Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File:                     yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier:          Z+utmNOmj8J5DUHQPWLEhYhI5BzlApw0a5cdb2I5uUY=
Subject key identifier:   3A:DF:43:E3:B6:29:2E:7E:10:C0:94:68:EE:C3:89:EA:47:9E:0C:A9
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer:       /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial:       0C87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number:          0C7D
Signing time:             Wed 18 Feb 2026 18:13:11 +0000
Manifest this update:     Wed 18 Feb 2026 18:13:11 +0000
Manifest next update:     Wed 25 Feb 2026 18:13:11 +0000
Files and hashes:         1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: hWVRk+7Gp/Rl5Sk/d1tDvBbgRR932JuyCaOqmBBSebc=)
                          2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: oTWmtO2mgStqeMj6jPmXnnLNrPwchhiOjUM05tQ62SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
                          rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3207 (0xc87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
        Validity
            Not Before: Feb 18 18:13:11 2026 GMT
            Not After : Feb 25 18:13:11 2026 GMT
        Subject: CN=69960137-5113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:15:25:ec:c8:b4:c8:61:4c:d8:e3:e0:4b:
                    a9:7e:da:5a:40:8f:1e:5a:70:d6:cb:a5:12:99:46:
                    3b:04:95:87:9a:69:0d:8f:a2:5d:b4:70:4e:e4:4f:
                    35:b9:46:28:19:e1:32:82:97:73:2b:a6:3d:10:be:
                    68:0a:c4:92:e6:80:df:90:73:27:df:27:8d:b4:a6:
                    7c:13:2c:05:4f:be:61:b3:4e:79:22:da:f5:0c:39:
                    38:b6:6c:fd:17:2b:7e:4d:cb:55:50:e0:ac:90:ba:
                    63:04:84:29:e3:1c:a4:d3:f0:20:96:83:9d:67:da:
                    12:4e:94:18:6a:af:48:4c:87:f5:83:c9:a5:68:2b:
                    f2:bc:bd:a1:6c:09:0b:ec:a6:c8:ea:96:0d:fe:f7:
                    af:e3:20:21:46:2e:14:62:a8:99:b6:d8:05:73:d2:
                    16:98:9a:98:12:79:a5:e5:ec:2c:bf:e4:b0:75:05:
                    09:ee:ae:4b:8b:dd:d8:69:94:4f:08:15:9d:a2:f6:
                    ec:96:5f:d6:33:e3:49:66:61:06:b3:3e:c5:3a:ed:
                    ad:6d:51:79:c2:b3:1b:2c:03:9a:75:a7:bf:95:f0:
                    03:48:bd:a9:7c:a2:d7:66:93:5d:83:72:93:e1:8d:
                    48:be:30:e4:33:de:38:8c:57:b0:9e:ce:d8:06:da:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:43:E3:B6:29:2E:7E:10:C0:94:68:EE:C3:89:EA:47:9E:0C:A9
            X509v3 Authority Key Identifier:
                keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:23:46:87:fa:90:47:c2:cb:cf:c5:9c:18:7e:10:d3:90:a1:
         4c:9a:19:51:db:5a:a3:15:b2:81:02:c1:de:83:11:f1:7f:91:
         ab:e3:cd:cb:b0:a8:15:8a:6c:c9:bc:ba:63:c4:af:73:bf:7d:
         28:39:8e:43:3f:58:90:fb:2d:ac:60:87:ca:4a:66:24:c1:53:
         96:f3:1f:83:2a:de:85:10:29:27:63:7b:ed:60:36:2d:2e:f9:
         b3:1f:2c:11:47:d5:a6:c5:da:b6:e7:e7:00:44:5b:f2:62:3d:
         d4:b3:dc:5f:de:31:6e:d7:5f:5c:83:ca:f4:d8:6f:6c:92:f1:
         5b:75:8d:d2:33:8e:0e:d3:1d:1d:4a:33:1c:92:6c:d2:5d:1b:
         57:36:89:54:1b:a1:28:40:da:fe:a7:32:3e:2d:8d:06:85:ec:
         e9:c8:48:6b:b9:59:3f:ef:e9:ac:3e:7e:a0:9c:b5:e1:b7:3c:
         b9:8c:9c:db:6a:af:99:02:43:98:89:ad:24:0e:b7:f1:6f:24:
         d4:65:20:ea:3c:b0:1a:43:4b:e0:a7:ec:63:a1:b9:54:d1:dd:
         b7:44:56:fd:e2:ce:0d:74:95:47:d1:b0:9d:70:5a:19:af:f0:
         72:d1:6f:9f:1f:7a:f8:05:1a:7c:e4:90:d7:cb:17:53:32:b9:
         fd:10:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:38 2026 by rpki-client