Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
File:                     khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json)
Hash identifier:          ymrPbFOZAQIbqf/eNWLysjF2F6EqtKrZODK7wLfF99c=
Subject key identifier:   33:DF:D7:EF:76:59:76:2C:9A:22:A8:F9:11:EF:8C:E0:F6:7B:5D:DC
Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
Certificate issuer:       /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
Certificate serial:       042C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
Manifest number:          0422
Signing time:             Wed 18 Feb 2026 23:38:55 +0000
Manifest this update:     Wed 18 Feb 2026 23:38:54 +0000
Manifest next update:     Wed 25 Feb 2026 23:38:54 +0000
Files and hashes:         1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: f+jvFysVvnpZFqtprDLchjqcMJLfnSDoQJhQTkaJVno=)
                          2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: 1Pf8TzmStlNv8sOjb51A77gXMYXTgCciVVvajyk1hsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl
                          rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890
        Validity
            Not Before: Feb 18 23:38:54 2026 GMT
            Not After : Feb 25 23:38:54 2026 GMT
        Subject: CN=69964d8f-5b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:d1:bd:c7:87:cc:0c:77:be:4b:64:af:b3:
                    05:fb:42:ab:ee:9d:44:9e:6d:ff:86:d4:c5:6c:b3:
                    11:3a:ce:48:79:9d:0d:f8:8c:25:d2:aa:19:db:36:
                    1b:c9:82:26:73:f0:60:14:ab:45:1c:e8:31:2a:d4:
                    d3:5d:91:1e:ae:ff:b2:37:ee:79:49:39:0a:94:be:
                    27:07:9c:59:18:be:10:18:0a:82:81:e3:05:f8:7a:
                    9b:e7:10:31:03:a8:3d:b9:ed:90:f5:47:b1:21:62:
                    f2:03:b5:ba:3b:22:47:e5:92:11:04:32:84:1f:34:
                    15:ec:36:d9:5b:f5:d9:af:10:03:18:46:90:79:1b:
                    10:ca:49:66:23:b8:f7:f8:e2:4f:cc:c5:e9:5b:77:
                    13:38:42:08:c8:76:7d:47:8e:9d:6c:c6:7d:73:c1:
                    a6:67:d6:ab:34:05:8d:e1:76:51:80:94:08:68:09:
                    18:fe:f1:04:72:e9:e5:9e:2a:3e:af:89:6b:c1:9c:
                    81:55:ba:56:db:c1:79:cf:fa:84:34:c6:51:2c:4e:
                    09:c1:26:97:40:54:b8:54:16:f6:c4:62:60:d5:ff:
                    0c:df:09:02:b4:8c:f8:a5:5f:8a:20:0d:8f:3d:36:
                    b6:34:88:62:46:54:a1:79:fc:cf:2e:b7:e2:93:bd:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:D7:EF:76:59:76:2C:9A:22:A8:F9:11:EF:8C:E0:F6:7B:5D:DC
            X509v3 Authority Key Identifier:
                keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:37:9c:ce:a4:53:cc:5c:ec:69:8f:92:47:81:e3:e3:88:fe:
         03:66:c8:bb:6a:7b:13:f1:4b:d2:0f:5c:3c:f3:34:cd:04:06:
         3a:d8:9b:0a:37:81:82:b5:87:8a:54:14:72:de:99:d1:13:d7:
         c8:d0:ac:f2:b9:84:e0:79:dc:d0:fc:0f:eb:96:63:ea:a2:5b:
         ff:c4:22:a1:65:92:26:e5:ee:63:f7:de:50:28:e8:07:f4:c3:
         f9:8c:ec:4a:32:c3:85:af:ab:3f:ea:78:f0:8b:3b:eb:e4:ac:
         e2:8c:e6:6e:11:b8:23:e7:81:e9:0a:37:4a:ac:ee:73:f2:7a:
         b0:ed:f9:72:c6:d7:c5:d5:0f:fb:07:f8:39:f8:14:09:60:ae:
         af:e8:7f:e7:75:8b:63:c3:6d:b6:da:f2:4a:8a:b7:d3:9d:31:
         eb:f5:4f:a8:83:70:d8:a1:4b:33:03:8b:76:73:14:31:40:65:
         ab:5f:9f:01:3c:17:d0:5e:05:0f:58:00:2f:05:c8:63:47:af:
         3d:c4:d3:f2:67:77:a4:2f:05:10:5a:9e:7f:86:b5:cf:f1:a6:
         b0:85:d1:99:56:93:3c:4d:cb:39:89:a4:df:f9:5e:0c:7d:8e:
         bc:33:d0:12:4c:be:67:d2:59:df:b2:81:cf:c9:81:e2:81:da:
         e6:45:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:40:40 2026 by rpki-client