70:ff:d5:55:
                    0b:89:0b:42:86:1d:3c:cb:5e:d4:63:28:1c:3a:c6:
                    83:8b:0e:b7:ba:18:0b:88:7c:9d:f5:0a:71:80:2b:
                    96:5a:bc:35:f6:fb:1b:eb:af:57:27:cb:b2:79:aa:
                    eb:dd:f0:6c:4d:35:94:ee:9f:1a:2f:9b:b2:43:16:
                    b9:25:a6:ff:39:0a:cd:d2:0e:ec:00:ae:40:4f:2e:
                    5f:e5:92:ca:5d:84:31:ea:5c:dd:09:79:16:4f:ae:
                    9e:f6:a8:bc:59:58:12:ea:97:6b:aa:5c:5d:07:7b:
                    60:55:34:06:12:17:4f:67:4a:b4:e8:77:28:43:23:
                    2e:18:8f:a9:02:1c:ab:86:60:22:79:76:e9:47:e4:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:88:E7:79:95:84:29:A8:24:C9:D4:18:5D:B8:77:75:38:3F:5F:B9
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:5f:29:2f:d9:a6:b9:89:b8:ba:ee:aa:24:ed:5b:3b:b4:
         f7:33:8d:f9:e2:0c:f4:96:4c:8a:25:5f:53:6e:2b:dc:07:ca:
         f0:0d:c4:57:12:bd:66:4c:be:03:cf:a5:12:c0:50:cb:4b:5e:
         16:57:4f:c6:1e:3a:4d:9b:7c:07:70:85:9e:5d:7e:dd:49:4b:
         1e:da:e8:8c:92:d6:8e:7a:d8:4c:5d:93:a1:a3:4e:0f:1f:5a:
         e7:6d:10:26:40:7c:ff:10:bf:16:f4:4c:00:61:f1:5f:6c:7e:
         9f:48:8d:76:01:58:47:1a:fa:64:f6:9a:e2:52:d8:fa:b4:1e:
         f8:10:97:95:15:49:8e:43:06:c1:bd:4d:b3:00:96:4c:a5:65:
         76:2a:41:b9:08:6f:f3:58:02:10:a6:f2:d8:ed:88:c3:0d:dc:
         0d:0e:93:df:f5:7a:15:bd:e6:18:69:7d:dc:c7:e2:a0:a5:9e:
         ec:08:e3:ee:49:d1:b5:18:23:86:eb:ec:fe:55:b4:cd:e8:0b:
         21:7c:61:6f:dd:1e:41:1e:db:44:1e:e9:d5:98:ec:f7:86:1f:
         a1:a2:75:79:ff:f4:0d:54:87:55:48:30:10:ff:d6:82:c2:d8:
         ae:b7:7b:d3:05:f1:0f:8f:21:b9:62:f9:94:09:9f:be:ef:f6:
         41:a7:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:52 2026 by rpki-client