Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File:                     pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier:          N4XfNy71cPJFE5KAnSRZ+hbzuSIjKBAboSH5+fL1J9s=
Subject key identifier:   12:43:82:32:9C:B0:A8:A6:91:43:CA:A2:BE:DF:E2:88:DF:F7:AE:7A
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer:       /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number:          065C
Signing time:             Wed 18 Feb 2026 21:56:25 +0000
Manifest this update:     Wed 18 Feb 2026 21:56:24 +0000
Manifest next update:     Wed 25 Feb 2026 21:56:24 +0000
Files and hashes:         1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: S1dEzXzJ24wsZXFF5cb4OkxrYnPAGOeNmRVFy9qoVNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
                          rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
        Validity
            Not Before: Feb 18 21:56:24 2026 GMT
            Not After : Feb 25 21:56:24 2026 GMT
        Subject: CN=69963589-e9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:68:32:69:9b:bd:6c:6f:69:cf:d0:ca:38:
                    33:3e:f2:f0:59:6f:3a:79:8f:b8:2c:41:15:85:7f:
                    fb:2f:37:84:4a:98:c3:f2:d7:2b:a0:a1:b7:45:3a:
                    ed:3b:0a:03:03:34:97:aa:cb:b0:07:df:58:4e:a7:
                    0d:81:9e:85:ac:66:09:59:b6:a2:07:08:33:81:81:
                    13:6e:f1:75:29:ef:bc:7f:8c:5e:04:c0:a0:23:32:
                    a8:e2:a3:23:b7:6b:f7:4b:88:71:b9:11:75:0f:cb:
                    06:90:fc:3c:e6:d7:ea:a3:08:32:36:c4:77:62:1a:
                    0b:bb:1c:a5:43:ae:b1:2a:f3:57:e1:18:e9:2b:c7:
                    d5:c5:64:c9:99:e4:bb:c8:98:1f:4c:fc:26:a2:83:
                    aa:06:21:47:b9:a4:64:8d:16:37:77:f2:b5:78:a2:
                    2c:7e:61:9f:66:a7:74:4e:a7:93:07:91:51:aa:5d:
                    e4:88:4b:af:17:a6:77:99:14:86:41:c8:36:34:fa:
                    f0:e3:a8:17:1b:c6:ea:96:57:00:d9:48:63:14:87:
                    05:fb:dc:3b:a2:57:d0:d5:48:05:78:d2:97:db:1a:
                    9e:ae:19:ef:7e:9a:d5:5e:c3:3e:e5:d9:9e:7c:45:
                    a7:e4:bb:ac:1a:9a:2f:3f:24:bf:f9:23:2e:cc:85:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:43:82:32:9C:B0:A8:A6:91:43:CA:A2:BE:DF:E2:88:DF:F7:AE:7A
            X509v3 Authority Key Identifier:
                keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:9c:02:90:ba:ff:a1:34:ee:53:c8:26:18:e3:a6:31:74:
         f1:cc:f9:77:46:42:d2:99:be:55:ce:95:20:21:77:03:40:61:
         d3:b2:81:6a:bc:22:8a:09:70:4f:a1:38:a3:5a:19:95:50:6f:
         e1:61:6f:73:e1:46:46:25:0a:fc:24:d9:56:0b:3b:6b:1a:90:
         34:99:26:29:0f:50:e8:9b:9a:20:01:07:b9:4d:72:09:9b:9c:
         8b:d5:92:c2:d6:b4:e5:ae:d6:5b:a4:66:c9:68:9a:ca:4f:9b:
         00:1d:c4:a5:55:0e:6b:dd:1d:b7:da:07:ff:4b:34:f6:30:3e:
         2e:d2:71:61:6a:55:0a:5d:a8:9a:91:ae:f2:83:aa:41:ab:35:
         fb:ea:c6:d4:78:15:25:d1:ac:7f:99:a7:16:a8:9a:d6:c6:57:
         94:c1:11:f6:30:a4:03:c1:a8:86:a2:0e:b0:f8:c7:b9:8e:9d:
         9a:4c:3b:1e:f4:43:72:73:1a:1d:5c:f5:90:3c:cd:a5:14:d6:
         2d:0b:fc:be:5e:e3:09:3a:51:4e:5b:88:45:ed:77:a9:5c:8f:
         03:14:b6:c2:26:66:6c:59:91:60:dc:32:40:9f:94:0b:a0:ff:
         c8:f4:73:4f:8c:ec:f0:9d:2e:d2:e7:52:a5:bc:2e:58:4f:53:
         4d:9c:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:23 2026 by rpki-client