Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          O7L8bzO+EQxFgG7ksPvszZCCITEouzu8knu8pRvWXYs=
Subject key identifier:   54:D5:75:E4:98:F7:42:7F:52:6A:12:45:7D:6C:A3:3B:CE:44:A3:E5
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       04D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          04D3
Signing time:             Wed 18 Feb 2026 23:05:47 +0000
Manifest this update:     Wed 18 Feb 2026 23:05:47 +0000
Manifest next update:     Wed 25 Feb 2026 23:05:47 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: QpaCG7+mZrYiPjgJdAeLFkrI6i96bRUZ7oVxrLLAadw=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: Feb 18 23:05:47 2026 GMT
            Not After : Feb 25 23:05:47 2026 GMT
        Subject: CN=699645cb-7a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:06:3b:05:32:99:4e:0f:aa:8a:de:a9:b0:
                    8e:3a:4f:6d:28:0a:3a:4c:78:47:61:89:58:18:83:
                    de:d5:ad:40:40:d5:e7:64:3a:82:38:d8:b7:a5:b0:
                    d6:76:bd:59:f2:fd:09:4b:5d:dc:c5:03:d2:52:a7:
                    84:4a:49:ff:bf:f6:61:14:24:c2:1b:f9:2d:74:f0:
                    6b:74:03:6a:9b:fc:0c:c8:57:e5:12:b3:df:6e:db:
                    87:0b:bc:3d:d8:85:a3:7d:07:f2:52:f4:2a:64:9b:
                    08:78:75:63:bb:f3:df:fa:bb:af:cf:7d:b7:62:dd:
                    fe:9b:15:4b:ff:8b:1c:00:47:9f:85:44:25:5f:1a:
                    49:c6:b1:9d:20:d7:22:00:49:4e:a1:46:5a:32:84:
                    2e:78:81:4c:9b:1a:10:aa:f8:75:69:df:34:fe:bc:
                    7c:13:a7:ff:d6:e5:55:ce:71:02:4d:7b:cc:11:71:
                    73:32:25:a6:d4:9d:08:7e:e1:22:f7:28:4c:f5:e2:
                    61:7b:6d:4c:ac:53:02:83:dd:ea:07:a1:bb:d8:a6:
                    81:a9:4d:a7:40:68:45:2e:73:87:cd:23:f3:f0:31:
                    59:8e:58:10:d3:4b:33:1b:c3:9d:8a:f9:c0:6b:ca:
                    25:3f:83:e1:c0:08:a0:b0:4c:91:8d:f1:21:4d:f8:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:75:E4:98:F7:42:7F:52:6A:12:45:7D:6C:A3:3B:CE:44:A3:E5
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:d3:ea:8f:75:8f:43:c9:40:8d:fa:61:9e:af:59:09:51:
         c0:0c:97:3f:6b:9d:56:86:a4:af:58:cd:1b:78:96:00:9b:eb:
         3c:d5:df:0d:44:e8:1f:51:7e:00:6f:dd:af:c3:b3:91:cb:ad:
         cf:46:79:af:cf:16:94:ea:ca:d7:82:56:20:8f:0e:0c:30:13:
         d3:e1:b9:53:88:a0:65:61:d0:e9:bd:ed:32:54:fa:8d:74:85:
         d0:bb:5f:e9:4a:6e:f4:89:66:51:d8:6c:ce:ab:f5:83:79:09:
         c3:12:ec:e7:a4:af:d3:ff:6f:83:4f:af:95:b6:a5:ba:50:ae:
         61:cc:98:fe:b6:02:92:bb:ea:96:46:71:38:16:8b:09:98:a3:
         31:a1:03:35:6c:2b:64:54:b1:46:ae:7c:90:19:90:8a:b9:14:
         c1:b9:6f:89:60:bf:d2:7c:b6:4f:15:2c:ec:a3:4e:0c:b0:c5:
         8c:26:cf:e9:4c:e1:f7:bf:72:cc:e9:2b:a6:1c:d4:71:17:8b:
         3d:35:cf:16:17:2b:96:58:1f:ae:66:ee:ec:51:af:64:72:38:
         34:d6:e8:25:fb:f6:84:81:26:5a:c5:e1:da:da:3d:ba:d0:70:
         9e:22:7d:70:f0:6f:a4:d1:d0:fe:48:b8:6e:6b:8e:ec:0e:1d:
         9b:36:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:21 2026 by rpki-client