Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File:                     3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier:          jOELe0Gxjfrnufo77ZizF7MCh02+zxttiZNdShXG3hM=
Subject key identifier:   AF:6A:FA:4B:41:38:E1:7E:F8:E0:DA:81:42:37:B1:7C:BF:EB:54:CE
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer:       /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial:       0C84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number:          0C75
Signing time:             Wed 18 Feb 2026 18:15:00 +0000
Manifest this update:     Wed 18 Feb 2026 18:15:00 +0000
Manifest next update:     Wed 25 Feb 2026 18:15:00 +0000
Files and hashes:         1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: TiSXnrZklXLIsbyg8K1B9Nd6rSIjkjV0qSkqyW3xcMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
                          rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
        Validity
            Not Before: Feb 18 18:15:00 2026 GMT
            Not After : Feb 25 18:15:00 2026 GMT
        Subject: CN=699601a4-0068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:ec:61:fc:65:9d:76:dc:79:9b:b9:04:6f:
                    ed:58:ba:75:05:86:51:82:a6:c6:66:8f:9b:ec:95:
                    f2:c7:08:f0:fa:66:a2:31:54:8e:28:86:25:33:7b:
                    29:03:50:7b:d8:1d:62:2b:65:0e:96:67:87:51:f1:
                    ef:a0:d3:16:54:79:ab:45:b5:7a:f8:c8:5d:f6:6f:
                    01:85:b2:22:8d:ac:a0:41:55:d5:70:31:75:62:76:
                    a0:e5:55:9c:a7:bb:00:28:b6:ca:23:d1:df:0e:d8:
                    89:fe:7c:1c:00:66:86:64:2c:b0:e6:5f:6b:3b:0c:
                    a7:95:82:71:b9:3f:6f:61:36:27:51:f6:ed:41:5a:
                    0d:07:a5:66:6c:d8:35:8c:0b:60:82:d0:d2:41:eb:
                    54:88:76:d0:ac:ab:f6:5f:94:b3:a4:c8:32:ee:3b:
                    c4:67:86:44:21:e3:3f:be:44:16:b8:3e:79:82:c5:
                    0d:ba:61:9b:0e:95:d6:eb:57:fb:b7:0c:cf:39:e4:
                    9f:de:f6:19:45:72:5e:c5:c6:80:0a:ee:2d:98:e5:
                    61:f8:b2:17:85:84:69:4d:3f:e9:cd:22:84:42:c1:
                    43:ee:78:63:ef:e6:ae:09:c1:c0:84:cc:c0:e8:d1:
                    45:d8:09:a9:d3:91:de:e0:57:ff:d8:e1:4e:82:c5:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:FA:4B:41:38:E1:7E:F8:E0:DA:81:42:37:B1:7C:BF:EB:54:CE
            X509v3 Authority Key Identifier:
                keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:28:b2:85:0f:f6:f3:fa:ae:b5:45:5e:0a:50:f9:67:b4:
         5c:a7:2d:c7:74:32:79:d9:3f:9a:b9:2a:76:00:06:96:bc:a9:
         ad:ee:fb:8d:69:82:1d:99:ed:c7:0e:1f:cc:b5:4a:99:7a:87:
         b1:9f:4e:86:02:09:0a:10:a1:a4:13:34:28:fa:d0:5f:66:63:
         a6:73:75:a7:bd:ee:a3:be:1b:8d:14:69:79:45:60:1b:6a:07:
         44:d1:e0:22:36:01:ec:b2:64:7f:49:ef:61:02:6a:83:f9:c6:
         30:f9:fe:28:a0:71:03:00:60:82:a4:64:4d:4b:38:1f:76:85:
         5d:44:a5:06:d7:3c:88:6c:53:0e:3e:0b:29:b4:51:22:ab:84:
         63:01:6d:53:10:27:a9:c6:96:71:18:df:11:b5:86:4e:9a:9a:
         fc:a0:56:dd:50:9d:a5:1d:4d:c1:fc:93:46:02:05:98:d5:2c:
         93:3f:c5:24:5d:05:71:26:19:f1:44:6d:9b:ad:78:12:85:af:
         d6:84:50:3e:6b:f1:85:ca:4a:cc:df:8d:71:5e:e3:73:36:9d:
         10:8e:f3:5b:f7:da:b5:6a:9b:2b:79:e4:34:fd:dc:7f:6c:d5:
         5c:ef:d3:0f:10:28:5e:92:55:fe:59:d3:51:5b:63:e4:68:35:
         12:d8:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:46 2026 by rpki-client